a2e3a5e · skrepka · git.iko.soy

git.iko.soy/skrepka

Fix gossip event suppression: restrict offline suppression to authoritative server

In RecvGossip, filteredOnline and validEvents were cross-referencing online events against ALL offlineEntries (from any server), but trustedOffline correctly restricts to events from fromServer only. This created an asymmetry where a malicious relay server could suppress legitimate online events by injecting fake offline events, even though those offline events wouldn't be applied. Restrict the offline cross-reference checks to only events from fromServer, ensuring untrusted servers cannot suppress online events.

commita2e3a5ec77526b2266813abd90e19cc8da79ea95 authoriko <mail@iko.soy> dateWed 8 Apr 2026, 14:49 (6 months ago) parentcba8c2e

30 files changed+36−12

compare with master

unifiedsplit

client/bin/Debug/net10.0-ios/iossimulator-arm64/Skrepka.app/Skrepka.dll

Binary file not shown.

client/bin/Debug/net10.0-ios/iossimulator-arm64/Skrepka.app/Skrepka.pdb

Binary file not shown.

client/bin/Debug/net10.0-ios/iossimulator-arm64/Skrepka.app/_CodeSignature/CodeResources+4−4

@@ -162,11 +162,11 @@

162162 </data>

163163 <key>Skrepka.dll</key>

164164 <data>

165− 27gfq5dZ4/eTxH0f4bw8bUDiS2M=

165+ UXvhYQ0dc7Sb71tWIenCoMkewqw=

166166 </data>

167167 <key>Skrepka.pdb</key>

168168 <data>

169− D3LomwjioLVqeXPIjplXlbfcC4g=

169+ foCWiRpqlncqFodz/8lBu78jfB0=

170170 </data>

171171 <key>Sodium.Core.dll</key>

172172 <data>

@@ -1382,14 +1382,14 @@

13821382 <dict>

13831383 <key>hash2</key>

13841384 <data>

1385− 8/yNqmUXv1KVEP6mJx7cV8riXCRkhMvDIW09gUJw6wk=

1385+ kEYARXRt7Vqjy10L23Fv+M0azFOpTKO8x8Qu+QpLGdQ=

13861386 </data>

13871387 </dict>

13881388 <key>Skrepka.pdb</key>

13891389 <dict>

13901390 <key>hash2</key>

13911391 <data>

1392− uF/IJAfKHG3onHFR8ScB160+btmHZaJqGiJNzR07nu0=

1392+ b3jxTAAVRN+QEd339p6li1cGEsb08aLwKP5QLCVFrGA=

13931393 </data>

13941394 </dict>

13951395 <key>Sodium.Core.dll</key>

client/bin/Debug/net10.0-ios/iossimulator-arm64/Skrepka.dll

Binary file not shown.

client/bin/Debug/net10.0-ios/iossimulator-arm64/Skrepka.pdb

Binary file not shown.

client/bin/Debug/net10.0-maccatalyst/maccatalyst-arm64/Skrepka.app/Contents/MonoBundle/Skrepka.dll

Binary file not shown.

client/bin/Debug/net10.0-maccatalyst/maccatalyst-arm64/Skrepka.app/Contents/MonoBundle/Skrepka.pdb

Binary file not shown.

client/bin/Debug/net10.0-maccatalyst/maccatalyst-arm64/Skrepka.app/Contents/_CodeSignature/CodeResources+2−2

@@ -240,14 +240,14 @@

240240 <dict>

241241 <key>hash2</key>

242242 <data>

243− vUKSK+cGYTR7qkuQmbqO8GnXw8MSCSGfEnat9WPM61k=

243+ hHEVyZJ3ss387xA+H79MFJ84urKrS62ySZkPUKtWFmg=

244244 </data>

245245 </dict>

246246 <key>MonoBundle/Skrepka.pdb</key>

247247 <dict>

248248 <key>hash2</key>

249249 <data>

250− G384EqZj+qubQ4QYr5jq66KSfqzCb5lMDtIbdeDt3Es=

250+ 3zoAtDbGlnW0vQDAk6KE/WrF7I4IbauW67gvI1xu/W4=

251251 </data>

252252 </dict>

253253 <key>MonoBundle/Sodium.Core.dll</key>

client/bin/Debug/net10.0-maccatalyst/maccatalyst-arm64/Skrepka.dll

Binary file not shown.

