Improve the ECC key generation for signing or ephemeral derivation. R…

…equires wolfSSL/wolfTPM#311
wolfSSL · Nov 28, 2023 · c610ada · c610ada
1 parent 479fd8f
commit c610ada
Showing 1 changed file with 7 additions and 1 deletion.
diff --git a/src/internal.c b/src/internal.c
@@ -6819,7 +6819,13 @@ int WP11_Ec_GenerateKeyPair(WP11_Object* pub, WP11_Object* priv,
     ret = wc_ecc_init_ex(&priv->data.ecKey, NULL, priv->slot->devId);
     if (ret == 0) {
     #ifdef WOLFPKCS11_TPM
-        priv->slot->tpmCtx.ecdhKey = (WOLFTPM2_KEY*)&priv->tpmKey;
+        CK_BBOOL isSign = CK_FALSE;
+        CK_ULONG len = sizeof(isSign);
+        ret = WP11_Object_GetAttr(priv, CKA_SIGN, &isSign, &len);
+        if (isSign)
+            priv->slot->tpmCtx.eccKey = (WOLFTPM2_KEY*)&priv->tpmKey;
+        else
+            priv->slot->tpmCtx.ecdhKey = (WOLFTPM2_KEY*)&priv->tpmKey;
     #endif
 
         /* Copy parameters from public key into private key. */