From a2fea57c8faf8d559c0e110992c598b7e5b47a8b Mon Sep 17 00:00:00 2001
From: Pol Henarejos <pol.henarejos@cttc.es>
Date: Thu, 16 Jul 2026 10:47:32 +0200
Subject: [PATCH] Fix domain mutation before auth.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
---
 src/hsm/cmd_key_domain.c | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/hsm/cmd_key_domain.c b/src/hsm/cmd_key_domain.c
index 709b840..b7fbbc0 100644
--- a/src/hsm/cmd_key_domain.c
+++ b/src/hsm/cmd_key_domain.c
@@ -37,7 +37,8 @@ int cmd_key_domain(void) {
     //if (dkeks == 0)
     //    return SW_COMMAND_NOT_ALLOWED();
     uint8_t p1 = P1(apdu), p2 = P2(apdu);
-    bool mutates_domain = apdu.nc > 0 || p1 == 0x1 || p1 == 0x3 || p1 == 0x4;
+
+    bool mutates_domain = p1 == 0x1 || p1 == 0x3 || p1 == 0x4;
     if (mutates_domain && (has_session_pin == false || isUserAuthenticated == false)) {
         return SW_CONDITIONS_NOT_SATISFIED();
     }