A note on the confidentiality of private metadata sections

dfinity / ic-wasm

A collection of libraries and tools for transforming Wasm canisters running on the Internet Computer

Apache License 2.0

34 stars 5 forks source link

Closed oggy-dfin closed 1 year ago

oggy-dfin commented 1 year ago

We've recently realized that attackers could read private metadata sections if they're low-entropy - this documents this issue for the developers.