Skip to content

Collision attacks on packet commitment #13

@srdtrk

Description

@srdtrk

Right now, the destPort and destChannel are included back to back as utf-8 string bytes in the packet commitment (before sha256 hashing). This means that "transfer", "channel-0" is the same as "trans", "ferchannel-0". This needs to be fixed on ibc-go as well.

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions