epass: Do not report raw ECDSA mechanism, when only SHA1 and SHA2 are suppported

Jakuje · Jakuje · commit ab533d0b5927 · 2023-09-07T15:34:57.000+02:00
The "raw" ECDSA mechanism in ePass works only with the data of 32B
length, which probably assumes its digest and which does not meet
the PKCS#11 specification which allows signature of any data length
with internal truncation.
diff --git a/src/libopensc/card-epass2003.c b/src/libopensc/card-epass2003.c
@@ -1769,7 +1769,7 @@ epass2003_init(struct sc_card *card)
 	_sc_card_add_rsa_alg(card, 2048, flags, 0);
 
 	//set EC Alg Flags
-	flags = SC_ALGORITHM_ONBOARD_KEY_GEN|SC_ALGORITHM_ECDSA_HASH_SHA1|SC_ALGORITHM_ECDSA_HASH_SHA256|SC_ALGORITHM_ECDSA_HASH_NONE|SC_ALGORITHM_ECDSA_RAW;
+	flags = SC_ALGORITHM_ONBOARD_KEY_GEN | SC_ALGORITHM_ECDSA_HASH_SHA1 | SC_ALGORITHM_ECDSA_HASH_SHA256;
 	ext_flags = 0;
 	_sc_card_add_ec_alg(card, 256, flags, ext_flags, NULL);
 
