Restrict to EC only

2026-03-05 09:24:49 +01:00 · 2020-03-09 22:06:51 -07:00
parent 945907cfd4
commit 668f46c803
4 changed files with 2 additions and 13 deletions
--- a/SecretKit/SmartCard/SmartCardStore.swift
+++ b/SecretKit/SmartCard/SmartCardStore.swift
@@ -67,8 +67,6 @@ extension SmartCard {
                signatureAlgorithm = .ecdsaSignatureMessageX962SHA256
            case (.ellipticCurve, 384):
                signatureAlgorithm = .ecdsaSignatureMessageX962SHA384
-            case (.rsa, _):
-                signatureAlgorithm = .rsaSignatureRaw
            default:
                fatalError()
            }
@@ -102,6 +100,7 @@ extension SmartCard.Store {
        let attributes = [
            kSecClass: kSecClassKey,
            kSecAttrTokenID: tokenID,
+            kSecAttrKeyType: kSecAttrKeyTypeEC, // Restrict to EC
            kSecReturnRef: true,
            kSecMatchLimit: kSecMatchLimitAll,
            kSecReturnAttributes: true