Story

Show HN: FIDO2 PRF with TPM and Fingerprint Auth for Confer on Linux

vpb Thursday, December 25, 2025

I wanted to try Confer — Moxie Marlinspike’s private AI chat — but I don’t have a Mac lying around. Since it requires isUserVerifyingPlatformAuthenticatorAvailable(), and most Linux setups don’t qualify, I put together a minimal platform authenticator that works with what I have: a TPM and a fingerprint reader.

It’s a small bridge: Chrome extension + Go backend, using the TPM for key storage and fprintd for user verification.

Write-up: https://vitorpy.com/blog/2025-12-25-confer-to-linux-tpm-fido... Code: https://github.com/vitorpy/tpm-fido2-prf

Nothing fancy. No guarantees — it was a quick hack. But if it helps someone else get Confer working on Linux :)

Summary
The article discusses the integration of Linux's Trusted Platform Module (TPM) with the FIDO2 protocol, which enables secure user authentication and cryptographic key management through a unified interface. It explores the technical details and potential benefits of this integration for improving system security and user privacy.
2 0
Summary
vitorpy.com
Visit article Read on Hacker News