search

openmls / openmls

Rust implementation of the Messaging Layer Security (MLS) protocol
https://openmls.tech
MIT License
625 stars 75 forks source link

Enforce AEAD limits #925

Closed raphaelrobert closed 1 month ago

raphaelrobert commented 2 years ago

Link to the exact changes https://github.com/mlswg/mls-protocol/pull/684

Description of the changes

Closes #664

franziskuskiefer commented 2 years ago

Related question: Should OpenMLS check for these limits or rely on the crypto provider?

kkohbrok commented 2 years ago

No particular opinion on who should keep track of this. But I'm wondering, where this is relevant. If I understand correctly, these limits are per key. And due to the sender ratchets, we use each symmetric key exactly one time. Is MLS using AEAD in other places?

raphaelrobert commented 1 month ago

There's indeed no reason to believe we run into any of these limits, closing this.