eriptic / uoscore-uedhoc

C implementations for constrained (and non-constrained) devices of the IETF protocols OSCORE and EDHOC
Other
15 stars 15 forks source link

feat: added SSN overflow protection #40

Closed mopsiok closed 1 year ago

mopsiok commented 1 year ago

Prior to this change, Sender Sequence Number could be increased endlessly, which would result in exceeding the maximum value that is writable into 5-byte PIV field.

In addition, further investigation has been made as to its maximum value for the supported AEAD algorithm (the suggested value is 2^23, not 2^40). Please refer to the comments for more information.