ES256K1 is disabled by default for compatibility. It can be enabled via Pico Commissioner.

Fixes #109. Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2025-03-11 19:05:28 +01:00
parent 297c34914b
commit 6069cf949b
3 changed files with 8 additions and 3 deletions
--- a/src/fido/cbor_make_credential.c
+++ b/src/fido/cbor_make_credential.c
@@ -217,7 +217,7 @@ int cbor_make_credential(const uint8_t *data, size_t len) {
                curve = FIDO2_CURVE_P521;
            }
        }
-        else if (pubKeyCredParams[i].alg == FIDO2_ALG_ES256K) {
+        else if (pubKeyCredParams[i].alg == FIDO2_ALG_ES256K && (phy_data.enabled_curves & PHY_CURVE_SECP256K1)) {
            if (curve <= 0) {
                curve = FIDO2_CURVE_P256K1;
            }