Skip to content

Conversation

@jaroban
Copy link

@jaroban jaroban commented Sep 29, 2020

A new constant for transport_key2 was added, but no corresponding 2nd transport key exists...
Also, the change was made only in the crypto_sha256_hmac_final function and not in crypto_sha256_hmac_init... this means that in one of the functions, (uint8_t*)1 or (uint8_t*)2 will be dereferenced and the memory there will be used as a key (!)
Either a 2nd key should be added or key 1 should be used.
This pull request removes the constant and uses key1.

@szszszsz
Copy link
Contributor

szszszsz commented Oct 9, 2020

Hi @jaroban !
Nice spot with the multiple evaluation!
I think its worth a separate PR, especially while it is not connected to the main topic anyway.

@jaroban
Copy link
Author

jaroban commented Oct 9, 2020

Done... there's a new PR + reverted this commit

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants