---
id: 1398
title: "The cryptography behind passkeys"
source_domain: blog.trailofbits.com
source_url: "https://blog.trailofbits.com/2025/05/14/the-cryptography-behind-passkeys/"
published_at: "2025-05-14 11:00"
tags: ["cryptography", "passkeys", "authentication", "digital-signatures", "webauthn", "trail-of-bits", "anti-phishing"]
phying_url: "https://phying.com/item/1398"
lang: en
---

# The cryptography behind passkeys

## Summary

Trail of Bits breaks down passkey cryptography: WebAuthn challenge-response signatures, why server-held public keys leak nothing, and how extensions enable key generation and certificate storage.

## Intelligence Metadata

- **Sources:** blog.trailofbits.com
- **Published:** 2025-05-14 11:00
- **Original:** https://blog.trailofbits.com/2025/05/14/the-cryptography-behind-passkeys/
- **Phying News:** https://phying.com/item/1398