You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on May 13, 2022. It is now read-only.
The usage of Raiden identifier as unique secret tokens is flawed in two ways:
first, it is in bruteforce reach, since 64 bit does not provide enough entropy
second, the currently used SQLite DB backend does not support unsigned 64 bit integers natively - as a hotfix we restrict the int's to be signed and only chose values in the 63 bit positive range
The usage of Raiden identifier as unique secret tokens is flawed in two ways:
https://github.com/raiden-network/paywall/blob/c84e5407f60e5316dd477ca4a9bbf89ad2749c00/server/src/raiden_paywall/flask_raiden.py#L382-L395
The text was updated successfully, but these errors were encountered: