Filip/matrix-spec
1
0
Fork 0
mirror of https://github.com/matrix-org/matrix-spec synced 2026-03-20 02:14:10 +01:00
Code Issues Actions 1 Packages Projects Releases Wiki Activity

Add salt to example and signal link

Browse source
This commit is contained in:
Andrew Morgan 2019-06-18 17:03:49 +01:00
parent 063b9f60e0
commit bc9b6c3659
1 changed files with 4 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
proposals/2134-identity-hash-lookup.md
View file

@ -33,7 +33,8 @@ digest should be encoded in unpadded base64. For example:
```python ```python
address = "user@example.org" address = "user@example.org"
digest = hashlib.sha256(address.encode()).digest() salt = "matrix"
digest = hashlib.sha256((salt + address).encode()).digest()
result_address = unpaddedbase64.encode_base64(digest) result_address = unpaddedbase64.encode_base64(digest)
print(result_address) print(result_address)
CpvOgBf0hFzdqZD4ASvWW0DAefErRRX5y8IegMBO98w CpvOgBf0hFzdqZD4ASvWW0DAefErRRX5y8IegMBO98w
@ -85,6 +86,8 @@ bind, as it cannot trust a homeserver to do so as the homeserver may be lying.
Additionally, only storing 3pid hashes at rest instead of the plain-text Additionally, only storing 3pid hashes at rest instead of the plain-text
versions is impractical if the hashing algorithm ever needs to be changed. versions is impractical if the hashing algorithm ever needs to be changed.
Bloom filters are an alternative method of providing private contact discovery, however does not scale well due to clients needing to download a large filter that needs updating every time a new bind is made. Further considered solutions are explored in https://signal.org/blog/contact-discovery/ Signal's eventual solution of using SGX is considered impractical for a Matrix-style setup.
## Security considerations ## Security considerations
None None