cloudflare / cloudflare/boringtun
Loosen precision of timestamp in initiation message
Open
security review
- Dominant language
- Rust
- Stars
- 7.2k
- Forks
- 532
- PR merge metrics
- No merged PRs in 30d
Description
Right now the timestamp field of the initiation message is too precise due (`TimeStamper::stamp`). It should be truncated to avoid acting as a time oracle which could aid in other attacks.
The Linux kernel implementation choses to truncate the value based on the possible number of initiations per second, see https://github.com/WireGuard/WireGuard/commit/c62836ef83bf.
Contributor guide
Assessment
This issue has not been assessed yet.