From 9852a3ddd4e18f25740c25f72fa7374682deca88 Mon Sep 17 00:00:00 2001 From: Pol Henarejos Date: Mon, 10 Aug 2026 01:03:41 +0200 Subject: [PATCH] OATH HOTP touch enforcement Signed-off-by: Pol Henarejos --- src/fido/oath.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/fido/oath.c b/src/fido/oath.c index c0badb8..e999c91 100644 --- a/src/fido/oath.c +++ b/src/fido/oath.c @@ -1322,7 +1322,7 @@ static int cmd_verify_hotp(void) { oath_credential_close(&credential); return SW_INCORRECT_PARAMS(); } - if (tlv_find_tag(&ctxe, TAG_PROPERTY, &prop) == true && prop.len > 0 && (prop.data[0] & PROP_TOUCH)) { + if (tlv_find_tag(&ctxe, TAG_PROPERTY, &prop) == true && prop.len > 0 && (prop.data[0] & PROP_TOUCH) && !check_user_presence()) { mbedtls_platform_zeroize(plain_key, plain_key_len); free(plain_key); oath_credential_close(&credential);