Skip to content

Commit 645a6d6

Browse files
fix: V-002 security vulnerability
Automated security fix generated by OrbisAI Security
1 parent 9700b5b commit 645a6d6

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

accounts/scwallet/securechannel.go

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -81,7 +81,7 @@ func NewSecureChannelSession(card *pcsc.Card, keyData []byte) (*SecureChannelSes
8181

8282
// Pair establishes a new pairing with the smartcard.
8383
func (s *SecureChannelSession) Pair(pairingPassword []byte) error {
84-
secretHash := pbkdf2.Key(norm.NFKD.Bytes(pairingPassword), norm.NFKD.Bytes([]byte(pairingSalt)), 50000, 32, sha256.New)
84+
secretHash := pbkdf2.Key(norm.NFKD.Bytes(pairingPassword), norm.NFKD.Bytes([]byte(pairingSalt)), 600000, 32, sha256.New)
8585

8686
challenge := make([]byte, 32)
8787
if _, err := rand.Read(challenge); err != nil {

0 commit comments

Comments
 (0)