mirror of
https://github.com/tahoe-lafs/tahoe-lafs.git
synced 2025-01-31 08:25:35 +00:00
dirnode.py: security bug: also use child writecap to derive child enc key,
not just the dirnode writecap. The previous code (which only hashed the dirnode writecap) would use the same key for all children, which is very bad. This is the correct implementation of #750.
This commit is contained in:
parent
93ef0fb84d
commit
c1d5717cf0
@ -195,7 +195,7 @@ class NewDirectoryNode:
|
||||
|
||||
def _encrypt_rwcap(self, rwcap):
|
||||
assert isinstance(rwcap, str)
|
||||
IV = hashutil.mutable_rwcap_iv_hash(self._node.get_writekey())
|
||||
IV = hashutil.mutable_rwcap_iv_hash(rwcap)
|
||||
key = hashutil.mutable_rwcap_key_hash(IV, self._node.get_writekey())
|
||||
cryptor = AES(key)
|
||||
crypttext = cryptor.process(rwcap)
|
||||
|
Loading…
x
Reference in New Issue
Block a user