amoeba
amoeba copied to clipboard
Cryptography
Some cryptographic features could reduce the attack surface of the network.
- The drawing server functionality can be heavily abused to flood the network with non-genuine requests. Checking whether the signal is signed by a valid drawing server fixes this issue.
- Edge requests should only stay active for a certain amount of time (verified by hashing or signing). This ensures that requests can only be answered when they are genuine, as opposed to first sniffing lots of node addresses and then spamming out requests to everyone.