Slightly more secure dialback secret generation

Sun, 07 Dec 2008 03:12:22 +0000

author
Matthew Wild <mwild1@gmail.com>
date
Sun, 07 Dec 2008 03:12:22 +0000
changeset 593
121d82243023
parent 592
c6e2c727d0cc
child 594
6d9b2da9888f

Slightly more secure dialback secret generation

core/s2smanager.lua file | annotate | diff | comparison | revisions
--- a/core/s2smanager.lua	Sat Dec 06 23:23:08 2008 +0000
+++ b/core/s2smanager.lua	Sun Dec 07 03:12:22 2008 +0000
@@ -43,7 +43,7 @@
 
 local sha256_hash = require "util.hashes".sha256;
 
-local dialback_secret = "This is very secret!!! Ha!";
+local dialback_secret = sha256_hash(tostring{} .. math.random() .. socket.gettime(), true);
 
 local dns = require "net.dns";
 

mercurial