Skip to content

Fix: application no longer accesses private ephemeral key#183

Merged
geonnave merged 2 commits intolake-rs:mainfrom
geonnave:fix-private-key-accessed-by-application
Dec 26, 2023
Merged

Fix: application no longer accesses private ephemeral key#183
geonnave merged 2 commits intolake-rs:mainfrom
geonnave:fix-private-key-accessed-by-application

Conversation

@geonnave
Copy link
Copy Markdown
Collaborator

This fixes #182.

Copy link
Copy Markdown
Member

@malishav malishav left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this is the way to go. Just a note that the name compute_secret in src/lib.rs can be misleading since there are multiple secrets that the library can expose. I would suggest using a more explicit name, e.g. compute_ephemeral_secret, which should stress the fact that the ECDH secret is computed from the ephemeral private key.

@geonnave geonnave merged commit 06eeb47 into lake-rs:main Dec 26, 2023
@geonnave geonnave deleted the fix-private-key-accessed-by-application branch December 26, 2023 17:10
@geonnave geonnave added the type:bug/fix Something isn't working / a PR fixes something that is not working label Jan 10, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type:bug/fix Something isn't working / a PR fixes something that is not working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Avoid accessing private ephemeral key from application code

2 participants