News for hackers. Stuff that matters.

A comment on Secure channels over TCP/IP.

Re:Secure channels over TCP/IP by 0xEA on Tuesday July 07, 2015 @07:09PM (#9848739)
Your message length is sent in plain text and unauthenticated. Does this present a problem?
[ Parent | on HN ]
Re:Secure channels over TCP/IP by tptacek on Tuesday July 07, 2015 @07:11PM (#9848751)
Probably not, because messages are authenticated cryptographically, and the lengths are validated before being passed to libsodium. You can't truncate an authenticated message.
[ Parent | on HN ]