mirrors/redoctober
1
0
Fork 0
mirror of https://github.com/cloudflare/redoctober.git synced 2026-07-31 20:36:16 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

SHA256 the ECDH shared key

Browse Source 
This ensures the shared key is a more uniform distribution than just
taking the bytes from the shared X.
This commit is contained in:
Kyle
2014-01-10 16:27:14 -07:00
parent 1916f385ed
commit de5b1817c7
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
ecdh/ecdh.go
+3 -2
View File
@@ -11,6 +11,7 @@ import (
"crypto/hmac"
"crypto/rand"
"crypto/sha1"
"crypto/sha256"
"errors"
"github.com/cloudflare/redoctober/padding"
"github.com/cloudflare/redoctober/symcrypt"
@@ -36,7 +37,7 @@ func Encrypt(pub ecdsa.PublicKey, in []byte) (out []byte, err error) {
if x == nil {
return nil, errors.New("Failed to generate encryption key")
}
shared := x.Bytes()
shared := sha256.Sum256(x.Bytes())
iv, err := symcrypt.MakeRandom(16)
if err != nil {
return
@@ -82,7 +83,7 @@ func Decrypt(priv *ecdsa.PrivateKey, in []byte) (out []byte, err error) {
if x == nil {
return nil, errors.New("Failed to generate encryption key")
}
shared := x.Bytes()
shared := sha256.Sum256(x.Bytes())
tagStart := len(ct) - sha1.Size
h := hmac.New(sha1.New, shared[16:])