search

credential-handler / authn.io

Credential Mediator Polyfill
https://github.com/w3c-ccg/credential-handler-api
Other
44 stars 8 forks source link

Use HMAC instead of AES encryption for Proof of Patience? #25

Closed dlongley closed 8 years ago

dlongley commented 9 years ago

We encrypt the proof-of-patience token here using AES:

https://github.com/digitalbazaar/authorization.io/blob/master/lib/proofs.js#L94-L100

Can we just use an HMAC instead? Does the data need to be hidden or do we just need to assert it hasn't been changed?

dlongley commented 8 years ago

Fixed in b2450e33951aa53be3628bb5ceeec0f1e0c63693.