aboutsummaryrefslogtreecommitdiff
path: root/docs/megolm.rst
diff options
context:
space:
mode:
authorMark Haines <mjark@negativecurvature.net>2016-10-21 15:13:20 +0100
committerMark Haines <mjark@negativecurvature.net>2016-10-21 15:13:20 +0100
commit8c4a11a92d2eac501e06659dff062d84d5c855ec (patch)
treee6c8fae698f40817df2f0632fd77569fd33dca4e /docs/megolm.rst
parent5a98012c0d3951d2d08e9922ee682fbdecc68f0c (diff)
Document the potential for message replays and possible mitigations
Diffstat (limited to 'docs/megolm.rst')
-rw-r--r--docs/megolm.rst10
1 files changed, 10 insertions, 0 deletions
diff --git a/docs/megolm.rst b/docs/megolm.rst
index 4929349..56e5f1d 100644
--- a/docs/megolm.rst
+++ b/docs/megolm.rst
@@ -274,6 +274,16 @@ bytes preceding the signature.
Limitations
-----------
+Message Replays
+---------------
+
+A message can be decrypted successfully multiple times. This means that a MITM
+server can send multiple copies of a message and they will successfully decrypt.
+
+To mitigate this it is recomendend that applications track the message indicies
+they have recieved and that they reject messages with indicies that they've
+already decrypted.
+
Lack of Transcript Consistency
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~