tmoldovan8x8
e354745db5
task(e2ee): switch back to GCM
il y a 4 ans
Saúl Ibarra Corretgé
09b98457ba
fix(e2ee) update docs after dropping signatures
il y a 4 ans
Philipp Hancke
6784189600
(feat) e2ee: sign and verify frames (#1373)
Signs and verifies frames. For now this is done on every frame.
This is not the long-term goal and there needs to be a better strategy.
il y a 4 ans
Saúl Ibarra Corretgé
5a462a2eb5
fix(e2ee) add more documentation
il y a 4 ans
Philipp Hancke
00c8cfad98
e2ee: sync key ring size and packet format
this uses the full four bits in the wire format. The wire format
looses the (currently not implemented) extensibility with variable
length keys.
il y a 4 ans
Philipp Hancke
4a6e493f41
e2ee: Ratchet the key forward on authentication tag errors
similar to what is explained here:
https://tools.ietf.org/html/draft-omara-sframe-00#section-4.3.5.1
but we do it on authentication tag failures since it is not possible
to tell whether decrypt.
il y a 4 ans
Philipp Hancke
85fde1aeae
e2ee: use CTR instead of GCM
following
https://tools.ietf.org/html/draft-omara-sframe-00
but putting the frame metadata into a trailer instead of a header.
We call this JFrame.
Also the key we get from OLM is high entropy so we do not need
to use PBKDF2 but can use HKDF instead. See
https://wiki.developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/deriveKey#HKDF
il y a 4 ans
Philipp Hancke
cbad14bc48
e2ee: derive per-participant keys
derived from the participant id in addition to the salt, separated by a null
byte to avoid ambiguity attacks along the lines of
(someRoom, someParticipant)
(someRoo, mSomeParticipant)
il y a 5 ans
Philipp Hancke
ba0777f0cf
e2ee: move to a worker (#1112)
Moveѕ e2ee operations to a worker that is included as text/blob for now
to simplify deployment.
il y a 5 ans
Philipp Hancke
e4838d319f
e2ee: update docs (#1101)
fixing some minor issues and updating the description of the behaviour
when there are decoding errors
il y a 5 ans
Philipp Hancke
130a1dfedd
e2ee: add high-level docs
adds a document describing the high-level design of the current e2ee approach
il y a 5 ans