From 12a3c63b75044b207dd7982ce3ed170231bd4467 Mon Sep 17 00:00:00 2001
From: Paul Selkirk <paul@psgd.org>
Date: Sun, 15 Oct 2017 21:36:57 -0400
Subject: Correctly mark "unsecure" KEK as erased.

---
 ks_token.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

(limited to 'ks_token.c')

diff --git a/ks_token.c b/ks_token.c
index a6cad0e..b96d279 100644
--- a/ks_token.c
+++ b/ks_token.c
@@ -640,7 +640,7 @@ hal_error_t hal_mkm_flash_erase(const size_t len)
 
   hal_ks_pin_block_t new_data = block->pin;
 
-  new_data.kek_set = FLASH_KEK_SET;
+  new_data.kek_set = FLASH_KEK_NOT_SET;
   memset(new_data.kek, 0, len);
 
   err = update_pin_block(b, block, &new_data);
-- 
cgit v1.2.3