So I've got myself some FIDO2 tokens to eventually use with OpenSSH and that works. However, you need to be administrator to access the HID interface on Win10 past 1909 or so or else go through their "WindowsHello" API. I've found two middleware libraries that almost build out of the box on Cygwin:
https://github.com/tavrez/openssh-sk-winhello https://github.com/mgbowen/windows-fido-bridge They both work on 64bit only (the first one builds on 32bit, but crashes, the second one doesn'tr even build). If anybody wants to have a look, here are the package sources on playground: https://cygwin.com/git-cygwin-packages?p=git/cygwin-packages/playground.git;a=shortlog;h=refs/heads/libwinhello https://cygwin.com/git-cygwin-packages?p=git/cygwin-packages/playground.git;a=shortlog;h=refs/heads/libwindowsfidobridge The build artefacts are on AppVeyor. There is a newer version of libfido (which OpenSSH uses) that should be able to use the WindowsHello. Corinna has patched it up to the point were it actually builds and OpenSSH tries to use it, but fails. I have no idea yet if the fail is triggered by something OpenSSH does or seomthing in libfido not lining up with WindowsHello. I have to get up to speed on how to use the fido-tools provided with libfido in order to see where things go sideways. Regards, Achim. -- +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+ SD adaptation for Waldorf Blofeld V1.15B11: http://Synth.Stromeko.net/Downloads.html#WaldorfSDada
