n00body

4 ms·

1. 1.▲
   by n00body 10y ago

   A replay attack? Problem with the block counter being updated? I give up. what is third thing? :D
2. 2.▲
   by n00body 10y ago

   What about the zero length? Wouldn't that reveal the encrypted IV since he's just xoring sizeof(uint32_t) against the IV and not including any MAC?
3. 3.▲
   by n00body 10y ago

   No padding used for keys sent by client? Public Key sent by server not verified by client? Keys sent by client are not verified by server? I suspect there are whole heap of problems wrong with this but thats just what i see atm.
4. 4.▲
   by n00body 10y ago

   What are the hashes of? :D
5. 5.▲
   by n00body 10y ago

   I'm no expert but it's obvious he hasn't seeded PRNG so the key pair could be weak. What do you see?