search

oxen-io / libsession-util

Session utilities library
GNU General Public License v3.0
15 stars 16 forks source link

Groups: pad encrypted key list size #45

Closed jagerman closed 1 year ago

jagerman commented 1 year ago

Our list of group encryption keys won't be entirely encrypted: anyone will be able to read that it is a list of encrypted keys (but inside that each key is encrypted).

This leaks the group size. We can fix it easily, though, by appending dummy values to pad it out to the nearest increment of some multiple (maybe 64; will need to think about the final sizes) so that it doesn't directly leak the group size.

jagerman commented 1 year ago

(Thanks to @venezuela01 for suggesting this to me out-of-band)

frtget commented 1 year ago

It seems I have missed some information about the new closed groups design. Where can I read more about this ?

jagerman commented 1 year ago

This is done (in the merged version of #42).