lnd.xprv/brontide
Olaoluwa Osuntokun ad180b4fba
brontide: fix bug in final sender/receiver key derivation
This commit fixes a bug in our key derivation for the final step of the
key exchange. In our code we were swapping the order of the salt and
input keyeing material to the HKDF function. This was triggered by the
argument order of the golang implementation we’re currently using has
the “secret” of IKM argument first, instead of second as defined within
rfc5869.

To fix this, we simply need to swap function arguments in two places:
within the split() function and during key rotation.

This bug was discovered by Rusty Russell, thanks!
2016-12-13 11:32:02 -08:00
..
conn.go brontide: implement handshake versioning enforcement per the spec 2016-11-30 19:11:58 -08:00
listener.go brontide: implement handshake versioning enforcement per the spec 2016-11-30 19:11:58 -08:00
noise_test.go brontide: fix bug in final sender/receiver key derivation 2016-12-13 11:32:02 -08:00
noise.go brontide: fix bug in final sender/receiver key derivation 2016-12-13 11:32:02 -08:00