feat: se revover

This commit is contained in:
2025-05-08 22:40:17 +08:00
parent 0b9ec436ba
commit 8e4cf5cec8

View File

@@ -23,14 +23,14 @@ impl Command for CommandImpl {
seutil::check_se_supported()?; seutil::check_se_supported()?;
let key = sub_arg_matches.value_of("key").unwrap(); let key = sub_arg_matches.value_of("key").unwrap();
let key = cmd_hmac_decrypt::try_decrypt(key)?;
let key_uri = parse_key_uri(&key)?; let key_uri = parse_key_uri(&key)?;
let se_key_uri = key_uri.as_secure_enclave_key()?; let se_key_uri = key_uri.as_secure_enclave_key()?;
debugging!("Secure enclave key URI: {:?}", se_key_uri); debugging!("Secure enclave key URI: {:?}", se_key_uri);
let private_key = cmd_hmac_decrypt::try_decrypt(&se_key_uri.private_key)?;
let (public_key_point, public_key_der, _private_key) = let (public_key_point, public_key_der, _private_key) =
seutil::recover_secure_enclave_p256_public_key( seutil::recover_secure_enclave_p256_public_key(
&se_key_uri.private_key, &private_key,
se_key_uri.usage == KeyUsage::Singing, se_key_uri.usage == KeyUsage::Singing,
)?; )?;