v3.26.0 review: the keyless-TAR path

An MSL 00 TAR without a default keyset is a legitimate keyless entry, but
_resolve_operation_keyset left the request's KIc/KID empty and the RAM /
APDU builds failed with "invalid literal for int() with base 16: ''".
The resolution now fills the spec's no-security 00/00 KIc/KID form for a
preset entry without a keyset, and refuses a TAR outside the preset with
a hint (the old silent '25' default was arbitrary).  The PWA's TAR change
resets the form the same way - a stale previous TAR's KIc/KID would
otherwise travel explicitly and build a non-keyless packet.

Also: the dead _preset_tar_keyset helper removed; tests for both keyless
paths.  892 frontend + 886 Python; sw cache simple-v435.

This commit is contained in:

Антон Трошин

2026-10-14 12:32:04 +03:00

parent cb40662e4e

commit 8dfbb02c93

5 changed files with 101 additions and 11 deletions

									
										frontend/sw.js
									
		+1
		-1
	
												View File
												
				@@ -1,4 +1,4 @@

				const CACHE = 'simple-v434';

				const CACHE = 'simple-v435';

				const URLS = [

				  'index.html',

				  'help.html',