@@ -37,7 +37,7 @@ namespace keepass2android.services.Kp2aCredentialProvider.Passkey
3737 /// - The request came from the correct relying party (via RP ID hash)
3838 /// - User presence and verification status
3939 /// - Whether the credential is backed up and eligible for sync
40- /// - For registration: includes attested credential data (AAGUID + credential ID + public key)
40+ /// - For registration: includes attested credential data (AuthenticatorAttestationGuid + credential ID + public key)
4141 ///
4242 /// Structure per https://www.w3.org/TR/webauthn-3/#table-authData:
4343 /// - rpIdHash: 32 bytes (SHA-256 of relying party ID)
@@ -94,7 +94,7 @@ public static byte[] BuildAuthenticatorData(
9494 flags |= 0x10 ;
9595
9696 // Bit 6: Attested Credential Data (AT) - Credential data present
97- // Set during registration to indicate AAGUID + credentialId + publicKey follow
97+ // Set during registration to indicate AuthenticatorAttestationGuid + credentialId + publicKey follow
9898 if ( attestedCredentialData )
9999 flags |= 0x40 ;
100100
@@ -194,7 +194,7 @@ private static string Base64EncodeUrlSafe(byte[] data)
194194 /// - publicKeyAlgorithm: COSE algorithm identifier (ES256=-7, RS256=-257, EdDSA=-8)
195195 ///
196196 /// The authenticatorData includes:
197- /// - AAGUID : Authenticator Attestation GUID identifying keepass2android
197+ /// - AuthenticatorAttestationGuid : Authenticator Attestation GUID identifying keepass2android
198198 /// - Credential ID: Unique identifier for this credential
199199 /// - Credential Public Key: COSE-encoded public key
200200 /// - Flags: AT (attested credential data present), BE/BS (backup eligibility/state), UP/UV
@@ -217,9 +217,9 @@ IClientDataResponse clientDataResponse
217217 )
218218
219219 {
220- // AAGUID in RFC 4122 (big-endian) format, not Microsoft's mixed-endian format
220+ // AuthenticatorAttestationGuid in RFC 4122 (big-endian) format, not Microsoft's mixed-endian format
221221
222- public static byte [ ] AaGuid1 { get ; } =
222+ public static byte [ ] AuthenticatorAttestationGuid { get ; } =
223223 [
224224 0xea , 0xec , 0xde , 0xf2 , 0x1c , 0x31 , 0x56 , 0x34 ,
225225 0x86 , 0x39 , 0xf1 , 0xcb , 0xd9 , 0xc0 , 0x0a , 0x08
@@ -236,15 +236,15 @@ private byte[] BuildAuthData()
236236 attestedCredentialData : true
237237 ) ;
238238
239- // Append AAGUID + credIdLen + credentialId + credentialPublicKey
239+ // Append AuthenticatorAttestationGuid + credIdLen + credentialId + credentialPublicKey
240240 var credIdLen = new [ ]
241241 {
242242 ( byte ) ( credentialId . Length >> 8 ) ,
243243 ( byte ) credentialId . Length
244244 } ;
245245
246246 var result = authData
247- . Concat ( AaGuid1 )
247+ . Concat ( AuthenticatorAttestationGuid )
248248 . Concat ( credIdLen )
249249 . Concat ( credentialId )
250250 . Concat ( credentialPublicKey )
0 commit comments