fix: switch to default touch policy never for decrypt slot

smlx · Oct 13, 2021 · 5ec62e8 · 5ec62e8
1 parent 7c42065
commit 5ec62e8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/internal/securitykey/slotspec.go b/internal/securitykey/slotspec.go
@@ -45,5 +45,5 @@ var defaultDecryptSlots = map[string]SlotSpec{
 	// private key operations. Once the PIN has been provided successfully,
 	// multiple private key operations may be performed without additional
 	// cardholder consent.
-	"cached": {piv.SlotKeyManagement, piv.TouchPolicyCached},
+	"never": {piv.SlotKeyManagement, piv.TouchPolicyNever},
 }