bdrewery/wraith — Issue #23: Add 'fish-key-paranoid'
Author: bdrewery
Created: 2012-02-22 23:14:05+00:00
State: open

Add `fish-key-paranoid` which would invalidate the FiSH key after every message. This would then auto re-key-exchange. This fixes replay attack.

CBC won't work with how clients currently implement it, and even if they did, it would quickly become garbage due to IRC being asynchronous. See https://gist.github.com/1066319 for an example.