derecalliance / protobufs

The format of DeRec messages.
Apache License 2.0
3 stars 0 forks source link

Replace helper's hash in `DeRecSecret.HelperSpecificInfo` with their public encryption key #33

Closed zanctor closed 3 months ago

zanctor commented 5 months ago

The protocol says, that there are two further scenarios when the secret is successfully recovered:

  1. Unpair new pairings, continue using old ones;
  2. Unpair old pairings, update the new secret, continue using the new ones;

For the second case, we need to know the helpers' old public encryption keys in order to encrypt unpairing messages. There is no way to do that with just the SHA-384 hash of that key, if, for example, the current "new" encryption key is different from the "old" one. Thus I suggest replacing the helper hash with their public encryption key.