mirror of
https://github.com/wolfSSL/wolfssl.git
synced 2026-08-23 00:13:22 +02:00
Andrew Hutchings
473101ac95
Applet 7.2 denies ReadObject on a symmetric key object that was created with no policy attached, so the shared secret written into the derive target by Se05x_API_ECDHGenerateSharedSecret_InObject could not be exported: sss_key_store_get_key failed with SW 0x6986 (command not allowed) on SE05x applet >= 7.2 hardware. Create the derive target with an attached common policy granting read, write and delete. An attached policy replaces the applet default entirely, so write (the ECDH engine storing the result) and delete (the cleanup path) must be granted explicitly alongside read. Guarded by SSS_HAVE_SE05X_VER_GTE_07_02 so builds against older middleware keep creating the object with no policy attached.