FIDO Compliance, Certification & Interoperability 3

Question 1

What does FIDO Authenticator Certification Level 3 (L3) add compared to Level 2?

Accepted Answer

Penetration testing and resistance to physical attacks

Answer

L3 adds rigorous penetration testing and evaluation of resistance to physical attacks on top of L2's lab evaluation requirements.

Question 2

How does FIDO certification handle authenticator firmware updates that change security-relevant functionality?

Accepted Answer

The vendor must notify the FIDO Alliance and may need to undergo re-certification

Answer

Security-relevant firmware changes require the vendor to notify FIDO Alliance, which may trigger re-certification to maintain the certified status.

Question 3

Which body accredits the testing laboratories authorized to perform FIDO security evaluations?

Accepted Answer

The FIDO Alliance directly

Answer

The FIDO Alliance directly accredits the Authorized Test Laboratories (ATLs) permitted to conduct FIDO certification testing.

Question 4

When an authenticator fails FIDO certification testing, what typically happens next?

Accepted Answer

The vendor receives a detailed test report and may remediate and retest

Answer

Failed products receive a detailed report; vendors can remediate the identified issues and submit for re-testing.

Question 5

In the context of FIDO interoperability, what does it mean for a FIDO2 authenticator to be 'backward compatible' with FIDO U2F?

Accepted Answer

It can register and authenticate using the CTAP1/U2F protocol over USB

Answer

CTAP1 is the FIDO2 name for the U2F protocol, so a FIDO2 authenticator supporting CTAP1 can interoperate with existing U2F deployments.

(FIDO) FIDO Certified Authenticator Practice Test