Fixed IV key size used by AES GCM, see https://monal.im/blog/omemo-is…

…-broken-in-general-across-the-ecosystem/
tigase · Jan 11, 2020 · 628db2a · 628db2a
1 parent fb36472
commit 628db2a
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/SharedCode/OMEMOModule.swift b/SharedCode/OMEMOModule.swift
@@ -289,9 +289,9 @@ open class OMEMOModule: AbstractPEPModule {
 
         let body = message.body!;
 
-        var iv = Data(count: 16);
+        var iv = Data(count: 12);
         iv.withUnsafeMutableBytes { (bytes) -> Void in
-            SecRandomCopyBytes(kSecRandomDefault, 16, bytes.baseAddress!);
+            SecRandomCopyBytes(kSecRandomDefault, 12, bytes.baseAddress!);
         }
 
         var key = Data(count: 16);