hard coded CA protocol parameters are required currently

otherwise the curve will be unknown in OpenPACE. Fixes bug in
combination with OpenPACE 572eb903590257ac60f1661f0ba69a9994b4c3f5 and
later
This commit is contained in:
Frank Morgner
2013-10-22 18:00:48 +02:00
parent a11be64015
commit 372ec6c265

View File

@@ -208,7 +208,7 @@ class nPA_SE(Security_Environment):
ef_card_security_data = ef_card_security.data
pace.CA_disable_passive_authentication(self.eac_ctx)
ca_pubkey = pace.CA_get_pubkey(self.eac_ctx, ef_card_security_data)
pace.EAC_CTX_init_ca(self.eac_ctx, 0, 0, self.ca_key, ca_pubkey)
pace.EAC_CTX_init_ca(self.eac_ctx, pace.id_CA_ECDH_AES_CBC_CMAC_128, 13, self.ca_key, ca_pubkey)
if not self.ca_key:
# we don't have a good CA key, so we simply generate an ephemeral one