9dec68f892
Fix Signatrure counter: now incremented Fix PIN status init: was not correctly initialized Fix "only once" CDS management: PIN was not invalidated after signing Change all return 0 by corresponding THROW error code PIN API refacto
68 lines
2.1 KiB
C
68 lines
2.1 KiB
C
/* Copyright 2017 Cedric Mesnil <cslashm@gmail.com>, Ledger SAS
|
|
*
|
|
* Licensed under the Apache License, Version 2.0 (the "License");
|
|
* you may not use this file except in compliance with the License.
|
|
* You may obtain a copy of the License at
|
|
*
|
|
* http://www.apache.org/licenses/LICENSE-2.0
|
|
*
|
|
* Unless required by applicable law or agreed to in writing, software
|
|
* distributed under the License is distributed on an "AS IS" BASIS,
|
|
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
* See the License for the specific language governing permissions and
|
|
* limitations under the License.
|
|
*/
|
|
|
|
#include "os.h"
|
|
#include "cx.h"
|
|
#include "gpg_types.h"
|
|
#include "gpg_api.h"
|
|
#include "gpg_vars.h"
|
|
|
|
int gpg_apdu_get_challenge() {
|
|
unsigned int olen,hlen;
|
|
|
|
if ((G_gpg_vstate.io_p1&0x80) == 0x80) {
|
|
olen = G_gpg_vstate.io_p2;
|
|
} else {
|
|
olen = G_gpg_vstate.io_le;
|
|
}
|
|
if (olen > GPG_EXT_CHALLENGE_LENTH) {
|
|
THROW(SW_WRONG_LENGTH);
|
|
return SW_WRONG_LENGTH;
|
|
}
|
|
|
|
if ((G_gpg_vstate.io_p1&0x82) == 0x82) {
|
|
unsigned int path[2];
|
|
unsigned char chain[32];
|
|
unsigned char Sr[32];
|
|
|
|
os_memset(chain, 0, 32);
|
|
path[0] = 0x80475047;
|
|
path[1] = 0x0F0F0F0F;
|
|
os_perso_derive_node_bip32(CX_CURVE_SECP256K1, path, 2 , Sr, chain);
|
|
chain[0] = 'r'; chain[1]='n'; chain[2] = 'd';
|
|
|
|
cx_sha256_init(&G_gpg_vstate.work.md.sha256);
|
|
cx_hash((cx_hash_t *)&G_gpg_vstate.work.md.sha256, 0, Sr, 32, NULL);
|
|
cx_hash((cx_hash_t *)&G_gpg_vstate.work.md.sha256, 0, chain, 3, NULL);
|
|
hlen=cx_hash((cx_hash_t *)&G_gpg_vstate.work.md.sha256,
|
|
CX_LAST, G_gpg_vstate.work.io_buffer, G_gpg_vstate.io_length,
|
|
G_gpg_vstate.work.io_buffer);
|
|
|
|
cx_sha3_xof_init(&G_gpg_vstate.work.md.sha3, 256, olen);
|
|
cx_hash((cx_hash_t *)&G_gpg_vstate.work.md.sha3,
|
|
CX_LAST, G_gpg_vstate.work.io_buffer, hlen,
|
|
G_gpg_vstate.work.io_buffer);
|
|
} else {
|
|
cx_rng(G_gpg_vstate.work.io_buffer, olen);
|
|
}
|
|
|
|
if ((G_gpg_vstate.io_p1&0x81) == 0x81) {
|
|
cx_math_next_prime(G_gpg_vstate.work.io_buffer,olen);
|
|
}
|
|
gpg_io_discard(0);
|
|
gpg_io_inserted(olen);
|
|
return SW_OK;
|
|
}
|