diff --git a/pico-keys-sdk b/pico-keys-sdk
index a9dc6fd..b663f5b 160000
--- a/pico-keys-sdk
+++ b/pico-keys-sdk
@@ -1 +1 @@
-Subproject commit a9dc6fd7f87fff7505ad526c7392ec1bc3a811a9
+Subproject commit b663f5bebf08355ecc561c7c439ab610f685042e
diff --git a/src/hsm/cmd_key_domain.c b/src/hsm/cmd_key_domain.c
index 827fe75..487a7c5 100644
--- a/src/hsm/cmd_key_domain.c
+++ b/src/hsm/cmd_key_domain.c
@@ -103,8 +103,8 @@ int cmd_key_domain() {
             return SW_WRONG_LENGTH();
         }
         if (p1 == 0x3) { //if key domain is not empty, command is denied
-            for (uint8_t i = 1; i < 256; i++) {
-                file_t *fkey = search_dynamic_file(KEY_PREFIX << 8 | i);
+            for (uint16_t i = 1; i < 256; i++) {
+                file_t *fkey = search_dynamic_file(KEY_PREFIX << 8 | (uint8_t)i);
                 if (get_key_domain(fkey) == p2) {
                     return SW_FILE_EXISTS();
                 }