]> git.ipfire.org Git - thirdparty/strongswan.git/commit
ike-auth: Calculate and collect IntAuth for IKE_INTERMEDIATE exchanges
authorTobias Brunner <tobias@strongswan.org>
Tue, 20 Aug 2019 15:07:55 +0000 (17:07 +0200)
committerTobias Brunner <tobias@strongswan.org>
Wed, 22 Mar 2023 10:35:10 +0000 (11:35 +0100)
commit28efe45678e9572b656a43d01aea91f34ef6b91a
tree225f3932abd5292c162efafe017f50fa39044e05
parent3bb5be2fa6022c62268818a3d4c28ecc838ffa7b
ike-auth: Calculate and collect IntAuth for IKE_INTERMEDIATE exchanges

The message ID of the first IKE_AUTH exchange is a safe-guard against
potential truncation attacks if IKE_INTERMEDIATE exchanges are not used
for multiple key exchanges but some other future use where the number of
exchanges might not depend on the selected proposal.
src/libcharon/sa/ikev2/tasks/ike_auth.c