Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

CR-01 Missing Inbound Messages Authentication #66

Open
xoloki opened this issue May 8, 2024 · 0 comments
Open

CR-01 Missing Inbound Messages Authentication #66

xoloki opened this issue May 8, 2024 · 0 comments
Assignees
Labels

Comments

@xoloki
Copy link
Collaborator

xoloki commented May 8, 2024

The methods process_inbound_messages() used by signer and coordinator do not
authenticate the data received. So while signers and the coordinator sign the messages
they send, the signature is not checked (neither by signers nor coordinator) within the
library and the responsibility is left for the implementers.

@xoloki xoloki added the audit label May 8, 2024
@xoloki xoloki self-assigned this May 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant