Skip to content

Commit ea3d7cd

Browse files
t2ymt2ym
committed
[demo][vulnerability][integrity] Rebuild with Issue #310 Mitigate risks of leaking ClientIntegrity from process memory dumps
1 parent ed62caf commit ea3d7cd

21 files changed

+100
-82
lines changed

‎demo-frontend/components/thin-hook/demo/cache-bundle.json

+20-20
Large diffs are not rendered by default.

‎demo-frontend/components/thin-hook/demo/cache-bundle.json.gz

177 Bytes
Binary file not shown.

‎demo-frontend/components/thin-hook/demo/index.html

+4-4
Original file line numberDiff line numberDiff line change
@@ -15,9 +15,9 @@
1515
<html lang="en">
1616
<head>
1717
<meta charset="utf-8">
18-
<script integrity="sha256-ML5G1HBNRDGQQnv2GknBhKqrmGNdakbGW+gVzJA5VN4= sha256-YABHy/JvrXHti8N4vTZo9wg3VPV/DU7BrLDhAydzWmY=" src="../../thin-hook/hook.min.js?version=668&no-hook-authorization=5714cba5c0fecd92f5cc3ce2077053a57089c3413fa019c01fe581ced9eb2c13,a578e741369d927f693fedc88c75b1a90f1a79465e2bb9774a3f68ffc6e011e6,log-no-hook-authorization&sw-root=/&no-hook=true&hook-name=__hook__&context-generator-name=method&discard-hook-errors=false&fallback-page=index-fb.html&hook-property=true&hook-global=true&hook-prefix=_uNpREdiC4aB1e_&compact=true&service-worker-ready=false"></script></head></html>
19-
<script context-generator src="no-hook-authorization.js?no-hook=true" integrity="sha256-VxTLpcD+zZL1zDziB3BTpXCJw0E/oBnAH+WBztnrLBM="></script>
20-
<script context-generator src="integrity.js?no-hook=true" integrity="sha256-xv8tL0mMTo9aAQyxjecXTCmJzRZ32sq4kNVWBHZosUk="></script>
18+
<script integrity="sha256-ML5G1HBNRDGQQnv2GknBhKqrmGNdakbGW+gVzJA5VN4= sha256-YABHy/JvrXHti8N4vTZo9wg3VPV/DU7BrLDhAydzWmY=" src="../../thin-hook/hook.min.js?version=668&no-hook-authorization=c70ad84514f13cb6376b9039e842eaaef54db69586777daf5f695d9b44884463,a578e741369d927f693fedc88c75b1a90f1a79465e2bb9774a3f68ffc6e011e6,log-no-hook-authorization&sw-root=/&no-hook=true&hook-name=__hook__&context-generator-name=method&discard-hook-errors=false&fallback-page=index-fb.html&hook-property=true&hook-global=true&hook-prefix=_uNpREdiC4aB1e_&compact=true&service-worker-ready=false"></script></head></html>
19+
<script context-generator src="no-hook-authorization.js?no-hook=true" integrity="sha256-xwrYRRTxPLY3a5A56ELqrvVNtpWGd32vX2ldm0SIRGM="></script>
20+
<script context-generator src="integrity.js?no-hook=true" integrity="sha256-gyToTrI9WVjKuzHSOp7QtA2yQ89tHbDLvKf7oFUCSZw="></script>
2121
<script context-generator src="disable-devtools.js?no-hook=true" integrity="sha256-qBIJIoIJlBCXrEHFvaO8HNZDdeabfIETr/aML+Zyn/I="></script>
2222
<script context-generator src="context-generator.js?no-hook=true" integrity="sha256-Q3SuHyjOwrlpq0iIlaQmYkTWXijh+Cco/SzTkTD+DZ4="></script>
2323
<script context-generator src="bootstrap.js?no-hook=true" integrity="sha256-TqPlk5mugojW8S5owdMaeSZi4Sw/xmbQjb39/JFLAJE="></script>
@@ -49,7 +49,7 @@
4949
};
5050
}
5151
</script>
52-
<script context-generator src="cache-bundle.js?no-hook=true&authorization=0e360241ca92138b1c1158c99f1fcbd1c8abfe6db3bfb8b023330b292a7d4ce6" integrity="sha256-xZ1Ebqkx3yhzbVhtwmh3Mdrbczw8/WRMffOvs2pq45o="></script>
52+
<script context-generator src="cache-bundle.js?no-hook=true&authorization=bf32eecb84fb913d7780e3d91754496fa2509523058b594cde29f83cc101394d" integrity="sha256-xZ1Ebqkx3yhzbVhtwmh3Mdrbczw8/WRMffOvs2pq45o="></script>
5353
<script src="hook-callback.js?no-hook=true" integrity="sha256-C9kGqM1Sa+twfiir0EYyjRZsGNe5LGzEETwM0FQYn7E="></script>
5454
<script context-generator src="script-hashes.js?no-hook=true&service-worker-ready=false" integrity="sha256-ugdlTRwkonG6D6fuXFXNYMAhM7DlPLa7bmNNpHOx5UA= sha256-WtqI8xoKVa1sFwAmkwZfrktnVQxloPIsXMoRVmFIvgE="></script><!--<C!-- end of mandatory no-hook scripts --C>
5555
<script src="../../webcomponentsjs/webcomponents-lite.js"></script>

