From e0c793dd0aa79a369c6904a51fe4d04e34c0c0be Mon Sep 17 00:00:00 2001
From: Pol Henarejos <pol.henarejos@cttc.es>
Date: Fri, 12 May 2023 16:19:22 +0200
Subject: [PATCH] Fix empty challenge.

Now a new fresh challenge is generated on every select command.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
---
 src/fido/oath.c | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/fido/oath.c b/src/fido/oath.c
index 901df2b..c5c1f73 100644
--- a/src/fido/oath.c
+++ b/src/fido/oath.c
@@ -82,6 +82,7 @@ app_t *oath_select(app_t *a, const uint8_t *aid, uint8_t aid_len) {
         memset(res_APDU + res_APDU_size, 0, 8); res_APDU_size += 8;
 #endif
         if (file_has_data(search_dynamic_file(EF_OATH_CODE)) == true) {
+            random_gen(NULL, challenge, sizeof(challenge));
             res_APDU[res_APDU_size++] = TAG_CHALLENGE;
             res_APDU[res_APDU_size++] = sizeof(challenge);
             memcpy(res_APDU + res_APDU_size, challenge, sizeof(challenge));