search

AOSC-Dev / aosc-os-abbs

ABBS/ACBS tree for AOSC OS package metadata, build configuration, scripts, and patches
https://packages.aosc.io
GNU General Public License v2.0
108 stars 85 forks source link

lurch / libomemo: 12-byte IVs patch #2568

Closed Neustradamus closed 3 years ago

Neustradamus commented 4 years ago

Hello @AOSC-Dev,

Here:

Can you add the missing 12-byte IVs patch:

Explanation:

Thanks in advance.

Fearyncess commented 3 years ago

XEP doesn't recommend use 12-bytes IV. https://github.com/xsf/xeps/pull/894#issuecomment-596255509 https://github.com/xsf/xeps/pull/903

Neustradamus commented 3 years ago

@fearyncess: The upstream is now good like all other OMEMO XMPP clients. Please update it to libomemo 0.7.0.

Can you reopen this ticket, close only when it will be good?

Thanks in advance.

Fearyncess commented 3 years ago

AOSC doesn't have libomemo. It only have lurch. The lurch isn't updated. And more, the XMPP clients almost can be compatible with 16bytes IV, except chatsecure. I think it needn't to change this for only chatsecure, even the 12bytes IV may has the security problem.

获取 Outlook for Androidhttps://aka.ms/ghei36

From: Neustradamus notifications@github.com Sent: Saturday, January 2, 2021 6:36:20 AM To: AOSC-Dev/aosc-os-abbs aosc-os-abbs@noreply.github.com Cc: fearyncess fsf@live.com; Mention mention@noreply.github.com Subject: Re: [AOSC-Dev/aosc-os-abbs] lurch / libomemo: 12-byte IVs patch (#2568)

@fearyncesshttps://github.com/fearyncess: The upstream is now good like all other OMEMO XMPP clients. Please update it to libomemo 0.7.0.

Can you reopen this ticket, close only when it will be good?

Thanks in advance.

― You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/AOSC-Dev/aosc-os-abbs/issues/2568#issuecomment-753398160, or unsubscribehttps://github.com/notifications/unsubscribe-auth/AMXLODR4PKIMYMDFZBCJWPDSXZE6JANCNFSM4UFWOXQQ.

Neustradamus commented 3 years ago

@fearyncess: Thanks for your comment :)

ChatSecure is good, there is a problem with Monal. Please read all for explanation: https://github.com/gkdr/libomemo/pull/27 The problem is that there was not a XEP-0384 0.3.1 before 0.4.0 with this. All clients send now with good 12-byte IV.

It is not possible to have separate libs like Debian for example?

At the same time, I have requested a 0.7.0 lurch build.

PS: You can always create a patch to have a perfect lurch because without, like currently, there is an incompatibility with other lurch and other clients.

Neustradamus commented 3 years ago

@fearyncess: Any news? Thanks in advance.