GO-2024-3057: NetBird uses a static initialization vector (IV) in github.com/netbirdio/netbird

v2

package

v0.29.4 Latest Latest Go to latest Published: Sep 19, 2024 License: BSD-3-Clause Imports: 7 Imported by: 0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

This section is empty.

This section is empty.

This section is empty.

type AuthAlgo uint8

const (
	AuthAlgoUnknown AuthAlgo = iota
	AuthAlgoHMACSHA256
)

func (a AuthAlgo) New() func() hash.Hash

func (a AuthAlgo) Size() int

func (a AuthAlgo) String() string

type Generator struct {
	// contains filtered or unexported fields
}

func NewGenerator(algo AuthAlgo, secret []byte, timeToLive time.Duration) (*Generator, error)

func (g *Generator) GenerateToken() (*Token, error)

type Token struct {
	AuthAlgo  AuthAlgo
	Signature []byte
	Payload   []byte
}

func UnmarshalToken(data []byte) (*Token, error)

func (t *Token) Marshal() []byte

type Validator struct {
	// contains filtered or unexported fields
}

func NewValidator(secret []byte) *Validator

func (v *Validator) Validate(data any) error