search

dominictarr / private-stream

MIT License
9 stars 1 forks source link

Ivs #5

Open calvinmetcalf opened 9 years ago

calvinmetcalf commented 9 years ago

Should not be hard coded, it's totally fine to randomly generate them and send them I the clear. They can't repeat for the same key

dominictarr commented 9 years ago

each side uses different keys, so there are never repeated key/iv pairs

dominictarr commented 9 years ago

now that I think about this for 5 minutes it would be easy to send another 8 bytes each way, and then you would not need a have a hash in the cipher-suite

dominictarr commented 9 years ago

https://github.com/dominictarr/private-stream/commit/ea7909f57a137130de78d0861af0fae6af06c745