Skip to content

Salt for key wrapping is constant #3622

@EmberPlot

Description

@EmberPlot

It seems that the salt for the wrapping of the key split(s) is a constant: asym_encryption.go#L63

	digest := sha256.New()
	digest.Write([]byte("TDF"))
	salt := digest.Sum(nil)

I'm not sure how much of a problem that is. The splits are already nonces, so there is already randomness. However, if two KASes for the same split share the same asymmetric key (e.g. KAS1 kid A == KAS2 kid B), then the KAOs would contain identical wrapped keys which leaks the information that "KAS1 kid A == KAS2 kid B".

It seems sensible to make the salt random.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions