Files
nym/gateway/src/node
durch 04300b6c56 Fix replay protection vulnerability in LP data handler
Use state machine process_input() instead of manual decryption to ensure
proper replay protection:
- Counter check against receiving window
- Counter marking after successful decryption

Also handle subsession actions gracefully (SendPacket ignored on UDP,
clients should use TCP control plane for rekeying).

Security fix for nym-yzzm implementation.
2026-01-08 15:45:15 +00:00
..
2026-01-08 15:45:15 +00:00