From 5945f3978106fa7307faebba2c1410ec4b5cb652 Mon Sep 17 00:00:00 2001 From: Pol Henarejos Date: Fri, 21 Aug 2026 00:24:05 +0200 Subject: [PATCH] Do not allow key import if algorithm is not supported. Fixes #55 Signed-off-by: Pol Henarejos --- src/openpgp/cmd_put_data.c | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/openpgp/cmd_put_data.c b/src/openpgp/cmd_put_data.c index f2722d6..7baecf4 100644 --- a/src/openpgp/cmd_put_data.c +++ b/src/openpgp/cmd_put_data.c @@ -71,6 +71,9 @@ int cmd_put_data(void) { (apdu.data[0] == ALGO_RSA && apdu.nc < 3))) { return SW_WRONG_DATA(); } + if (is_algorithm_attr && apdu.nc > 0 && !openpgp_algorithm_attr_supported(apdu.data, apdu.nc)) { + return SW_WRONG_DATA(); + } if (fid == EF_CH_NAME && apdu.nc > 39u) { return SW_WRONG_DATA(); }