View Issue Details

Jump to NotesJump to History
IDProjectCategoryView StatusDate SubmittedLast Update
0005530GNUnettransport servicepublic2019-01-28 18:242026-01-25 14:13
ReporterChristian Grothoff Assigned Toschanzen Due Date
PrioritynormalSeverityfeatureReproducibilityN/A
Status closedResolutionfixed 
Platformi7OSDebian GNU/LinuxOS Versionsqueeze
Target Version0.14.0Fixed in Version0.13.3 
Summary0005530: add replay protection to TCP communicator
DescriptionAs TCP is always bi-redirectional, we can easily add some weak form of replay protection by simply adding a nonce to the KX and requiring that the nonce is sent back. To avoid increasing latency on the initial handshake (and knowing that the first bytes sent will be CORE/CADET KX in all likelihood anyway) we would then simply require that after N bytes the nonce is played back to us.
TagsNo tags attached.

Relationships

related to 0006433 assigned Writing a test to simulate an attack on the tcp communicator KX to test the replay protection. 
child of 0005710 confirmed TNG meta issue 

Activities

There are no notes attached to this issue.

Issue History

Date ModifiedUsernameFieldChange
2019-01-28 18:24Christian GrothoffNew Issue
2019-01-28 18:24Christian GrothoffStatusnew => assigned
2019-01-28 18:24Christian GrothoffAssigned To => Matthias Wachs
2019-01-28 18:24Christian GrothoffAssigned ToMatthias Wachs =>
2019-01-28 18:24Christian GrothoffStatusassigned => acknowledged
2019-02-12 08:22Christian GrothoffTarget Version => 0.12.0
2019-05-02 12:40Christian GrothoffRelationship addedchild of 0005710
2019-11-16 17:41Christian GrothoffTarget Version0.12.0 => 0.13.0
2020-04-22 15:20schanzenTarget Version0.13.0 => 0.14.0
2020-06-01 20:21schanzenAssigned To => t3sserakt
2020-06-01 20:21schanzenStatusacknowledged => assigned
2020-07-17 10:06t3sseraktRelationship addedrelated to 0006433
2020-08-11 12:39schanzenTarget Version0.14.0 => 0.13.2
2020-08-14 07:13schanzenTarget Version0.13.2 => 0.13.3
2020-08-14 10:01schanzenTag Attached: tng
2020-09-05 16:11schanzenTarget Version0.13.3 => 0.13.4
2020-09-11 14:50t3sseraktAssigned Tot3sserakt => schanzen
2020-09-11 14:50t3sseraktStatusassigned => resolved
2020-09-11 14:50t3sseraktResolutionopen => fixed
2020-09-11 14:50t3sseraktFixed in Version => 0.13.3
2020-10-28 12:06schanzenTarget Version0.13.4 => 0.14.0
2020-10-29 10:13schanzenStatusresolved => closed
2024-05-03 11:59Christian GrothoffCategoryTCP transport => transport service
2026-01-25 14:13Christian GrothoffTag Detached: tng