search

paseto-standard / paseto-spec

Specification for Platform Agnostic SEcurity TOkens (PASETO)
165 stars 9 forks source link

Fix decryption step 3 on version 4. #12

Closed dajiaji closed 2 years ago

dajiaji commented 2 years ago

Hi @paragonie-security,

I found a problem in decryption step 3 of version 4. It seems that the process to extract the BLAKE2b-MAC value t is missing.

I'd appreciate it if you can check and merge it.

By the way, I've implemented a PASETO library for Python without using libsodium.

PySETO: https://github.com/dajiaji/pyseto

This PySETO supports all of the PASETO versions and purposes (At least, it can process all of official test vectors). I'm very glad if you can add this to the implementation list on https://paseto.io.

paragonie-security commented 2 years ago

If you'd like to add it to paseto.io, send a pull request to https://github.com/paragonie/paseto-io