I believe the "7" in the wormhole code is what's used so that the two peers can find each other when connecting to the "Rendezvous Server" which forwards messages between the two machines to facilitate the key generation.īut it's really hard to tell when it is and isn't reasonable, when it comes to UX. On the other computer, please run: wormhole receiveġ00%|=| 7.92K/7.92K You can setup and use your own servers for discovery and transit with command line arguments. The pre-built program uses a hard-coded server for assisting in making the network connection in order to setup the initial connection (discovery, key negotiation) as well as a TURN server to assist in the file transfer. Offline attacks on the one-time code are not possible. So this gives a network privileged attacker a 1-in-65k chance of breaking into the connection, or if they fail you would see an error message on the sender side. An attacker would need to MITM the initial connection and guess the one time code on their first guess.
The initial handshake uses the 16-bit code with an interactive PAKE algorithm to generate a shared key. Just read the documentation, for others interested, it is a command line tool where you enter a send command on one machine, it generates a 16-bit one time code, then you type a receive command on another machine (which includes the one-time code) which is used to negotiate a strong shared key that is then used to transfer the file.
0 kommentar(er)
