PocketFIDO WebAuthn Lab

Environment

Relying party

RP ID (defaults to this hostname)

RP name

Timeout (ms)

PRF inputs

Inputs are passed to WebAuthn as raw UTF-8 bytes; the browser applies the WebAuthn PRF domain separation itself. Inputs are not secret; outputs are.

Input A

Input B

Register (navigator.credentials.create)

Local label

User handle

User handle value (hex / UTF-8 modes)

user.name

user.displayName

residentKey

userVerification

authenticatorAttachment

attestation

PRF create-time evaluation

hints (in this order; omitted when none ticked)

security-key hybrid client-device

pubKeyCredParams (in this order)

ES256 (-7) EdDSA (-8) RS256 (-257)

extensions and options

credProps prf excludeCredentials = stored credentials for this RP ID

Extra extensions (JSON object, merged; a "prf" key is ignored)

Authenticate (navigator.credentials.get)

Credential selection

userVerification

PRF first

PRF second

hints

security-key hybrid client-device send PRF as evalByCredential (for every allowed credential)

Extra extensions (JSON object, merged; a "prf" key is ignored)

Stored credentials (public data only)

Ticked rows are used for allowCredentials and the PRF self-check. Rows for another RP ID cannot be used with the current RP ID.

use	label	RP ID	credential ID	alg	transports	attachment	rk	PRF	count	created

PRF status and comparisons

Each PRF output is reduced in memory to an HMAC under a random, non-extractable key created at page load, then the output buffer is zeroed. Only equality of those HMACs is shown. Nothing survives a reload.

PRF self-check

Uses the first two ticked credentials (or the two newest for this RP ID): (1) cred 1 + A, (2) cred 1 + A, (3) cred 1 + B, (4) cred 2 + A. Each step is one ceremony (one button press, so browsers that require a user gesture work).

Evaluations (this page load)

#	ceremony	op	credential	input	slot	UV	length

Comparisons

evals	relation	expected	observed	verdict

Last ceremony

Checks

Sanitized summary (JSON, no secret material)

{}