diff options
| author | bndw <ben@bdw.to> | 2026-03-09 17:36:21 -0700 |
|---|---|---|
| committer | bndw <ben@bdw.to> | 2026-03-09 17:36:21 -0700 |
| commit | eca962d7c26bbea57801576935b98f3540e43da6 (patch) | |
| tree | 19653f192107b5b74a8113af570d4b9c979a7e0d /relay/subscription/git@code.northwest.io:axon.git | |
| parent | 9886a5c9054f3308482fdcca0fa545c8befbcf5b (diff) | |
fix: harden DM crypto — HKDF key derivation, AEAD associated data, ModInverse nil check
- Derive symmetric key via HKDF-SHA256 instead of using raw X25519 shared secret
- Bind sender + recipient pubkeys as ChaCha20-Poly1305 associated data to prevent key-confusion attacks
- Guard against ModInverse panic on degenerate public keys (y=1)
- Wrap DecryptDM error instead of swallowing it
- Update JS client to match Go implementation
- Document encryption details in PROTOCOL.md
Diffstat (limited to 'relay/subscription/git@code.northwest.io:axon.git')
0 files changed, 0 insertions, 0 deletions