From c0dfbb73774c00b8ab000411c65051bea9e44060 Mon Sep 17 00:00:00 2001
From: Alessio Di Mauro <alessio@yubico.com>
Date: Tue, 24 Nov 2015 14:29:38 +0100
Subject: [PATCH] Whitelist retired key IDs.

---
 ykcs11/utils.c | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/ykcs11/utils.c b/ykcs11/utils.c
index c647bf9..b350b97 100644
--- a/ykcs11/utils.c
+++ b/ykcs11/utils.c
@@ -175,8 +175,8 @@ void destroy_token(ykcs11_slot_t *slot) {
 
 CK_BBOOL is_valid_key_id(CK_BYTE id) {
 
-  // Valid ids are 0, 1, 2, 3
-  if (id > 3)
+  // Valid ids are [0, 23] aka [0x00, 0x17]
+  if (id > 23)
     return CK_FALSE;
 
   return CK_TRUE;