‎demo-frontend/components/thin-hook/demo/integrity.js

+21-3
Original file line numberDiff line numberDiff line change
@@ -331,8 +331,8 @@
331331

332332
RSA.publicKeyBits = 2048; // number of bits in RSA public key, which must be at least 2048
333333
RSA.publicKeySize = RSA.publicKeyBits / 8; // number of bytes for RSA-OAEP encrypted data size
334-
RSA.publicKeyBase64 = 'MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd5OKVoLgirReke8SqdEkels5xwpJ8j9qZlyMjbFScCC9DNcbFCuOFHrpPBtauCXprygbT2WGnahU/NZGF467A1NNoi2NBxbYqhKRZ+6mHKIHEmNM+ANAOssgoFsj2bynz6G6DjN2pEBVL9mXxeogvNnn3N0EJtnrKwqRtyMay4CxrilT+v46Or99mlkJP/2UcJqoTax8FVovVb4tL69Cu6Vkn3I2ATUu3gA1evUJgNrtLdQTnpi3AK4h9zW3TuF0yAexSvb5mCmlZ92tHvvNuRUS5pevRAyDWawv9j2vZmLwBk5MSBBmqg0NNAnuSz4iKJBEV6JVPTQdxrmAFZ6YQIDAQAB';
335-
ECDSA.publicKeyBase64 = 'MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEpEObqiXsmmo11EXm8PSCaZlugTs8PlDKzc9Nm46c3ERW8lDG+6XJ1nG0KaOJmB5vj3v/BOiM41QWHcfkRQgDnA==';
334+
RSA.publicKeyBase64 = 'MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6dGbIUSD3kQWmvBYXnaUszgJI1e8AbVcerOHOI3nSrgi3n2v/JBnuPwRlsffyRxEEZZYWh7aRMUhujTQON8xjxblhS42/veIIr9s30sOnn/u7+/+I9XdvZOZtAw0+UPhWLgmV6LRvQW/55Bq6p+FTcNpw/b3dYSKOUqz0zIXTlNEl6RTxmq5qyKGMN4MU5r1vU/199ShGnfF5EtAQL/Hr6q/M+bwINy0IW/31VFbIJyLYASJyuj28gkz3szjr9GQ8W3MOXetD/bQhYP8YPiwmf4W6EfaI5GSMaymn2Wrl68X0I1p5P5ZY4zJwh7Q1hIB1UT5l9SPE+Nrvp8Fc43ZQIDAQAB';
335+
ECDSA.publicKeyBase64 = 'MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE7gUfFZDR97WPYG3rLeciBX389l4C/UflJKJ4ZUjzMkIOGWXYH1TWPGUnyW9/3bNjfHnvxRQXMvOJ/Jsxqjk3Mg==';
336336
ECDSA.signatureLength = SHA256.hashBytes * 2;
337337
ECDHE.publicKeyLength = 1 + SHA256.hashBytes * 2;
338338

@@ -1710,10 +1710,13 @@
17101710
const getBrowserHash = async function getBrowserHash() {
17111711
//await Promise.all(promises);
17121712
//traverseDone = true;
1713-
const browserHashJSON = JSON.stringify(browserHashObject, null, 0);
1713+
let browserHashJSON = JSON.stringify(browserHashObject, null, 0);
17141714
//console.log(JSON.stringify(browserHashObject, null, 2));
1715+
browserHashObject = null;
17151716
const browserHashUtf8 = new TextEncoder('utf-8').encode(browserHashJSON);
1717+
browserHashJSON = null;
17161718
const browserHash = await crypto.subtle.digest(SHA256.hashName, browserHashUtf8);
1719+
browserHashUtf8.fill(0);
17171720
return browserHash;
17181721
}
17191722

