mirrors
/
olm
mirror of https://git.matrix.org/git/olm.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Merge pull request #32 from matrix-org/markjh/replay 

Document the potential for message replays and possible mitigations
rav/inter_device_key_shares
Mark Haines 2016-10-24 10:28:54 +01:00 committed by GitHub
parent d1a535861d 884ad02413
commit 8de0f1fbb3
1 changed files with 11 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
docs/megolm.rst
View File

@ -274,6 +274,17 @@ bytes preceding the signature.
Limitations
-----------
Message Replays
---------------
A message can be decrypted successfully multiple times. This means that an
attacker can re-send a copy of an old message, and the recipient will treat it
as a new message.
To mitigate this it is recommended that applications track the ratchet indices
they have received and that they reject messages with a ratchet index that
they have already decrypted.
Lack of Transcript Consistency
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~