dearsky/pico-hsm
1
0
Fork 0
Code Issues 17 Pull Requests 4 Actions Packages Projects Releases 26 Wiki Activity

Use K1 curve for general authentication.

Browse Source 
Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
This commit is contained in:
Pol Henarejos
2025-04-07 01:24:22 +02:00
parent c4bc346d98
commit 9b1dceb8da
1 changed files with 4 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
src/hsm/cmd_general_authenticate.c
View File

@@ -22,6 +22,7 @@
#include "oid.h" #include "oid.h"
#include "eac.h" #include "eac.h"
#include "files.h" #include "files.h"
#include "otp.h"
int cmd_general_authenticate() { int cmd_general_authenticate() {
if (P1(apdu) == 0x0 && P2(apdu) == 0x0) { if (P1(apdu) == 0x0 && P2(apdu) == 0x0) {
@@ -54,6 +55,9 @@ int cmd_general_authenticate() {
mbedtls_ecdh_context ctx; mbedtls_ecdh_context ctx;
mbedtls_ecdh_init(&ctx); mbedtls_ecdh_init(&ctx);
mbedtls_ecp_group_id gid = MBEDTLS_ECP_DP_SECP256R1; mbedtls_ecp_group_id gid = MBEDTLS_ECP_DP_SECP256R1;
if (otp_key_2) {
gid = MBEDTLS_ECP_DP_SECP256K1;
}
r = mbedtls_ecdh_setup(&ctx, gid); r = mbedtls_ecdh_setup(&ctx, gid);
if (r != 0) { if (r != 0) {
mbedtls_ecp_keypair_free(&ectx); mbedtls_ecp_keypair_free(&ectx);