derecalliance / protobufs

The format of DeRec messages.
Apache License 2.0
2 stars 0 forks source link

Replace helper's hash in `DeRecSecret.HelperSpecificInfo` with their public encryption key #33

Open zanctor opened 3 weeks ago

zanctor commented 3 weeks ago

The protocol says, that there are two further scenarios when the secret is successfully recovered:

  1. Unpair new pairings, continue using old ones;
  2. Unpair old pairings, update the new secret, continue using the new ones;

For the second case, we need to know the helpers' old public encryption keys in order to encrypt unpairing messages. There is no way to do that with just the SHA-384 hash of that key, if, for example, the current "new" encryption key is different from the "old" one. Thus I suggest replacing the helper hash with their public encryption key.