hard coded CA protocol parameters are required currently
otherwise the curve will be unknown in OpenPACE. Fixes bug in combination with OpenPACE 572eb903590257ac60f1661f0ba69a9994b4c3f5 and later
This commit is contained in:
@@ -208,7 +208,7 @@ class nPA_SE(Security_Environment):
|
||||
ef_card_security_data = ef_card_security.data
|
||||
pace.CA_disable_passive_authentication(self.eac_ctx)
|
||||
ca_pubkey = pace.CA_get_pubkey(self.eac_ctx, ef_card_security_data)
|
||||
pace.EAC_CTX_init_ca(self.eac_ctx, 0, 0, self.ca_key, ca_pubkey)
|
||||
pace.EAC_CTX_init_ca(self.eac_ctx, pace.id_CA_ECDH_AES_CBC_CMAC_128, 13, self.ca_key, ca_pubkey)
|
||||
|
||||
if not self.ca_key:
|
||||
# we don't have a good CA key, so we simply generate an ephemeral one
|
||||
|
||||
Reference in New Issue
Block a user