ExternalVendorCode/ZeroTierOne
1
0
Fork 0
mirror of https://github.com/zerotier/ZeroTierOne.git synced 2025-06-17 06:38:25 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Fix an endian-non-neutrality bug in new hashcash identity algo.

Browse Source
This commit is contained in:
Adam Ierymenko
2013-10-20 11:04:58 -04:00
parent 8c9b73f67b
commit 3c5c3280ff
2 changed files with 9 additions and 8 deletions
Download Patch File Download Diff File Expand all files Collapse all files

13
node/Identity.cpp
View File

@ -66,12 +66,13 @@ static inline void _computeMemoryHardHash(const void *publicKey,unsigned int pub
// Do something to genmem[] that iteratively makes every value
// possibly dependent on every other value with a nontrivial
// probability.
// probability. Continue to use already-initialized Salsa20 as
// a random source.
for(unsigned int i=0;i<ZT_IDENTITY_GEN_MEMORY;i+=ZT_IDENTITY_GEN_MEMORY_MIX_STEP) {
s20.encrypt((char *)genmem + i,(char *)genmem + i,8);
uint64_t x = *((uint64_t *)((char *)genmem + i));
if ((x / 7ULL) < 0x1249249249249249ULL) {
s20.encrypt(&x,&x,8); // also causes PRNG state to depend on genmem[]'s state
s20.encrypt((char *)genmem + i,(char *)genmem + i,64);
uint64_t x = Utils::ntoh(*((uint64_t *)((char *)genmem + i)));
if (!(x & 3)) {
s20.encrypt((char *)genmem + i,(char *)genmem + i,64); // also makes future salsa20 state content-dependent
for(unsigned int k=0;k<8;++k,x>>=8)
++((unsigned char *)genmem)[(uintptr_t)x % ZT_IDENTITY_GEN_MEMORY];
} else {
@ -135,7 +136,7 @@ bool Identity::locallyValidate() const
unsigned char addrb[5];
_address.copyTo(addrb,5);
return (
(digest[0] < ZT_IDENTITY_GEN_HASHCASH_FIRST_BYTE_LESS_THAN)&&
(digest[59] == addrb[0])&&