Merge pull request #441 from LedgerHQ/xch/fix-nanos-aes-cbc

src/bolos/cx_aes_sdk2.c: set_aes_iv should be true only when using hdw_cbc
LedgerHQ · Dec 19, 2023 · fe0a999 · fe0a999
2 parents f9dfe87 + 4cffece
commit fe0a999
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -5,6 +5,11 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.4.1] - 2023-12-19
+
+### Fixed
+- CX: Fix AES implementation on NanoS
+
 ## [0.4.0] - 2023-12-04
 
 ### Fixed

diff --git a/src/bolos/cx_aes_sdk2.c b/src/bolos/cx_aes_sdk2.c
@@ -37,7 +37,7 @@ cx_err_t sys_cx_aes_set_key_hw(const cx_aes_key_t *key, uint32_t mode)
   }
   local_aes_op = mode & CX_MASK_SIGCRYPT;
   local_aes_chain_mode = mode & CX_MASK_CHAIN;
-  set_aes_iv = true;
+  set_aes_iv = hdw_cbc;
   local_aes_ready = true;
 
   return CX_OK;