mirror of
https://github.com/FiloSottile/age.git
synced 2025-12-23 05:25:14 +00:00
eaa4e03cfe
If the implementation re-encodes the header before checking the HMAC, that would mask malleability issues: the HMAC check would fail because the tests HMAC'd the original header, but an attacker could also produce the right HMAC. Instead of duplicating every parsing tests (with the original and re-encoded HMAC), we make the test framework distinguish HMAC errors, which ensures bad encodings are recognized as such and not bypassable HMAC errors.
14 lines
563 B
Plaintext
14 lines
563 B
Plaintext
expect: success
|
||
payload: 013f54400c82da08037759ada907a8b864e97de81c088a182062c4b5622fd2ab
|
||
file key: 59454c4c4f57205355424d4152494e45
|
||
identity: AGE-SECRET-KEY-1XMWWC06LY3EE5RYTXM9MFLAZ2U56JJJ36S0MYPDRWSVLUL66MV4QX3S7F6
|
||
|
||
age-encryption.org/v1
|
||
-> X25519 TEiF0ypqr+bpvcqXNyCVJpL7OuwPdVwPL7KQEbFDOCc
|
||
EmECAEcKN+n/Vs9SbWiV+Hu0r+E8R77DdWYyd83nw7U
|
||
-> stanza
|
||
QUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFB
|
||
QUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFB
|
||
|
||
--- cb4SqtunSJzXKDGjqeYxuva9Be80QXEDKDn2aKBaCsw
|
||
îÏbÇΑ´3'NhÔòùL·L[þ÷¾ªRÈð¼™, ƒ1ûf |