feat: external_sign secure enclave only supports ES256

2025-05-01 00:29:01 +08:00
parent 0ac9300262
commit b8f0be2023
1 changed files with 3 additions and 0 deletions
--- a/src/cmd_external_sign.rs
+++ b/src/cmd_external_sign.rs
@@ -55,6 +55,9 @@ fn sign(sub_arg_matches: &ArgMatches) -> XResult<Vec<u8>> {
    let message_bytes = base64_decode(message_base64)?;
    match key_uri {
        KeyUri::SecureEnclaveKey(key) => {
+            if "ES256" != alg {
+                return simple_error!("Invalid alg: {}", alg);
+            }
            if key.usage != KeyUsage::Singing {
                simple_error!("Not singing key")
            } else {