@@ -1725,13 +1728,16 @@
17251728
));
17261729
const userAgentUtf8 = new TextEncoder('utf-8').encode(navigator.userAgent);
17271730
const userAgentHash = await crypto.subtle.digest(SHA256.hashName, userAgentUtf8);
1731+
userAgentUtf8.fill(0);
17281732
const browserHash = await getBrowserHash();
17291733
const scriptsUtf8 = new TextEncoder('utf-8').encode(scripts.join('\0'));
17301734
const scriptsHash = await crypto.subtle.digest(SHA256.hashName, scriptsUtf8);
1735+
scriptsUtf8.fill(0);
17311736
outerHTML = document.querySelector('html').outerHTML;
17321737
//console.log('outerHTML', outerHTML);
17331738
const htmlUtf8 = new TextEncoder('utf-8').encode(outerHTML);
17341739
const htmlHash = await crypto.subtle.digest(SHA256.hashName, htmlUtf8);
1740+
htmlUtf8.fill(0);
17351741

17361742
CurrentSession.ClientIntegrity = {
17371743
userAgentHash: userAgentHash,
@@ -1749,6 +1755,7 @@
17491755

17501756
Connect.encryptedHeader =
17511757
await crypto.subtle.encrypt({ name: 'RSA-OAEP' }, RSA.serverPublicKey, decryptedHeader);
1758+
decryptedHeader.fill(0);
17521759

17531760
const decryptedBody = HKDF.concat(
17541761
NextSession.clientRandom,
@@ -1775,6 +1782,7 @@
17751782
);
17761783
Connect.encryptedBody =
17771784
await crypto.subtle.encrypt(aesAlg, aesKey, decryptedBody);
1785+
decryptedBody.fill(0);
17781786

17791787
Connect.encrypted = HKDF.concat(
17801788
Connect.type,
@@ -2038,6 +2046,13 @@
20382046
CurrentSession.ClientIntegrity.htmlHash,
20392047
));
20402048

2049+
// Discard ClientIntegrity
2050+
[ 'userAgentHash', 'browserHash', 'scriptsHash', 'htmlHash' ].forEach((name) => {
2051+
new Uint8Array(CurrentSession.ClientIntegrity[name]).fill(0);
2052+
delete CurrentSession.ClientIntegrity[name];
2053+
});
2054+
delete CurrentSession.ClientIntegrity;
2055+
20412056
// Derive Pseudo-PSK for initial key derivation
20422057
CurrentSession.PSK =
20432058
await HKDF.Expand_Label(CurrentSession.connect_early_secret, 'connect', '', SHA256.hashBytes); // pseudo-PSK
@@ -2057,6 +2072,9 @@
20572072
false,
20582073
['sign']
20592074
);
2075+
// Discard connect_salt
2076+
new Uint8Array(CurrentSession.connect_salt).fill(0);
2077+
delete CurrentSession.connect_salt;
20602078

20612079
if (!await sendConnectRequest(Connect, Accept, CurrentSession, NextSession)) {
20622080
throw new Error('doConnect: sendConnectRequest failed');

