3 ms·

No padding used for keys sent by client? Public Key sent by server not verified by client? Keys sent by client are not verified by server? I suspect there are w

by n00body 10y ago

No padding used for keys sent by client? Public Key sent by server not verified by client? Keys sent by client are not verified by server? I suspect there are whole heap of problems wrong with this but thats just what i see atm.

tptacek 10y ago
1. Yep, that's one of my issues (echo unpadded rsa | openssl sha -sha256) 2. That's an issue but I didn't count it because the blog post cops to that problem.
- n00body 10y ago
  What about the zero length? Wouldn't that reveal the encrypted IV since he's just xoring sizeof(uint32_t) against the IV and not including any MAC?
  - tptacek 10y ago
    If it revealed anything, it'd be CTR keystream. The "IV" here is misnamed; it's the CTR counter block.