8000 Support for HID gadgets on Linux · Issue #122 · solokeys/solo1 · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

Support for HID gadgets on Linux #122

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
rgerganov opened this issue Feb 27, 2019 · 10 comments · Fixed by #131
Closed

Support for HID gadgets on Linux #122

rgerganov opened this issue Feb 27, 2019 · 10 comments · Fixed by #131

Comments

@rgerganov
Copy link

I wonder if anyone is interested into using an emulated HID device on Linux which is acting as FIDO2 authenticator. This can be done with the HID gadget driver and could be very useful for doing tests without real hardware. Instead of patching libraries to send HID messages over UDP, one can create a HID device and then read/write to /dev/hidg0. I had to patch only pc/device.c and it works like a charm.

If anyone is interested into something like this, I may start working on a PR.
@nickray nickray mentioned this issue Mar 4, 2019
Closed
@ghost
Copy link
ghost commented Mar 4, 2019 •
edited by ghost
Loading

I have compiled it, when I open main, I see the following error:
hidg open: No such file or directory
There is no /dev/hidg*
Update:
uname -r
4.20.10-gnu-1-xtreme
I'm running Parabola GNU/Linux-libre
Update 2: /dev/hidraw*? Doesn't work.

@rgerganov
Copy link
Author

I am using the following script which creates a HID device (/dev/hidg0) on the local machine:

MANUFACTURER="Solo"
SERIAL="1234567890"
IDVENDOR="0x0483"
IDPRODUCT="0xa2ca"
PRODUCT="Solo Software Authenticator"
CONFIGFS=/sys/kernel/config

modprobe libcomposite                                             
modprobe dummy_hcd
mount none $CONFIGFS -t configfs                                  
mkdir $CONFIGFS/usb_gadget/fido2
cd $CONFIGFS/usb_gadget/fido2
mkdir configs/c.1
mkdir functions/hid.usb0
echo 0 > functions/hid.usb0/protocol
echo 0 > functions/hid.usb0/subclass
echo 64 > functions/hid.usb0/report_length
echo -ne "\x06\xd0\xf1\x09\x01\xa1\x01\x09\x20\x15\x00\x26\xff\x00\x75\x08\x95\x40\x81\x02\x09\x21\x15\x00\x26\xff\x00\x75\x08\x95\x40\x91\x02\xc0" > functions/hid.usb0/report_desc
mkdir strings/0x409
mkdir configs/c.1/strings/0x409
echo $IDPRODUCT > idProduct
echo $IDVENDOR > idVendor
echo $SERIAL > strings/0x409/serialnumber
echo $MANUFACTURER > strings/0x409/manufacturer
echo $PRODUCT > strings/0x409/product
echo "Configuration 1" > configs/c.1/strings/0x409/configuration
echo 120 > configs/c.1/MaxPower
ln -s functions/hid.usb0 configs/c.1
echo "dummy_udc.0" > UDC

Note that you need to have built libcomposite and dummy_hcd kernel modules.

Will submit the corresponding solo patch for this soon.

@ghost
Copy link
ghost commented Mar 5, 2019 •
edited by ghost
Loading

It hanged my computer or disabled all input devices after testing on WebAuthn website. Also, mount command reports that configfs is already mounted (there must be a check).
Distribution: Parabola GNU/Linux-libre, based on Arch Linux.
Note: REISUB did not work, I was forced to use reset button.

Update: looks like it does not have button to approve authentication. I think there should be some output like https://github.com/concise/v2f.py

I think it should also be detected as USB device if it isn't. Haven't checked.

@rgerganov
Copy link
Author

It hanged my computer or disabled all input devices after testing on WebAuthn website. Also, mount command reports that filesystem is already mounted.

Yeah, unfortunately there is kernel bug which causes a deadlock when usb_f_hid is used with dummy_hcd. I have submitted a patch. You can either apply the patch and recompile usb_f_hid or use an older kernel (e.g. 4.8.17) which doesn't have this problem.

@ghost
Copy link
ghost commented Mar 5, 2019

Also, I was forced to run Solo as root because otherwise I saw "Permission denied".

@rgerganov
Copy link
Author

Also, I was forced to run Solo as root because otherwise I saw "Permission denied".

You need to install udev rules for non-root users to be able to access the device

rgerganov pushed a commit to rgerganov/solo that referenced this issue Mar 6, 2019
Add support for hidg devices on Linux
11b7551 
There is a HID gadget driver on Linux which provides emulation of USB
HID devices. This could be very useful for testing the Solo firmware
without actual hardware, using only a Linux box.

This patch adds a command line argument which specifies whether the
existing UDP backing should be used or the new one which reads and
writes to /dev/hidg0.

Testing done:
 1. Created HID device with configfs
 2. Started "./main -b hidg" as root
 3. Successfully executed Webauthn registration and authentication on
 the same Linux machine

Closes: solokeys#122
@rgerganov rgerganov mentioned this issue Mar 6, 2019
Merged
@ghost
Copy link
ghost commented Mar 6, 2019 •
edited by ghost
Loading

Does not work on https://fido2.azurewebsites.net/ if "User Verification" is "Required". Is it expected behaviour? Is it same for soft and hardware token?
Update: The same on Yubico website if "Passwordless" is enabled.

