4 ms·
Your message length is sent in plain text and unauthenticated. Does this present a problem?
by 0xEA 11y ago
Your message length is sent in plain text and unauthenticated. Does this present a problem?
- tptacek 11y agoProbably not, because messages are authenticated cryptographically, and the lengths are validated before being passed to libsodium. You can't truncate an authenticated message.