# SIP-9: WebAuthn signature scheme support

**URL:** <https://forums.sui.io/t/sip-9-webauthn-signature-scheme-support/44974>\
**Category:** Finalized SIPs\
**Created:** [September 4, 2023, 12:44am UTC](https://forums.sui.io/t/sip-9-webauthn-signature-scheme-support/44974 "2023-09-04T00:44:03Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![will](https://dub1.discourse-cdn.com/sui/user_avatar/forums.sui.io/will/32/1116_2.png) [@will](https://forums.sui.io/u/will)\
**Post date:** [September 4, 2023, 12:44am UTC](https://forums.sui.io/t/sip-9-webauthn-signature-scheme-support/44974/1 "2023-09-04T00:44:03Z")

</div>

- **SIP Number:** 9
- **Title:** WebAuthn signature scheme support
- **Description:** This SIP proposes the addition of WebAuthn signature scheme to enable transaction signing using WebAuthn authenticators (passkeys).
- **Link:** [https://github.com/sui-foundation/sips/pull/9](https://github.com/sui-foundation/sips/pull/9)

---

<div class="post-metadata">

**Author:** ![will](https://dub1.discourse-cdn.com/sui/user_avatar/forums.sui.io/will/32/1116_2.png) [@will](https://forums.sui.io/u/will)\
**Post date:** [September 4, 2023, 1:19am UTC](https://forums.sui.io/t/sip-9-webauthn-signature-scheme-support/44974/2 "2023-09-04T01:19:30Z")

</div>



---

<div class="post-metadata">

**Author:** ![kklas](https://avatars.discourse-cdn.com/v4/letter/k/5daacb/32.png) [@kklas](https://forums.sui.io/u/kklas)\
**Post date:** [September 4, 2023, 7:55pm UTC](https://forums.sui.io/t/sip-9-webauthn-signature-scheme-support/44974/3 "2023-09-04T19:55:24Z")

</div>

Hello everyone! I’m the SIP proposer, and I’m thrilled to answer any questions you may have about the SIP right here. Fire away!

---

<div class="post-metadata">

**Author:** ![will](https://dub1.discourse-cdn.com/sui/user_avatar/forums.sui.io/will/32/1116_2.png) [@will](https://forums.sui.io/u/will)\
**Post date:** [October 3, 2023, 10:40am UTC](https://forums.sui.io/t/sip-9-webauthn-signature-scheme-support/44974/4 "2023-10-03T10:40:32Z")

</div>

After a period without comments, this SIP has been moved into `Review` status.

In this stage, a public call will be arranged to invite further discussion.

---

<div class="post-metadata">

**Author:** ![wanglei4966](https://avatars.discourse-cdn.com/v4/letter/w/c77e96/32.png) [@wanglei4966](https://forums.sui.io/u/wanglei4966)\
**Post date:** [November 17, 2023, 6:21pm UTC](https://forums.sui.io/t/sip-9-webauthn-signature-scheme-support/44974/5 "2023-11-17T18:21:26Z")

</div>

appreciate, this PR can come into implementation soon, coz it is game-changing wallet solution to achive mass adoption

---

<div class="post-metadata">

**Author:** ![suneal](https://dub1.discourse-cdn.com/sui/user_avatar/forums.sui.io/suneal/32/30720_2.png) [@suneal](https://forums.sui.io/u/suneal)\
**Post date:** [March 6, 2024, 2:25am UTC](https://forums.sui.io/t/sip-9-webauthn-signature-scheme-support/44974/6 "2024-03-06T02:25:02Z")

</div>

This is great. I can imagine combining passkey and zklogin will make web wallet very secure and easy-to-use.

---

<div class="post-metadata">

**Author:** ![interstellar](https://dub1.discourse-cdn.com/sui/user_avatar/forums.sui.io/interstellar/32/30790_2.png) [@interstellar](https://forums.sui.io/u/interstellar)\
**Post date:** [May 28, 2024, 1:20pm UTC](https://forums.sui.io/t/sip-9-webauthn-signature-scheme-support/44974/7 "2024-05-28T13:20:34Z")

</div>

It would be advisable to add the `alg` attribute to the proposed content to take advantage of the future extensibility of WebAuthn. The `alg` will utilize the `SIGNATURE_FLAG_TO_SCHEME` that matches the `pubKeyCredParams` values in WebAuthn.

```auto
const webAuthnSignature = bcs.struct('WebAuthnSignature', {
  alg: bcs.u8(), // eg. 0x02 for -7 (ES256)
  clientData: bcs.vector(bcs.u8()),
  authenticatorData: bcs.vector(bcs.u8()),
  signature: bcs.vector(bcs.u8()),
  publicKey: bcs.vector(bcs.u8()),
});

```

This way, the `SIGNATURE_FLAG_TO_SCHEME (webauthn: 0x6)` will be prefixed, followed by the BCS serialized information.

---

<div class="post-metadata">

**Author:** ![will](https://dub1.discourse-cdn.com/sui/user_avatar/forums.sui.io/will/32/1116_2.png) [@will](https://forums.sui.io/u/will)\
**Post date:** [July 5, 2024, 3:20pm UTC](https://forums.sui.io/t/sip-9-webauthn-signature-scheme-support/44974/8 "2024-07-05T15:20:03Z")

</div>

This SIP has now been moved to `Final` status.

---

<div class="post-metadata">

**Author:** ![will](https://dub1.discourse-cdn.com/sui/user_avatar/forums.sui.io/will/32/1116_2.png) [@will](https://forums.sui.io/u/will)\
**Post date:** [July 5, 2024, 3:20pm UTC](https://forums.sui.io/t/sip-9-webauthn-signature-scheme-support/44974/9 "2024-07-05T15:20:35Z")

</div>