@rgerganov
Copy link
Author

Does not work on https://fido2.azurewebsites.net/ if "User Verification" is "Required". Is it expected behaviour? Is it same for soft and hardware token?
Update: The same on Yubico website if "Passwordless" is enabled.

AFAIK, only Microsoft Edge supports user verification with client PIN at the moment. What browser are you using?

@ghost
Copy link
ghost commented Mar 6, 2019

Does not work on https://fido2.azurewebsites.net/ if "User Verification" is "Required". Is it expected behaviour? Is it same for soft and hardware token?
Update: The same on Yubico website if "Passwordless" is enabled.

AFAIK, only Microsoft Edge supports user verification with client PIN at the moment. What browser are you using?

Tor Browser Bundle, which is based on Mozilla Firefox.

rgerganov pushed a commit to rgerganov/solo that referenced this issue Mar 6, 2019
Add support for hidg devices on Linux
abb4a93 
There is a HID gadget driver on Linux which provides emulation of USB
HID devices. This could be very useful for testing the Solo firmware
without actual hardware, using only a Linux box.

This patch adds a command line argument which specifies whether the
existing UDP backing should be used or the new one which reads and
writes to /dev/hidg0.

Testing done:
 1. Created HID device with configfs
 2. Started "./main -b hidg" as root
 3. Successfully executed Webauthn registration and authentication on
 the same Linux machine

Closes: solokeys#122
rgerganov pushed a commit to rgerganov/solo that referenced this issue Mar 8, 2019
Add support for hidg devices on Linux
4b22ecc 
There is a HID gadget driver on Linux which provides emulation of USB
HID devices. This could be very useful for testing the Solo firmware
without actual hardware, using only a Linux box.

This patch adds a command line argument which specifies whether the
existing UDP backing should be used or the new one which reads and
writes to /dev/hidg0.

Testing done:
 1. Created HID device with configfs
 2. Started "./main -b hidg" as root
 3. Successfully executed Webauthn registration and authentication on
 the same Linux machine

Closes: solokeys#122
rgerganov pushed a commit to rgerganov/solo that referenced this issue Apr 1, 2019
Add support for hidg devices on Linux
da7106c 
There is a HID gadget driver on Linux which provides emulation of USB
HID devices. This could be very useful for testing the Solo firmware
without actual hardware, using only a Linux box.

This patch adds a command line argument which specifies whether the
existing UDP backing should be used or the new one which reads and
writes to /dev/hidg0.

Testing done:
 1. Created HID device with configfs
 2. Started "./main -b hidg" as root
 3. Successfully executed Webauthn registration and authentication on
 the same Linux machine

Closes: solokeys#122
rgerganov pushed a commit to rgerganov/solo that referenced this issue Apr 15, 2019
Add support for hidg devices on Linux
8000
928b6b8 
There is a HID gadget driver on Linux which provides emulation of USB
HID devices. This could be very useful for testing the Solo firmware
without actual hardware, using only a Linux box.

This patch adds a command line argument which specifies whether the
existing UDP backing should be used or the new one which reads and
writes to /dev/hidg0.

Testing done:
 1. Created HID device with configfs
 2. Started "./main -b hidg" as root
 3. Successfully executed Webauthn registration and authentication on
 the same Linux machine

Closes: solokeys#122
rgerganov pushed a commit to rgerganov/solo that referenced this issue Apr 16, 2019
Add support for hidg devices on Linux
955d4f7 
There is a HID gadget driver on Linux which provides emulation of USB
HID devices. This could be very useful for testing the Solo firmware
without actual hardware, using only a Linux box.

This patch adds a command line argument which specifies whether the
existing UDP backing should be used or the new one which reads and
writes to /dev/hidg0.

Testing done:
 1. Created HID device with configfs
 2. Started "./main -b hidg" as root
 3. Successfully executed Webauthn registration and authentication on
 the same Linux machine

Closes: solokeys#122
@alphathegeek
Copy link

Hi, great thought adding hidg support. I tried this on my Raspberry Pi, and it worked perfectly, in both the testcases, and in actual Use.

I would suggest, that instead of /dev/urandom, for Raspberry Pi's at least, to use /dev/hwrng, since the Pi has a good Hardware random number generator.

merlokk pushed a commit to merlokk/solo that referenced this issue Jul 8, 2019
@merlokk
Add support for hidg devices on Linux
eb452b5 
There is a HID gadget driver on Linux which provides emulation of USB
HID devices. This could be very useful for testing the Solo firmware
without actual hardware, using only a Linux box.

This patch adds a command line argument which specifies whether the
existing UDP backing should be used or the new one which reads and
writes to /dev/hidg0.

Testing done:
 1. Created HID device with configfs
 2. Started "./main -b hidg" as root
 3. Successfully executed Webauthn registration and authentication on
 the same Linux machine

Closes: solokeys#122
@nickray nickray mentioned this issue Aug 7, 2019
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Add support for hidg devices on Linux rgerganov/solo
2 participants
@rgerganov @alphathegeek
0