tmoldovan8x8
e354745db5
task(e2ee): switch back to GCM
4 år sedan
Saúl Ibarra Corretgé
09b98457ba
fix(e2ee) update docs after dropping signatures
4 år sedan
Philipp Hancke
6784189600
(feat) e2ee: sign and verify frames (#1373)
Signs and verifies frames. For now this is done on every frame.
This is not the long-term goal and there needs to be a better strategy.
5 år sedan
Saúl Ibarra Corretgé
5a462a2eb5
fix(e2ee) add more documentation
5 år sedan
Philipp Hancke
00c8cfad98
e2ee: sync key ring size and packet format
this uses the full four bits in the wire format. The wire format
looses the (currently not implemented) extensibility with variable
length keys.
5 år sedan
Philipp Hancke
4a6e493f41
e2ee: Ratchet the key forward on authentication tag errors
similar to what is explained here:
https://tools.ietf.org/html/draft-omara-sframe-00#section-4.3.5.1
but we do it on authentication tag failures since it is not possible
to tell whether decrypt.
5 år sedan
Philipp Hancke
85fde1aeae
e2ee: use CTR instead of GCM
following
https://tools.ietf.org/html/draft-omara-sframe-00
but putting the frame metadata into a trailer instead of a header.
We call this JFrame.
Also the key we get from OLM is high entropy so we do not need
to use PBKDF2 but can use HKDF instead. See
https://wiki.developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/deriveKey#HKDF
5 år sedan
Philipp Hancke
cbad14bc48
e2ee: derive per-participant keys
derived from the participant id in addition to the salt, separated by a null
byte to avoid ambiguity attacks along the lines of
(someRoom, someParticipant)
(someRoo, mSomeParticipant)
5 år sedan
Philipp Hancke
ba0777f0cf
e2ee: move to a worker (#1112)
Moveѕ e2ee operations to a worker that is included as text/blob for now
to simplify deployment.
5 år sedan
Philipp Hancke
e4838d319f
e2ee: update docs (#1101)
fixing some minor issues and updating the description of the behaviour
when there are decoding errors
5 år sedan
Philipp Hancke
130a1dfedd
e2ee: add high-level docs
adds a document describing the high-level design of the current e2ee approach
5 år sedan