<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<tt><br>
After looking at the cookie creation code I don't understand how a
server is supposed to extract the keys contained within. It would
not have the data to de-xor the contents of the cookie when
presented with said cookie.<br>
<br>
Unless this is just a placeholder?<br>
<br>
int make_cookie(uint8_t *cookie,</tt><tt><br>
</tt><tt> uint16_t aead,</tt><tt><br>
</tt><tt> uint8_t *c2s, uint8_t *s2c, int keylen) {</tt><tt><br>
</tt><tt><br>
</tt><tt> int length = NTS_COOKIELEN/2;</tt><tt><br>
</tt><tt><br>
</tt><tt> if (keylen < length)</tt><tt><br>
</tt><tt> length = keylen;</tt><tt><br>
</tt><tt> *cookie = aead & 0xFF;</tt><tt><br>
</tt><tt> for (int i=0; i<length; i++) {</tt><tt><br>
</tt><tt> *cookie++ = *c2s++^*s2c++;</tt><tt><br>
</tt><tt> }</tt><tt><br>
</tt><tt><br>
</tt><tt> return length;</tt><tt><br>
</tt><tt>}</tt><tt><br>
</tt><br>
<div class="moz-signature">-- <br>
<i>"In the end; what separates a Man, from a Slave? Money? Power?
No. A Man Chooses, a Slave Obeys."</i> -- Andrew Ryan
<p>
<i>"Utopia cannot precede the Utopian.
It will exist the moment we are fit to occupy it."</i> --
Sophia Lamb
</p>
<p>
I work for the <a href="https://icei.org/">Internet Civil
Engineering Institute</a>, help us save the Internet from
Entropy!
</p>
</div>
</body>
</html>