Operation System

This is the OS: It can decrypt and display your access log after confirming your identity using a secure (possibly) transferable credential.

Resource Provider

This is the Resource Provider (RP) interface. It displays the derived credential and as an extension can add log entries.

Enrollment

Username

Enroll a credential. After registration, use the Login buttons on the OS and RP cards.

Cryptographic Results

This shows the raw output of the WebAuthn PRF extension. It is derived securely from your credential and is used to generate encryption keys.

—

Send Log Entry

Use this form to generate a new log entry. Entries are encrypted and signed by our OS module locally before being sent to the server. Our CSAL extension would also allow that the Logs are signed and encrypted by the RP, using a CSAL derived encryption key and a signing key of the RPs.

Type

Message

Local Log List

A preview of log entries you generated during this RP session. These entries are not stored permanently here, only displayed for demonstration. You can see the entries when logging in via the OS interface.

Time	Type	Message
No logs yet

Operation System

Resource Provider

Enrollment

Entry Details

Raw JSON

Update Credential