Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove CRYPTO_TRANSPORT_KEY2 #474

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Conversation

jaroban
Copy link

@jaroban jaroban commented Sep 29, 2020

A new constant for transport_key2 was added, but no corresponding 2nd transport key exists...
Also, the change was made only in the crypto_sha256_hmac_final function and not in crypto_sha256_hmac_init... this means that in one of the functions, (uint8_t*)1 or (uint8_t*)2 will be dereferenced and the memory there will be used as a key (!)
Either a 2nd key should be added or key 1 should be used.
This pull request removes the constant and uses key1.

@szszszsz
Copy link
Contributor

szszszsz commented Oct 9, 2020

Hi @jaroban !
Nice spot with the multiple evaluation!
I think its worth a separate PR, especially while it is not connected to the main topic anyway.

@jaroban
Copy link
Author

jaroban commented Oct 9, 2020

Done... there's a new PR + reverted this commit

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants