You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
For the eventual work on e2e encrypted (private) repos, hashes like the rank (hash of the key) or hashes of the node might leak some private information, for example there would be a globally well-known rank for the key bitcoin wallet backup, to avoid this, we should mix the encryption key (or a hash of it) with all hashing operations, so instead of rank = hash(key) it should be rank = hash(key | encrypitonKey) or rank = hash(key | hash(encryptionKey))
The text was updated successfully, but these errors were encountered:
For the eventual work on e2e encrypted (private) repos, hashes like the
rank
(hash of the key) or hashes of the node might leak some private information, for example there would be a globally well-knownrank
for the keybitcoin wallet backup
, to avoid this, we should mix the encryption key (or a hash of it) with all hashing operations, so instead ofrank = hash(key)
it should berank = hash(key | encrypitonKey)
orrank = hash(key | hash(encryptionKey))
The text was updated successfully, but these errors were encountered: