4 ms·
I'm not really an expert, but it seems to me there's a bit of a problem with the message structure (length + message + HMAC). You can't check the signature wit
by amalcon 10y ago
I'm not really an expert, but it seems to me there's a bit of a problem with the message structure (length + message + HMAC). You can't check the signature without knowing the length, so the HMAC can't cover the length, so an attacker could plausibly truncate messages.
- tptacek 10y agoYep (it's also an oracle). echo length not authenticated | openssl sha -sha256 I'm sure there are lots of issues here I didn't spot. :)