diff options
author | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2015-02-17T12·16+0100 |
---|---|---|
committer | Eelco Dolstra <eelco.dolstra@logicblox.com> | 2015-02-17T12·16+0100 |
commit | f19b4abfb2c238a98f749812c9ba294dd98d8bd0 (patch) | |
tree | c135e5fcc4e1dc2722119c624adb80a6385f80c5 /dev-shell | |
parent | 8c8750ae661559613ee357d5814505b933258aaf (diff) |
Include NAR size in fingerprint computation
This is not strictly needed for integrity (since we already include the NAR hash in the fingerprint) but it helps against endless data attacks [1]. (However, this will also require download-from-binary-cache.pl to bail out if it receives more than the specified number of bytes.) [1] https://isis.poly.edu/~jcappos/papers/cappos_mirror_ccs_08.pdf
Diffstat (limited to 'dev-shell')
0 files changed, 0 insertions, 0 deletions