From dde97e45d0f562262d083653aacef5514cd41fb3 Mon Sep 17 00:00:00 2001 From: Lucas Date: Thu, 11 Feb 2021 21:21:01 +0000 Subject: [PATCH] Don't call otp if the hmac is unknown --- otp.c | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/otp.c b/otp.c index 021803b..05316bc 100644 --- a/otp.c +++ b/otp.c @@ -75,9 +75,17 @@ hotp(enum otp_hmac hmac, const void *key, size_t key_len, uint64_t counter, return -1; switch (hmac) { - case OTP_HMAC_SHA1: evp_md = EVP_sha1(); break; - case OTP_HMAC_SHA256: evp_md = EVP_sha256(); break; - case OTP_HMAC_SHA512: evp_md = EVP_sha512(); break; + case OTP_HMAC_SHA1: + evp_md = EVP_sha1(); + break; + case OTP_HMAC_SHA256: + evp_md = EVP_sha256(); + break; + case OTP_HMAC_SHA512: + evp_md = EVP_sha512(); + break; + default: + return -1; } return otp(evp_md, key, (int)key_len, counter, digits);