diff options
| author | Joey Hess <joeyh@joeyh.name> | 2016-09-13 21:10:16 -0400 |
|---|---|---|
| committer | Joey Hess <joeyh@joeyh.name> | 2016-09-13 21:10:16 -0400 |
| commit | 27aef01ba665a14924ece95d5ef4674e3945ef7e (patch) | |
| tree | b63b58436ac4686e25b0397430fea22ebf316022 /Benchmark.hs | |
| parent | 768773ca27e34790bb9ece08d30a3974f12626f0 (diff) | |
| download | keysafe-27aef01ba665a14924ece95d5ef4674e3945ef7e.tar.gz | |
eliminate half the bloom filters, using HMAC to verify RequestIDs
Simplifies code, uses less memory, and don't need to protect
against flooding generation of RequestIDs, since the server does not store
them at all.
Note that the RequestIDSecret is only stored in ram, so restarting the
server will invalidate any RequestIds given out before. It would be
possible now to store that on disk to avoid that problem, but probably not
worth it.
Diffstat (limited to 'Benchmark.hs')
0 files changed, 0 insertions, 0 deletions