View Issue Details
| ID | Project | Category | View Status | Date Submitted | Last Update |
|---|---|---|---|---|---|
| 0005434 | Taler | wallet (WebExtension) | public | 2018-09-19 09:35 | 2021-09-02 16:22 |
| Reporter | Florian Dold | Assigned To | Christian Grothoff | Resolution deadline | |
| Implementer | Reviewer | ||||
| Release signed by | Deployed by | ||||
| Verifier | Communicator | ||||
| Data protection authority notification required | No | ||||
| CSIRT notification required | No | ||||
| Estimated effort (hours) | Actual effort (hours) | 0 | |||
| Fast-track | No | ||||
| Work package | none | ||||
| Priority | normal | Severity | tweak | Reproducibility | have not tried |
| Status | closed | Resolution | fixed | ||
| Target Version | 0.6 | Fixed in Version | 0.6 | ||
| Summary | 0005434: the exchange's /wire response should not include salt for accounts | ||||
| Description | It seems we're reusing the same structs for signing as we do for the merchant, which incidentally includes a salt (to increase entropy), which is unnecessary if the payto URI is public anyway. | ||||
| Tags | No tags attached. | ||||
| Fixed in exchange in 81ce7abe..a56e2e34. Related merchant updates in f2a5860..9dd7d3d. Note that I did NOT update the wallet, and if the wallet checks /wire signatures, it should fail now (due to lack of salt). Thus assigning to Florian to ensure Wallet is updated as well. | |
| The wallet part for this has been fixed in 7b54439. | |
| Fix committed to master branch. | |
| Date Modified | Username | Field | Change |
|---|---|---|---|
| 2018-09-19 09:35 | Florian Dold | New Issue | |
| 2018-09-19 09:35 | Florian Dold | Status | new => assigned |
| 2018-09-19 09:35 | Florian Dold | Assigned To | => Christian Grothoff |
| 2018-10-06 13:06 | Christian Grothoff | Note Added: 0013263 | |
| 2018-10-06 13:06 | Christian Grothoff | Assigned To | Christian Grothoff => Florian Dold |
| 2018-10-06 13:06 | Christian Grothoff | Category | exchange => wallet (WebExtensions) |
| 2018-10-06 13:06 | Christian Grothoff | Severity | minor => tweak |
| 2018-11-17 23:39 | Christian Grothoff | Target Version | => 0.6 |
| 2019-12-05 22:21 | Florian Dold | Status | assigned => informing |
| 2019-12-05 22:21 | Florian Dold | Resolution | open => fixed |
| 2019-12-05 22:21 | Florian Dold | Note Added: 0015126 | |
| 2019-12-20 18:11 | Christian Grothoff | Fixed in Version | => 0.6 |
| 2019-12-20 18:11 | Christian Grothoff | Status | informing => closed |
| 2021-09-02 16:13 | Christian Grothoff | ||
| 2021-09-02 16:14 | Christian Grothoff | Note Added: 0018281 | |
| 2021-09-02 16:14 | Christian Grothoff | Assigned To | Florian Dold => Christian Grothoff |
| 2021-09-02 16:22 | Christian Grothoff | ||
| 2023-04-13 18:37 | Florian Dold | Category | wallet (WebExtensions) => wallet (WebExtension) |