arno/trezor-firmware
1
0
Fork 0
mirror of https://github.com/trezor/trezor-firmware.git synced 2024-12-16 11:28:14 +00:00
Code Issues Releases Wiki Activity

core/webauthn: Generate random part of U2F key handles with uniform distribution.

Browse Source
This commit is contained in:
Andrew Kozlik 2019-08-08 19:07:45 +02:00
parent 5020ae9757
commit 26193245d4
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
core/src/apps/webauthn/credential.py
View File

@ -220,7 +220,7 @@ class U2fCredential(Credential):
def generate_key_handle(self) -> None: def generate_key_handle(self) -> None:
# derivation path is m/U2F'/r'/r'/r'/r'/r'/r'/r'/r' # derivation path is m/U2F'/r'/r'/r'/r'/r'/r'/r'/r'
path = [HARDENED | random.uniform(0xF0000000) for _ in range(0, 8)] path = [HARDENED | random.uniform(0x80000000) for _ in range(0, 8)]
nodepath = [_U2F_KEY_PATH] + path nodepath = [_U2F_KEY_PATH] + path
# prepare signing key from random path, compute decompressed public key # prepare signing key from random path, compute decompressed public key