0
0
Fork 1
mirror of https://mau.dev/maunium/synapse.git synced 2024-12-14 04:43:46 +01:00

Add null separator to hmac

This commit is contained in:
Erik Johnston 2016-07-06 11:04:44 +01:00
parent be3548f7e1
commit 0da24cac8b
2 changed files with 4 additions and 0 deletions

View file

@ -32,7 +32,9 @@ def request_registration(user, password, server_location, shared_secret, admin=F
)
mac.update(user)
mac.update("\x00")
mac.update(password)
mac.update("\x00")
mac.update("admin" if admin else "notadmin")
mac = mac.hexdigest()

View file

@ -336,7 +336,9 @@ class RegisterRestServlet(ClientV1RestServlet):
digestmod=sha1,
)
want_mac.update(user)
want_mac.update("\x00")
want_mac.update(password)
want_mac.update("\x00")
want_mac.update("admin" if admin else "notadmin")
want_mac = want_mac.hexdigest()