admin/conquest
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Delete client private key from memory after key exchange.

Browse Source
This commit is contained in:
Jakob Friedl
2025-10-14 09:58:45 +02:00
parent d9372dc880
commit 21137f6db5
3 changed files with 6 additions and 9 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
src/client/main.nim
View File

@@ -46,7 +46,7 @@ proc main(ip: string = "localhost", port: int = 37573) =
let io = igGetIO()
# Create key pair
let clientKeyPair = generateKeyPair()
var clientKeyPair = generateKeyPair()
# Initiate WebSocket connection
var connection = WsConnection(
@@ -79,6 +79,7 @@ proc main(ip: string = "localhost", port: int = 37573) =
of CLIENT_KEY_EXCHANGE:
connection.sessionKey = deriveSessionKey(clientKeyPair, decode(event.data["publicKey"].getStr()).toKey())
connection.sendPublicKey(clientKeyPair.publicKey)
wipeKey(clientKeyPair.privateKey)
of CLIENT_PROFILE:
profile = parsetoml.parseString(event.data["profile"].getStr())
@@ -168,8 +169,6 @@ proc main(ip: string = "localhost", port: int = 37573) =
writeFile(path & "_download", file)
except IOError:
discard
discard
else: discard