qxmpp

qxmpp copied to clipboard

Run time issue with queued argument of type uint32_t

5

The omemo stack use that in signals connection, unfortunately it's not registered via qRegisterMetatype and cause run time issue in xmpp, which break kaidan omemo support. This would lead to...

pasnox

Fix migration manager

1

PR check list: - [x] Document your code - [x] Add `\since QXmpp 1.X`, `QXMPP_EXPORT` - [x] Update `doc/doap.xml` - [x] Add unit tests - [x] Format the code: Run...

pasnox

Did you know any projects, ideally public or open source, that are using the qxmpp? As far I understood the library was initially created for Kaidan. Additionally I'm trying to...

stokito

OMEMO - Timing Side-Channel in HMAC Comparison

2

Originally disclosed [here](https://soatok.blog/2024/08/04/against-xmppomemo/). https://github.com/qxmpp-project/qxmpp/blob/94232e798de18099322bee71400f246c9193047a/src/omemo/QXmppOmemoManager_p.cpp#L1766 Explainers: 1. https://soatok.blog/2020/08/27/soatoks-guide-to-side-channel-attacks/ 2. https://security.stackexchange.com/a/74552 This defect is a problem with the OMEMO specification. It should have called out the specific steps that implementors follow to...

soatok