Browse Source

Add info about replay attacks to readme

twisted_pear 3 years ago
parent
commit
188f2fa30e
1 changed files with 5 additions and 0 deletions
  1. 5 0
      README.md

+ 5 - 0
README.md

@@ -68,6 +68,11 @@ The same key is used for all messages. This means that no forward-secrecy is
 provided. If the key is compromised, all previous messages are compromised as
 provided. If the key is compromised, all previous messages are compromised as
 well.
 well.
 
 
+Currently, no protection against replay attacks is implemented. This means that
+someone without the key can capture an encrypted message and resend it as many
+times as they want. A receiving flipper will display the replayed message as if
+it were new.
+
 If you do not understand the implications of the caveats mentioned here, do not
 If you do not understand the implications of the caveats mentioned here, do not
 expect to gain any security by using encryption.
 expect to gain any security by using encryption.