cloudflare / cloudflare/boringtun

Loosen precision of timestamp in initiation message

Open
#53 0 comments 0 reactions 1 assignee Claimed by @vkrasnov View on GitHub
security review
Dominant language
Rust
Stars
7.2k
Forks
532
PR merge metrics
No merged PRs in 30d

Description

Right now the timestamp field of the initiation message is too precise due (`TimeStamper::stamp`). It should be truncated to avoid acting as a time oracle which could aid in other attacks.

The Linux kernel implementation choses to truncate the value based on the possible number of initiations per second, see https://github.com/WireGuard/WireGuard/commit/c62836ef83bf.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.