View Issue Details

IDProjectCategoryView StatusLast Update
0003708Talerexchangepublic2015-03-24 16:57
ReporterChristian Grothoff Assigned ToChristian Grothoff Resolution deadline
ImplementerReviewer 
Release signed byDeployed by 
VerifierCommunicator 
Data protection authority notification requiredNo  
CSIRT notification requiredNo  
Estimated effort (hours)Actual effort (hours)0 
Fast-trackNo
Work packagenone
PrioritynormalSeveritymajorReproducibilityN/A
Status closedResolutionfixed 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Product Versiongit (master) 
Target Version0.0Fixed in Version0.0 
Summary0003708: check use of session hash vs. session public key in refresh mint crypto
DescriptionThere used to be an issue with lifting the mint's signature over the noreveal_index from one session to another (as the sig didn't include the session). As theoretically clients could re-use the private key of the melting session, we need to clearly be careful with using the public key of the melting session to identify the melting session (as it is chosen by the client).

We should go over the use of the melting session public key and the hash in the protocol.
TagsNo tags attached.

Required notifications

Address or linkRemarkAdded byNotifiedActions

Activities

Christian Grothoff

2015-03-24 15:54

manager   ~0009046

Fixed in 73c9949..55959bd

Issue History

Date ModifiedUsernameFieldChange
2015-03-09 12:19Christian GrothoffNew Issue
2015-03-10 16:05Christian GrothoffSummarycheck use of session hash vs. session public key in mint crypto => check use of session hash vs. session public key in refresh mint crypto
2015-03-22 13:27Christian GrothoffAssigned To => Christian Grothoff
2015-03-22 13:27Christian GrothoffStatusnew => assigned
2015-03-24 15:54Christian GrothoffNote Added: 0009046
2015-03-24 15:54Christian GrothoffStatusassigned => informing
2015-03-24 15:54Christian GrothoffFixed in Version => 0.0
2015-03-24 15:54Christian GrothoffResolutionopen => fixed
2015-03-24 15:54Christian GrothoffTarget Version => 0.0
2015-03-24 16:57Christian GrothoffStatusinforming => closed
2016-02-18 14:43Christian GrothoffCategorymint => exchange