search

xvk-64 / 2024-secure-programming-protocol

2024 repository for the protocol for COMP SCI 3307 Secure Programming
9 stars 9 forks source link

Message Signing #13

Closed mortonjack closed 1 month ago

mortonjack commented 1 month ago

Messages are not signed with a user's private key. Hence, messages such as server_hello and public_chat can be easily forged.

We should modify this to ensure all messages of type signed_data are signed with the sender's private key in some way.

mortonjack commented 1 month ago

Upon further investigation I think this is just a poor explanation. The bottom of the README explains the signing mechanism in full.