Add a MAC to the ACTIVATE message to prevent the introducer to fake them

A fake ACTIVATE message would cause us to activate the transport keys
before the contact has received our auth message,
which would compromise forward secrecy.
This commit is contained in:
Torsten Grote
2018-04-26 16:17:38 -03:00
parent 0e04044ebb
commit bd5504de26
22 changed files with 614 additions and 417 deletions

View File

@@ -26,4 +26,7 @@ public interface IntroductionConstants {
String LABEL_AUTH_NONCE = "org.briarproject.briar.introduction/AUTH_NONCE";
String LABEL_ACTIVATE_MAC =
"org.briarproject.briar.introduction/ACTIVATE_MAC";
}