damus icon indicating copy to clipboard operation
damus copied to clipboard

Improper handling of extra padding in encrypted dm messaging

Open WesVleuten opened this issue 2 years ago • 1 comments

Extra padding in encrypted dm messages can be used to hide message length in the public cipher text. The go-nostr library, at time of writing, adds extra padding by default which Damus is unable to decrypt. Failing with a "failed to decrypt content" message.

Extra padding should just be ignored.

Would this be possible in Damus?

WesVleuten avatar Dec 23 '22 01:12 WesVleuten

Adding link to NIP-04 Encrypted Direct Message

https://github.com/nostr-protocol/nips/blob/master/04.md

alltheseas avatar Jan 26 '23 17:01 alltheseas