Skip to content

Clarify when the pairing round count resets - #312

Open
maximmaxim345 wants to merge 1 commit into
mainfrom
fix/round-count-reset
Open

maximmaxim345 wants to merge 1 commit into
mainfrom
fix/round-count-reset

Conversation

@maximmaxim345

Copy link
Copy Markdown
Member

The round limit said the operator action that lifts the hold-back also resets the round count, but not whether other operator actions could. A client that resets on an operator action partway through an attempt gives an attacker more than 20 guesses at the same pairing code.

Now only that action or a verified server_kc resets the count.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant