Enumerations
DeviceAuthenticationOption
Available device authentication methods that can be used when presenting a mobile credential.
Enumeration members
| Name | Value | Description |
|---|---|---|
Mac | "mac" | Authenticate with a MAC over the device authentication data, keyed by an ECDH agreement between the device key and the reader's ephemeral key, per ISO/IEC 18013-5 mdoc MAC authentication. Better for holder privacy, because the reader could have produced the same value itself and so the holder can deny it to a third party. |
Signature | "signature" | Authenticate by signing the device authentication data with the device key, per ISO/IEC 18013-5 mdoc ECDSA/EdDSA authentication. Available in every security environment, but produces a signature over reader-supplied data that the holder cannot later repudiate. |
Referenced by
A property of CreateProximityPresentationSessionOptions.
How would you rate this page?