docs-matrix-spec/changelogs/client_server/newsfragments/1712.clarification at c4e69d8cb15c3442484e988a83dc85d749423caa - wholetrans/docs-matrix-spec - Owu Git

wholetrans/docs-matrix-spec

Sumner Evans 9a5cacda90

Clarify that the key backup MAC is implemented incorrectly (#1712 )

* Clarify that the key backup MAC is implemented incorrectly

Due to a bug in libolm, all implementations of the
m.megolm_backup.v1.curve25519-aes-sha2 key backup algorithm incorrectly
pass an empty string through HMAC-SHA-256 to generate the `mac` property
of the `session_data`.

It was intended for the entire raw encrypted data to be passed through
HMAC-SHA-256, but the issue was caught too late in the process, and thus
we are stuck with this until a new key backup algorithm is introduced.

This commit clarifies the real-world behavior of all current
implementations.

Signed-off-by: Sumner Evans <sumner@beeper.com>

2024-01-16 14:11:44 -05:00

1 line

114 B

Text

Raw Blame History

Clarify that the key backup MAC is implemented incorrectly and does not pass the ciphertext through HMAC-SHA-256.