Skip to content

Conversation

@jaroban
Copy link

@jaroban jaroban commented Sep 29, 2020

A new constant for transport_key2 was added, but no corresponding 2nd transport key exists...
Also, the change was made only in the crypto_sha256_hmac_final function and not in crypto_sha256_hmac_init... this means that in one of the functions, (uint8_t*)1 or (uint8_t*)2 will be dereferenced and the memory there will be used as a key (!)
Either a 2nd key should be added or key 1 should be used.
This pull request removes the constant and uses key1.

@szszszsz
Copy link
Contributor

szszszsz commented Oct 9, 2020

Hi @jaroban !
Nice spot with the multiple evaluation!
I think its worth a separate PR, especially while it is not connected to the main topic anyway.

@jaroban
Copy link
Author

jaroban commented Oct 9, 2020

Done... there's a new PR + reverted this commit

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants