[mirror] Go supplementary cryptography libraries
Перейти к файлу
Reinaldo de Souza Jr aedad9a179 otr: Fix revealing MAC keys when a DH key is rotated
The existing implementation did not save all the fields in keySlot, which not
only caused a cache miss on every calcDataKeys() but also caused the rotate keys
functions to not find the MAC keys that should be revealed.

It also stops revealing the sending MAC keys. The finite-state analysis of the
otr v2 spec[1] revealed an attack on message integrity when sending MAC keys are
revealed. The spec had been updated accordingly [2].

1 - http://citeseerx.ist.psu.edu/viewdoc/download?doi=10.1.1.165.7945&rep=rep1&type=pdf
2 - 58fd90cb77/

Change-Id: Iee36205994ebdb27d8c890ae25fd9981326401df
Reviewed-on: https://go-review.googlesource.com/12781
Reviewed-by: Adam Langley <agl@golang.org>
2015-08-30 18:06:42 +00:00
bcrypt crypto: add import comments. 2014-12-09 23:26:36 +00:00
blowfish crypto: add import comments. 2014-12-09 23:26:36 +00:00
bn256 crypto: add import comments. 2014-12-09 23:26:36 +00:00
cast5 crypto: add import comments. 2014-12-09 23:26:36 +00:00
curve25519 poly1305, curve25519: add build constraints for appengine 2015-03-27 05:11:19 +00:00
hkdf crypto: add import comments. 2014-12-09 23:26:36 +00:00
md4 crypto: add import comments. 2014-12-09 23:26:36 +00:00
nacl crypto: add import comments. 2014-12-09 23:26:36 +00:00
ocsp ocsp: use asn1.Enumerated for revocation reason 2015-08-29 18:47:43 +00:00
openpgp openpgp: Handle signatures that have multiple signature packets 2015-08-29 22:14:55 +00:00
otr otr: Fix revealing MAC keys when a DH key is rotated 2015-08-30 18:06:42 +00:00
pbkdf2 crypto: add import comments. 2014-12-09 23:26:36 +00:00
poly1305 x/crypto/poly1305: fix memory alignment fault in ARM 2015-08-19 00:13:40 +00:00
ripemd160 crypto: add import comments. 2014-12-09 23:26:36 +00:00
salsa20 crypto: add import comments. 2014-12-09 23:26:36 +00:00
scrypt crypto: add import comments. 2014-12-09 23:26:36 +00:00
sha3 sha3: fix TestAppend to loop twice, to match the comments. 2015-04-16 05:37:58 +00:00
ssh crypto/ssh: Parse ECDSA key using struct 2015-08-29 22:25:31 +00:00
tea x/crypto: add support for Tiny Encryption Algorithm (TEA) 2015-07-29 20:20:17 +00:00
twofish crypto: add import comments. 2014-12-09 23:26:36 +00:00
xtea crypto: add import comments. 2014-12-09 23:26:36 +00:00
xts crypto: add import comments. 2014-12-09 23:26:36 +00:00
.gitattributes crypto: copying .gitattributes to all subrepositories 2014-12-23 06:54:52 +00:00
.gitignore convert .hgignore to .gitignore. 2014-12-08 10:41:13 +11:00
AUTHORS go.empty: prototype for new subrepository 2012-01-25 14:45:13 -05:00
CONTRIBUTING.md doc: add CONTRIBUTING.md 2015-02-18 23:42:20 +00:00
CONTRIBUTORS go.empty: prototype for new subrepository 2012-01-25 14:45:13 -05:00
LICENSE LICENSE: add 2012-03-17 15:19:30 +11:00
PATENTS go.crypto: add PATENTS file to the subrepo. 2012-04-16 11:25:08 +10:00
README go.crypto: initial code 2012-01-25 15:31:12 -05:00
codereview.cfg crypto: add codereview.cfg 2015-03-18 17:04:25 +00:00

README

This repository holds supplementary Go cryptography libraries.

To submit changes to this repository, see http://golang.org/doc/contribute.html.