Specification typo: Wrong signing key in Sig02 calculation

assaabloy-ppi / salt-channel

The specification and the reference implementation of Salt Channel - a simple, light-weight secure channel protocol based on TweetNaCl by Bernstein.

MIT License

14 stars 11 forks source link

Specification typo: Wrong signing key in Sig02 calculation #33

Closed TSonono closed 3 years ago

TSonono commented 4 years ago

The wrong signing key seems to be used in the calculation for Sig02 in the latest version of the spec. The client's signature is created with the server's private signature key. Furthermore, the server is verifying the signature with the public server signing key.

Also the wrong challenge denotation (Chellange01 instead of Challenge02).