提交 d17fcc17 作者: Juan Batiz-Benet 提交者: Brian Tiger Chow

fix security comment #92

上级 aa296039
...@@ -83,7 +83,8 @@ func initCmd(c *commander.Command, inp []string) error { ...@@ -83,7 +83,8 @@ func initCmd(c *commander.Command, inp []string) error {
return err return err
} }
// pretend to encrypt key, then store it unencrypted // currently storing key unencrypted. in the future we need to encrypt it.
// TODO(security)
skbytes, err := sk.Bytes() skbytes, err := sk.Bytes()
if err != nil { if err != nil {
return err return err
......
...@@ -52,7 +52,8 @@ func (i *Identity) DecodePrivateKey(passphrase string) (crypto.PrivateKey, error ...@@ -52,7 +52,8 @@ func (i *Identity) DecodePrivateKey(passphrase string) (crypto.PrivateKey, error
return nil, err return nil, err
} }
//pretend to actually decrypt private key // currently storing key unencrypted. in the future we need to encrypt it.
// TODO(security)
return x509.ParsePKCS1PrivateKey(pkb) return x509.ParsePKCS1PrivateKey(pkb)
} }
......
Markdown 格式
0%
您添加了 0 到此讨论。请谨慎行事。
请先完成此评论的编辑!
注册 或者 后发表评论