Passkey Proof of Concept with the WebAuthn API for a Ed25519 Key Pair

[Myestery]

Show and tell project type

Builder Bounty Submission

Github Repo Link

https://github.com/myestery/passkey

Video Walkthough Link

https://vimeo.com/997978768?share=copy

Project Description

I built a proof of concept application for Ed25519 key pairs authentication.
This project implements a passkey system using the WebAuthn API with Ed25519 key pairs. It allows users to authenticate their Ed25519 key pair without revealing it, demonstrating both registration and authentication processes.

What problems does your project solve? How does it preserve privacy for users?

This WebAuthn Passkey System addresses several key issues in modern authentication:

1. Password Vulnerabilities:

   • Eliminates the need for traditional passwords, which are often weak, reused, or vulnerable to phishing attacks.
   • Replaces passwords with cryptographic key pairs, significantly enhancing security.

2. Phishing Resistance:

   • WebAuthn ties authentication to specific domains, making it resistant to phishing attempts.
   • Users can't accidentally use their passkey on a fraudulent site mimicking a legitimate one.

3. Credential Stuffing Prevention:

   • Each passkey is unique to a specific site, preventing credential stuffing attacks where attackers use stolen credentials from one site on another.

4. Multi-Factor Authentication (MFA) Simplification:

   • Combines something you have (the device) with something you are (biometric) or something you know (PIN), providing strong MFA in a single step.

5. Cross-Platform Support:

   • Enables seamless authentication across different devices and platforms that support WebAuthn.

How does the project use Nillion? Describe and link to any Nada programs

No response

Is there anything else you want to share?

Support for Ed25519 isn't very mature on major browsers

Optional - Link your project and team members' social handles

https://x.com/jpchidera

Optional - Team ETH Address(es)

0x70b6361545b12c81eb8c66d3fc4a4f5a03f64337