diff options
Diffstat (limited to 'changes/replay-firstpart')
| -rw-r--r-- | changes/replay-firstpart | 13 |
1 files changed, 13 insertions, 0 deletions
diff --git a/changes/replay-firstpart b/changes/replay-firstpart new file mode 100644 index 000000000..f4a7767fb --- /dev/null +++ b/changes/replay-firstpart @@ -0,0 +1,13 @@ + o Minor features (security): + + - Check for replays of the public-key encrypted portion of an + INTRODUCE1 cell, in addition to the current check for replays of + the g^x value. This prevents a possible class of active attacks + by an attacker who controls both an introduction point and a + rendezvous point, and who uses the malleability of AES-CTR to + alter the encrypted g^x portion of the INTRODUCE1 cell. We + think that these attacks is infeasible (requiring the attacker + to send on the order of zettabytes of altered cells in a short + interval), but we'd rather block them off in case there are any + classes of this attack that we missed. Reported by dvorak. + |