search

JavaCardSpot-dev / KeepassNFCApplet

The Unlicense
0 stars 1 forks source link

Lock mechanism #17

Open McCio opened 6 years ago

McCio commented 6 years ago

Introduce a lock/unlock mechanism, depends on fault induction checks and authentication protocol issues.

McCio commented 6 years ago

Right now, if User/Master PINs are incorrectly verified, some sensitive data will be wiped. Also, if the Master PIN has 0 remaining tries, nothing can be done (apart from calling getVersion).

A command, always available, that returns the status of PINs should be offered, since this would explain the status of the applet.