client/bin/Debug/net10.0-maccatalyst/maccatalyst-arm64/Skrepka.pdb

Binary file not shown.

client/obj/Debug/net10.0-ios/iossimulator-arm64/Skrepka.AssemblyInfo.fs+1−1

@@ -10,7 +10,7 @@ open System.Reflection

1010[<assembly: System.Reflection.AssemblyCompanyAttribute("Skrepka")>]

1111[<assembly: System.Reflection.AssemblyConfigurationAttribute("Debug")>]

1212[<assembly: System.Reflection.AssemblyFileVersionAttribute("1.0.0.0")>]

13−[<assembly: System.Reflection.AssemblyInformationalVersionAttribute("1.0+fa9d38a3fad244670e1576c664bf6ba789d0168e")>]

13+[<assembly: System.Reflection.AssemblyInformationalVersionAttribute("1.0+cba8c2e46605de3c029d47bb18d524bebf0b0483")>]

1414[<assembly: System.Reflection.AssemblyProductAttribute("Skrepka")>]

1515[<assembly: System.Reflection.AssemblyTitleAttribute("Skrepka")>]

1616[<assembly: System.Reflection.AssemblyVersionAttribute("1.0.0.0")>]

client/obj/Debug/net10.0-ios/iossimulator-arm64/Skrepka.AssemblyInfoInputs.cache+1−1

@@ -1 +1 @@

1−5f2895c26967c1b79537d5958be98264c62028600e0beb408e514bf6fedba7a8

1+c9930d8b595e0d97129254bd069b2926292327df0f3368dbb9269dfbda51e365

client/obj/Debug/net10.0-ios/iossimulator-arm64/Skrepka.dll

Binary file not shown.

client/obj/Debug/net10.0-ios/iossimulator-arm64/Skrepka.fsproj.FileListAbsolute.txt+22

@@ -333,3 +333,25 @@

333333/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/Skrepka.pdb

334334/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/Skrepka.genruntimeconfig.cache

335335/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/ref/Skrepka.dll

336+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Fabulous.stamp

337+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Fabulous.MauiControls.stamp

338+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/FSharp.Core.stamp

339+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Extensions.Configuration.Abstractions.stamp

340+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Extensions.Configuration.stamp

341+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Extensions.DependencyInjection.Abstractions.stamp

342+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Extensions.DependencyInjection.stamp

343+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Extensions.Diagnostics.Abstractions.stamp

344+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Extensions.FileProviders.Abstractions.stamp

345+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Extensions.Hosting.Abstractions.stamp

346+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Extensions.Logging.Abstractions.stamp

347+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Extensions.Logging.stamp

348+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Extensions.Options.stamp

349+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Extensions.Primitives.stamp

350+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Maui.Controls.Compatibility.stamp

351+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Maui.Controls.stamp

352+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Maui.Controls.Xaml.stamp

353+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Maui.stamp

354+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Maui.Essentials.stamp

355+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Microsoft.Maui.Graphics.stamp

356+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/resourcestamps/Sodium.Core.stamp

357+/Users/iko/Developer/skrepka/client/obj/Debug/net10.0-ios/iossimulator-arm64/unpack/Microsoft.Maui.Essentials/BundleResource/xml/microsoft_maui_essentials_fileprovider_file_paths.xml

client/obj/Debug/net10.0-ios/iossimulator-arm64/Skrepka.pdb

Binary file not shown.

client/obj/Debug/net10.0-ios/iossimulator-arm64/Skrepka.sourcelink.json+1−1

@@ -1 +1 @@

1−{"documents":{"/Users/iko/Developer/skrepka/*":"https://raw.githubusercontent.com/ilyakooo0/skrepka/fa9d38a3fad244670e1576c664bf6ba789d0168e/*"}}

1+{"documents":{"/Users/iko/Developer/skrepka/*":"https://raw.githubusercontent.com/ilyakooo0/skrepka/cba8c2e46605de3c029d47bb18d524bebf0b0483/*"}}

client/obj/Debug/net10.0-ios/iossimulator-arm64/linked/Skrepka.dll

Binary file not shown.

