Skip to content

Conversation

Alevsk
Copy link
Contributor

@Alevsk Alevsk commented Sep 18, 2020

No description provided.

@Alevsk Alevsk self-assigned this Sep 18, 2020
@dvaldivia dvaldivia merged commit 666904f into minio:master Sep 18, 2020
@Alevsk Alevsk deleted the fix-regression-token-chacha20 branch September 18, 2020 01:49
@aead
Copy link
Member

aead commented Sep 19, 2020

Guys, wait - this change is not correct. Now, tokens are malleable. The correct fix is to generate a 16 byte IV, not a 32 byte IV an then ignoring half of it...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants