diff --git a/docs/solo/questions.md b/docs/solo/questions.md index d8b8d500..289c8725 100644 --- a/docs/solo/questions.md +++ b/docs/solo/questions.md @@ -7,7 +7,10 @@ Yes **2. Is the Pin stored and checked inside the SoloKey?** -The pin is stored on the key +The pin is stored on the key not in plain text. Only the pin hash is stored. For more information see: + +- [Fidoallicace specification: setting new pin][fido2_new_pin] +- [Fidoallicance specification: authentificator client pin][fido2_client_pin]. **3. What happens if someone enters a faulty pin many times?** @@ -31,3 +34,5 @@ Actually the constants are: [//]: # "links" [ctap_constants]: https://github.com/solokeys/solo/blob/master/fido2/ctap.h +[fido2_new_pin]: https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#settingNewPin) +[fido2_client_pin]: https://fidoalliance.org/specs/fido-v2.0-ps-20190130/fido-client-to-authenticator-protocol-v2.0-ps-20190130.html#authenticatorClientPIN \ No newline at end of file