The cryptography behind passkeys
blog.trailofbits.com | blog | #cryptography | #passkeys | #authentication | #digital-signatures | #webauthn | #trail-of-bits | #anti-phishing
Summary
Trail of Bits breaks down passkey cryptography: WebAuthn challenge-response signatures, why server-held public keys leak nothing, and how extensions enable key generation and certificate storage.
- Published
- Collected
--- id: 1398 title: "The cryptography behind passkeys" source_domain: blog.trailofbits.com source_url: "https://blog.trailofbits.com/2025/05/14/the-cryptography-behind-passkeys/" published_at: "2025-05-14 11:00" tags: ["cryptography", "passkeys", "authentication", "digital-signatures", "webauthn", "trail-of-bits", "anti-phishing"] phying_url: "https://phying.com/item/1398" lang: en --- # The cryptography behind passkeys ## Summary Trail of Bits breaks down passkey cryptography: WebAuthn challenge-response signatures, why server-held public keys leak nothing, and how extensions enable key generation and certificate storage. ## Intelligence Metadata - **Sources:** blog.trailofbits.com - **Published:** 2025-05-14 11:00 - **Original:** https://blog.trailofbits.com/2025/05/14/the-cryptography-behind-passkeys/ - **Phying News:** https://phying.com/item/1398