ayo/kitty
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

5 minutes does not actually prevent replay just minimise it

Browse source
This commit is contained in:
Kovid Goyal 2022-08-11 06:38:59 +05:30
parent daa7df96d1
commit 926a2828ab
No known key found for this signature in database
GPG key ID: 06BC317B515ACE7C
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
docs/rc_protocol.rst
View file

@ -47,7 +47,7 @@ encrypted to keep the password secure. A public key is used from the
protocol is supported. The protocol number is present in
:envvar:`KITTY_PUBLIC_KEY` as ``1``. The key data in this environment variable is Base-85 encoded.
The algorithm used is Elliptic Curve Diffie Helman with the X25519 curve. A
time based nonce is used to avoid replay attacks. The original JSON command has
time based nonce is used to minimise replay attacks. The original JSON command has
the fields: ``password`` and ``timestamp`` added. The timestamp is the number
of nanoseconds since the epoch, excluding leap seconds. Commands with a
timestamp more than 5 minutes from the current time are rejected. The command is then