I've been trying to find the major differences between "U2F" versus "FIDO2" two-factor authentication standards. Reading some of the articles posted by different companies and even the FIDO site itself give the impression that the main work of the FIDO2 standard was the WebAuthn API, and that both U2F and FIDO2 are based on the "CTAP" protocol which at least one source [perhaps not a good one] claimed:
In the same release, FIDO also introduced CTAP2, which is basically the same as U2F but relaxes its requirements to also include mobile devices as acceptable external authenticators.
If that's the case then why can't all existing U2F keys be used as FIDO2 authenticators? Rationale:
- We had
Protocol Awhich said "you must X/Y/Z and your device can only be a USB dongle" — we called that "U2F".
- We introduce
Protocol A′which says "this is Protocol A, still X/Y/Z except now your device can be a USB dongle or a mobile phone". At the same time say "hey btw we're giving websites a way to access to Protocol A′ devices". We called this all "FIDO2".
Now, if the only change [supposedly!] to Protocol A itself was "you're allowed to implement this protocol on mobile devices, now, too" then it would logically follow that any U2F device would be forward-compatible as a FIDO2 device:
- it already does "X/Y/Z" (because those were required by the old rules too)
- it already satisfies "must be a USB dongle or a mobile phone" (because the old rules were "must be a USB dongle").
But… not all U2F devices work as FIDO2 devices! For example, the Feitian K13 authenticator supports "FIDO U2F" but not "FIDO2". So the logic above must be incorrect — and I suspect the reason is that CTAP2 made more changes than the "Your Complete Guide to FIDO, FIDO2 and WebAuthn" article claims.
What specifically does the CTAP2 specification include beyond the "U2F" functionality that makes "FIDO2" possible?