client/obj/Debug/net10.0-ios/iossimulator-arm64/linked/Skrepka.pdb

Binary file not shown.

client/obj/Debug/net10.0-ios/iossimulator-arm64/ref/Skrepka.dll

Binary file not shown.

client/obj/Debug/net10.0-ios/iossimulator-arm64/refint/Skrepka.dll

Binary file not shown.

client/obj/Debug/net10.0-maccatalyst/maccatalyst-arm64/Skrepka.AssemblyInfo.fs+1−1

@@ -10,7 +10,7 @@ open System.Reflection

1010[<assembly: System.Reflection.AssemblyCompanyAttribute("Skrepka")>]

1111[<assembly: System.Reflection.AssemblyConfigurationAttribute("Debug")>]

1212[<assembly: System.Reflection.AssemblyFileVersionAttribute("1.0.0.0")>]

13−[<assembly: System.Reflection.AssemblyInformationalVersionAttribute("1.0+55073b24cbe7d0ad09d68699068fe1e06cf596df")>]

13+[<assembly: System.Reflection.AssemblyInformationalVersionAttribute("1.0+cba8c2e46605de3c029d47bb18d524bebf0b0483")>]

1414[<assembly: System.Reflection.AssemblyProductAttribute("Skrepka")>]

1515[<assembly: System.Reflection.AssemblyTitleAttribute("Skrepka")>]

1616[<assembly: System.Reflection.AssemblyVersionAttribute("1.0.0.0")>]

client/obj/Debug/net10.0-maccatalyst/maccatalyst-arm64/Skrepka.AssemblyInfoInputs.cache+1−1

@@ -1 +1 @@

1−85baf36b56b7a21d3ed7f05c50f22617d4a1ebc90a8ce25f377d9a5a32f662e1

1+8a802d8025433df7b85112de4cacc55b8ded28b908838eb8eb0a7b5029b9b28a

client/obj/Debug/net10.0-maccatalyst/maccatalyst-arm64/Skrepka.dll

Binary file not shown.

client/obj/Debug/net10.0-maccatalyst/maccatalyst-arm64/Skrepka.pdb

Binary file not shown.

client/obj/Debug/net10.0-maccatalyst/maccatalyst-arm64/Skrepka.sourcelink.json+1−1

@@ -1 +1 @@

1−{"documents":{"/Users/iko/Developer/skrepka/*":"https://raw.githubusercontent.com/ilyakooo0/skrepka/05d753cd7e475295c60dc1d484026b2cf2292eff/*"}}

1+{"documents":{"/Users/iko/Developer/skrepka/*":"https://raw.githubusercontent.com/ilyakooo0/skrepka/cba8c2e46605de3c029d47bb18d524bebf0b0483/*"}}

client/obj/Debug/net10.0-maccatalyst/maccatalyst-arm64/linked/Skrepka.dll

Binary file not shown.

client/obj/Debug/net10.0-maccatalyst/maccatalyst-arm64/linked/Skrepka.pdb

Binary file not shown.

client/obj/Debug/net10.0-maccatalyst/maccatalyst-arm64/ref/Skrepka.dll

Binary file not shown.

client/obj/Debug/net10.0-maccatalyst/maccatalyst-arm64/refint/Skrepka.dll

Binary file not shown.

server.knot+2

@@ -1032,6 +1032,7 @@ serve = \req -> case req of

10321032 e <- onlineEntries

10331033 where count (do

10341034 o <- offlineEntries

1035+ where o.server == fromServer

10351036 where o.pubkey == e.pubkey

10361037 where o.server == e.server

10371038 where o.timestamp > e.timestamp

@@ -1205,6 +1206,7 @@ serve = \req -> case req of

12051206 where e.timestamp + (clampTtl e.ttl) * 1000 > t

12061207 where not (e.eventType == "online" && count (do

12071208 o <- offlineEntries

1209+ where o.server == fromServer

12081210 where o.pubkey == normalizeHex e.pubkey

12091211 where o.server == normalizeServerName e.server

12101212 where o.timestamp > e.timestamp