From b8f0be2023ed07dc02fc68b9676c9337cf649637 Mon Sep 17 00:00:00 2001
From: Hatter Jiang <jht5945@gmail.com>
Date: Thu, 1 May 2025 00:29:01 +0800
Subject: [PATCH] feat: external_sign secure enclave only supports ES256

---
 src/cmd_external_sign.rs | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/src/cmd_external_sign.rs b/src/cmd_external_sign.rs
index bb020cc..45dd7f2 100644
--- a/src/cmd_external_sign.rs
+++ b/src/cmd_external_sign.rs
@@ -55,6 +55,9 @@ fn sign(sub_arg_matches: &ArgMatches) -> XResult<Vec<u8>> {
     let message_bytes = base64_decode(message_base64)?;
     match key_uri {
         KeyUri::SecureEnclaveKey(key) => {
+            if "ES256" != alg {
+                return simple_error!("Invalid alg: {}", alg);
+            }
             if key.usage != KeyUsage::Singing {
                 simple_error!("Not singing key")
             } else {