chaosrebel/pico-openpgp
1
0
Fork 0
mirror of https://github.com/polhenarejos/pico-openpgp.git synced 2026-08-21 20:17:37 +01:00
Code Issues Packages Projects Releases Wiki Activity

Enforce forcesig for PSO signatures

Browse Source 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
This commit is contained in:
Pol Henarejos
2026-08-14 19:51:53 +02:00
parent 999d7180b2
commit 241f5d82b2
1 changed files with 6 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/openpgp/cmd_pso.c
+6 -1
View File
@@ -25,12 +25,17 @@
#include "mbedtls/ecdh.h"
#include "mbedtls/asn1.h"
static bool forcesig_enabled(void) {
file_t *pw_status = file_search_by_fid(EF_PW_PRIV, NULL, SPECIFY_EF);
return pw_status && file_has_data(pw_status) && file_get_size(pw_status) > 0 && file_get_data(pw_status)[0] == 0;
}
int cmd_pso(void) {
uint16_t algo_fid = 0x0, pk_fid = 0x0;
uint16_t uif_fid = 0x0;
bool is_aes = false;
if (P1(apdu) == 0x9E && P2(apdu) == 0x9A) {
if (!has_pw3 && !has_pw1) {
if (!has_pw1 && (forcesig_enabled() || !has_pw3)) {
return SW_SECURITY_STATUS_NOT_SATISFIED();
}
algo_fid = EF_ALGO_PRIV1;