From 1b7dbe2a4f276a2d3ff856000a4edf63fcef1cb4 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Juhani=20Krekel=C3=A4?= Date: Sun, 5 Jan 2020 13:12:10 +0200 Subject: [PATCH] Switch to 128 bit security level --- kishib.py | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/kishib.py b/kishib.py index 170c189..f60d57c 100644 --- a/kishib.py +++ b/kishib.py @@ -110,8 +110,8 @@ def auth_hash(client_pubkey, server_pubkey): server_pubkey_hash = sha512(enc_len(len(server_pubkey)) + server_pubkey) combined_hash = sha512(client_pubkey_hash + server_pubkey_hash) - truncated_hash = combined_hash[:32] - hash_check = sha512(truncated_hash)[:5] + truncated_hash = combined_hash[:16] + hash_check = sha512(truncated_hash)[:4] return truncated_hash + hash_check def chunk(sliceable, length): @@ -120,7 +120,7 @@ def chunk(sliceable, length): def format_hash(hash_bytes): hash_base32 = base64.b32encode(hash_bytes).decode().lower().replace('=', '') - chunked_base32 = chunk(hash_base32, 5) + chunked_base32 = chunk(hash_base32, 4) return '-'.join(chunked_base32) def verify(client_pubkey, server_pubkey):