search

jitsi / zrtp4j

Java implementation of ZRTP protocol
GNU General Public License v3.0
6 stars 14 forks source link

Remove ZrtpFortuna, use SecureRandom instead #1

Closed champtar closed 8 years ago

champtar commented 8 years ago

this need to be merged after https://github.com/jitsi/libjitsi/pull/113

ibauersachs commented 8 years ago

Not merging this, as it would create an even bigger fork in Jitsi. Consider creating a PR at https://github.com/wernerd/ZRTP4J.

champtar commented 8 years ago

I've open https://github.com/wernerd/ZRTP4J/pull/5

champtar commented 8 years ago

@ibauersachs can you reconsider this PR? we are in an unsecure state since https://github.com/jitsi/libjitsi/pull/113 and @wernerd doesn't really want to merge https://github.com/wernerd/ZRTP4J/pull/5

ibauersachs commented 8 years ago

No. If there's going to be a fork, then it's going to be one that removes all the other crap too (BigInteger, array nullings, bccontrib). Feel free to start that in your own repo and I'll consider replacing the entire lib.

champtar commented 8 years ago

@ibauersachs I'm talking about fixing a security issue, you're talking about code maintenance ...