From 8a139e70b77faa5f371dfefa80cb21c1418f06e2 Mon Sep 17 00:00:00 2001 From: Pol Henarejos Date: Tue, 6 Sep 2022 21:47:13 +0200 Subject: [PATCH] Fix verifying key handle. Now it works in Firefox! Signed-off-by: Pol Henarejos --- src/fido/cmd_authenticate.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/fido/cmd_authenticate.c b/src/fido/cmd_authenticate.c index 5b6db49..a03c830 100644 --- a/src/fido/cmd_authenticate.c +++ b/src/fido/cmd_authenticate.c @@ -58,7 +58,7 @@ int cmd_authenticate() { memcpy(key_base + U2F_APPID_SIZE, req->keyHandle, KEY_PATH_LEN); ret = mbedtls_md_hmac(mbedtls_md_info_from_type(MBEDTLS_MD_SHA256), d, 32, key_base, sizeof(key_base), hmac); mbedtls_platform_zeroize(d, sizeof(d)); - if (memcmp(req->keyHandle + KEY_HANDLE_LEN, hmac, sizeof(hmac)) != 0) + if (memcmp(req->keyHandle + KEY_PATH_LEN, hmac, sizeof(hmac)) != 0) return SW_WRONG_DATA(); return SW_CONDITIONS_NOT_SATISFIED(); }