Closed Bug 547049 Opened 14 years ago Closed 14 years ago

Verify that encrypted payloads correspond to the requested record

Categories

(Firefox :: Sync, defect)

defect
Not set
normal

Tracking

()

RESOLVED FIXED

People

(Reporter: Mardak, Assigned: Mardak)

References

Details

Attachments

(1 file, 1 obsolete file)

We can encrypt the record's id in the encrypted blob to do a sanity check that this blob didn't belong to a different record id.
Depends on: 549635
Flags: blocking-weave1.2+
Target Milestone: --- → 1.2
Attached patch v1 (obsolete) — Splinter Review
Assignee: nobody → edilee
Status: NEW → ASSIGNED
Attachment #430775 - Flags: review?(mconnor)
Depends on: 545517
Blocks: 549635
No longer depends on: 549635
Attached patch v1.1Splinter Review
Attachment #430775 - Attachment is obsolete: true
Attachment #431448 - Flags: feedback?(edilee)
Attachment #430775 - Flags: review?(mconnor)
Attachment #431448 - Flags: feedback?(edilee) → review?(mconnor)
Attachment #431448 - Flags: review?(mconnor) → review+
Whiteboard: [has patch][has review]
http://hg.mozilla.org/labs/weave/rev/0e54deb91e42
Write the record's id to both .data and .cleartext and check that they match when decrypting.
Status: ASSIGNED → RESOLVED
Closed: 14 years ago
Resolution: --- → FIXED
Whiteboard: [has patch][has review]
Component: Firefox Sync: Crypto → Sync
Product: Cloud Services → Firefox
You need to log in before you can comment on or make changes to this bug.

Attachment

General

Creator:
Created:
Updated:
Size: