Commit c976dfd6 authored by Ian Goldberg's avatar Ian Goldberg
Browse files

Protocol-v3.html was incompletely specifying handling of some messages

How to handle v2 versus v3 messages for the Reveal Signature and
Signature messages was missing from the Protocol-v3.html document.

Thanks to Ola Bini <obini@thoughtworks.com> for the report.

Fixes #119

Signed-off-by: default avatarIan Goldberg <iang@cs.uwaterloo.ca>
parent aece877f
...@@ -1611,7 +1611,9 @@ AUTHSTATE_V1_SETUP:</dt> ...@@ -1611,7 +1611,9 @@ AUTHSTATE_V1_SETUP:</dt>
<dd>Ignore the message.</dd> <dd>Ignore the message.</dd>
</dl> </dl>
<h4>Receiving a Reveal Signature Message</h4> <h4>Receiving a Reveal Signature Message</h4>
<p>If ALLOW_V2 is not set, ignore this message. Otherwise:</p> <p>If the message is version 2 and ALLOW_V2 is not set, ignore this message.
Similarly if the message is version 3 and ALLOW_V3 is not set, ignore the
message. Otherwise:</p>
<dl> <dl>
<dt>If authstate is AUTHSTATE_AWAITING_REVEALSIG:</dt> <dt>If authstate is AUTHSTATE_AWAITING_REVEALSIG:</dt>
<dd>Use the received value of r to decrypt the value of g<sup>x</sup> <dd>Use the received value of r to decrypt the value of g<sup>x</sup>
...@@ -1631,7 +1633,9 @@ AUTHSTATE_AWAITING_SIG, or AUTHSTATE_V1_SETUP:</dt> ...@@ -1631,7 +1633,9 @@ AUTHSTATE_AWAITING_SIG, or AUTHSTATE_V1_SETUP:</dt>
<dd>Ignore the message.</dd> <dd>Ignore the message.</dd>
</dl> </dl>
<h4>Receiving a Signature Message</h4> <h4>Receiving a Signature Message</h4>
<p>If ALLOW_V2 is not set, ignore this message. Otherwise:</p> <p>If the message is version 2 and ALLOW_V2 is not set, ignore this message.
Similarly if the message is version 3 and ALLOW_V3 is not set, ignore the
message. Otherwise:</p>
<dl> <dl>
<dt>If authstate is AUTHSTATE_AWAITING_SIG:</dt> <dt>If authstate is AUTHSTATE_AWAITING_SIG:</dt>
<dd>Decrypt the encrypted signature, and verify the signature and the MACs. <dd>Decrypt the encrypted signature, and verify the signature and the MACs.
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment