Apple device integration

AppleClientData

Apple's APIs accept a clientDataHash (SHA-256 of arbitrary bytes) that gets bound into the resulting attestation/assertion.

The finalNonce (see Final nonce composition) is considered as clientData.

Therefore, clientDataHash = SHA256(finalNonce).

The Attestation API recomputes this clientDataHash and checks that the assertion / attestation was produced over it.