add more restrict to tags in piv import

canokeys · Dec 21, 2024 · 98b4f70 · 98b4f70
1 parent 69d7f0b
commit 98b4f70
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/src/key.c b/src/key.c
@@ -126,7 +126,7 @@ int ck_parse_piv(ck_key_t *key, const uint8_t *buf, size_t buf_len) {
       DBG_MSG("too short\n");
       return KEY_ERR_LENGTH;
     }
-    if (*p < 0x06 || *p > 0x08) {
+    if (*p != 0x06 && !(key->meta.type == ED25519 && *p == 0x07) && !(key->meta.type == X25519 && *p == 0x08)) {
       DBG_MSG("invalid tag\n");
       return KEY_ERR_DATA;
     }