matrix-js-sdk
bde6a171 - Add getKeysProved and getKeysClaimed methods to MatrixEvent.

Commit
9 years ago
Add getKeysProved and getKeysClaimed methods to MatrixEvent. These list the keys that sender of the event must have ownership of and the keys of that the sender claims ownership of. All olm and megolm messages prove ownership of a curve25519 key. All new olm and megolm message will now claim ownership of a ed25519 key. This allows us to detect if an attacker claims ownership of a curve25519 key they don't own when advertising their device keys, because when we receive an event from the original user it will have a different ed25519 key to the attackers.
Author
Parents
Loading