cryptoutil

Jan 20, 2020 GO-2024-2430 +4 more

  GO-2024-2430: Authenticated users can crash the CubeFS servers with maliciously crafted requests in github.com/cubefs/cubefs

  GO-2024-2431: Insecure random string generator used for sensitive data in github.com/cubefs/cubefs

  GO-2024-2432: CubeFS timing attack can leak user passwords in github.com/cubefs/cubefs

  GO-2024-2433: CubeFS leaks magic secret key when starting Blobstore access service in github.com/cubefs/cubefs

  GO-2024-2434: CubeFS leaks users key in logs in github.com/cubefs/cubefs

Jan 8, 2020 GO-2024-2430 +4 more

  GO-2024-2430: Authenticated users can crash the CubeFS servers with maliciously crafted requests in github.com/cubefs/cubefs

  GO-2024-2431: Insecure random string generator used for sensitive data in github.com/cubefs/cubefs

  GO-2024-2432: CubeFS timing attack can leak user passwords in github.com/cubefs/cubefs

  GO-2024-2433: CubeFS leaks magic secret key when starting Blobstore access service in github.com/cubefs/cubefs

  GO-2024-2434: CubeFS leaks users key in logs in github.com/cubefs/cubefs

Changes in this version

+ const CheckSumOffset

+ const CheckSumSize

+ const MessageMetaDataSize

+ const MessageOffset

+ const RandomNumberOffset

+ const RandomNumberSize

+ const TicketAge

+ const TicketVersion

+ func AesDecryptCBC(key, ciphertext []byte) (plaintext []byte, err error)

+ func AesEncryptCBC(key, plaintext []byte) (ciphertext []byte, err error)

+ func AuthGenSessionKeyTS(key []byte) (sessionKey []byte)

+ func Base64Decode(encodedText string) (text []byte, err error)

+ func Base64Encode(text []byte) (encodedText string)

+ func CreateClientX(cert *[]byte) (client *http.Client, err error)

+ func DecodeMessage(message string, key []byte) (plaintext []byte, err error)

+ func EncodeMessage(plaintext []byte, key []byte) (message string, err error)

+ func GenSecretKey(key []byte, ts int64, id string) (secretKey []byte)

+ func GenVerifier(key []byte) (v string, ts int64, err error)

+ type CryptoKey struct

+ Ctime int64

+ Key []byte

+ type Ticket struct

+ Caps []byte

+ Exp int64

+ IP string

+ ServiceID string

+ SessionKey CryptoKey

+ Version uint8