]> git.ipfire.org Git - thirdparty/strongswan.git/commit
ike-auth: Calculate and collect IntAuth for IKE_INTERMEDIATE exchanges
authorTobias Brunner <tobias@strongswan.org>
Tue, 20 Aug 2019 15:07:55 +0000 (17:07 +0200)
committerTobias Brunner <tobias@strongswan.org>
Wed, 7 Aug 2024 14:20:18 +0000 (16:20 +0200)
commitf6b2e6a21f96149db24b6dd8f388eea64c5c629a
tree0c3a4b044f21fde58a05f54018164de46f653338
parent1212780b323392b3267bd250dd9d530eabce2816
ike-auth: Calculate and collect IntAuth for IKE_INTERMEDIATE exchanges

The message ID of the first IKE_AUTH exchange is a safe-guard against
potential truncation attacks if IKE_INTERMEDIATE exchanges are not used
for multiple key exchanges but some other future use where the number of
exchanges might not depend on the selected proposal.
src/libcharon/sa/ikev2/tasks/ike_auth.c