OTP key is used to mask the DEK.

Signed-off-by: Pol Henarejos <pol.henarejos@cttc.es>
2024-11-10 18:56:46 +01:00
parent 21a9a731aa
commit 79c69a6617
1 changed files with 6 additions and 0 deletions
--- a/src/openpgp/openpgp.c
+++ b/src/openpgp/openpgp.c
@@ -32,6 +32,7 @@
 #include "asn1.h"
 #include "usb.h"
 #include "ccid/ccid.h"
+#include "otp.h"

 uint8_t PICO_PRODUCT = 3;

@@ -317,6 +318,11 @@ int load_dek() {
    if (r != 0) {
        return PICOKEY_EXEC_ERROR;
    }
+    if (otp_key_1) {
+        for (int i = 0; i < 32; i++) {
+            dek[IV_SIZE + i] ^= otp_key_1[i];
+        }
+    }
    return PICOKEY_OK;
 }