Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[crypto] HaiCrypt_Clone(): sets up receiver clone properly #2905

Merged
merged 1 commit into from
Apr 4, 2024

Commits on Mar 7, 2024

  1. HaiCrypt_Clone(): sets up receiver clone properly

    This fixes key rotation when kk changes
    Remote TX sends one even key on initial handshake,
    and later sends two (even and odd) keys in a KMREQ USER packet
    
    Here is srt-live-transmit showing initial handshake, and key update:
    
    --------------------
    15:45:37.523916/SRT:RcvQ:w1.N:SRT.cn: processSrtMsg_KMRSP: cmd=4(KMRSP) len=224 KmState: SND=SECURED RCV=SECURED
    15:45:37.524445/SRT:RcvQ:w1.N:SRT.cn: @234271448: Connection established to: 10.129.73.178:5000
    SRT source connected
    
    15:45:42.285301/SRT:RcvQ:w1!W:SRT.cn: KMREQ/rcv: (snd) Rx process failure - BADSECRET
    15:45:42.285372/SRT:RcvQ:w1.N:SRT.cn: processSrtMsg_KMREQ: cmd=3(KMREQ) len=288 KmState: SND=BADSECRET RCV=BADSECRET
    15:45:42.285410/SRT:RcvQ:w1!W:SRT.cn: @234271448: KMREQ FAILURE: BADSECRET - rejecting per enforced encryption
    --------------------
    funman committed Mar 7, 2024
    Configuration menu
    Copy the full SHA
    6874931 View commit details
    Browse the repository at this point in the history