‎demo-frontend/components/thin-hook/demo/integrity.js.gz

157 Bytes
Binary file not shown.

‎demo-frontend/components/thin-hook/demo/integrity.json

+6-6
Original file line numberDiff line numberDiff line change
@@ -3494,13 +3494,13 @@
34943494
"/components/thin-hook/demo/bundle.json": "NKwjN4DXt2s+80XoHlFlWbnI5rklchdQCerPDjtfBIk=",
34953495
"/components/thin-hook/demo/cache-automation.js": "x2G0JD1JJOVC3rhFCrQnigaYlTu7C5vhOTRHBixXcS4=",
34963496
"/components/thin-hook/demo/cache-bundle.js": "xZ1Ebqkx3yhzbVhtwmh3Mdrbczw8/WRMffOvs2pq45o=",
3497-
"/components/thin-hook/demo/cache-bundle.json": "s9g2kBrrYZ58pYADIbc6ui/T3zy/xg0tYM+/dLfNTAY=",
3497+
"/components/thin-hook/demo/cache-bundle.json": "iU3WlluUiNO6JpwmqmjTxlCDpnnPqPoC2YsLgFMpZuU=",
34983498
"/components/thin-hook/demo/commonjs.js": "KjmEtrrjEj4WCR1bjCEOZnXhe+9w4wJoaUg40WU0FuQ=",
34993499
"/components/thin-hook/demo/commonjs2.js": "tiHpF2aP1nZUY/O31R9j/kWne3jFgqPIds0MwNLxhk4=",
35003500
"/components/thin-hook/demo/content-loader.js": "AkIBbiiHsyKrKLiH8Dd5xjiZ2yMrsDbXlKAnjbnlQzk=",
35013501
"/components/thin-hook/demo/context-generator.js": "Q3SuHyjOwrlpq0iIlaQmYkTWXijh+Cco/SzTkTD+DZ4=",
35023502
"/components/thin-hook/demo/disable-devtools.js": "qBIJIoIJlBCXrEHFvaO8HNZDdeabfIETr/aML+Zyn/I=",
3503-
"/components/thin-hook/demo/empty-document.html": "6c13/b6AYCOBHtPa1aRAG+i0JoZCMkLumYqjac4WQ60=",
3503+
"/components/thin-hook/demo/empty-document.html": "19akvZ+2M5htYxc2ZwqKiJQQZQwfjZSqAPSCq7WHLQ8=",
35043504
"/components/thin-hook/demo/es6-module.js": "fqNv9zHgC8txL7mU0+zySAwIQNRjpTVJtDI34AWzvOY=",
35053505
"/components/thin-hook/demo/es6-module2.js": "m8es06TrC+X9xZ9p6bWrs0s4su7FcMoZak389t8NOyY=",
35063506
"/components/thin-hook/demo/es6-module3.js": "qq7q9Gk9vgQSZmElUAaLOEQxALCbP9ysHKqQjwyas+Y=",
@@ -3515,7 +3515,7 @@
35153515
"/components/thin-hook/demo/hook-worker.js": "W2FaqIWgUYRmFTvm7LLP7vEwDxgf9gypHK2WRlnJIFI=",
35163516
"/components/thin-hook/demo/index-fb.html": "D9idm83/VxddYcF1L/fb3Vu6W5n8IDX4lH5KG66DSFk=",
35173517
"/components/thin-hook/demo/inline-script.svg": "NRdobFKL9ufnJCuVHoPLUUsXRBgGgjY3EdwWwHjm/GQ=",
3518-
"/components/thin-hook/demo/integrity.js": "xv8tL0mMTo9aAQyxjecXTCmJzRZ32sq4kNVWBHZosUk=",
3518+
"/components/thin-hook/demo/integrity.js": "gyToTrI9WVjKuzHSOp7QtA2yQ89tHbDLvKf7oFUCSZw=",
35193519
"/components/thin-hook/demo/invalid-document.html": "KAPziibQgBjvjZ6VlnXTeFUTkAuZVpd3BtX0pBKBzzI=",
35203520
"/components/thin-hook/demo/lhs.js": "h12n3evI8zqX4nFe66ZlwpbdwgB/o8YZJjkxFVPVOIQ=",
35213521
"/components/thin-hook/demo/locales/bundle.de.json": "yBx145NiuX8NYTjr4YnQDauqpPg2forcuXjFqtzYq70=",
@@ -3551,14 +3551,14 @@
35513551
"/components/thin-hook/demo/my-view2.json": "PptwWPvugpMTpsXZFfaSVwr2BcYSGJkfhjEiV6RrFJI=",
35523552
"/components/thin-hook/demo/my-view3.html": "pSmI7cALKmeqoKKZefU8NicI4V0ZUcScMGSklkVBeFw=",
35533553
"/components/thin-hook/demo/my-view3.json": "uatxD9AZkiGiFvGsMqhTVLNxAqDiylbvuGors1Hb1hc=",
3554-
"/components/thin-hook/demo/no-hook-authorization.js": "VxTLpcD+zZL1zDziB3BTpXCJw0E/oBnAH+WBztnrLBM=",
3554+
"/components/thin-hook/demo/no-hook-authorization.js": "xwrYRRTxPLY3a5A56ELqrvVNtpWGd32vX2ldm0SIRGM=",
35553555
"/components/thin-hook/demo/normalize.js": "xnq7/Jwug/YMmR6zQrR4gC+9JiH3WZBXNaF/3KWmqBo=",
35563556
"/components/thin-hook/demo/script-hashes.js": "ugdlTRwkonG6D6fuXFXNYMAhM7DlPLa7bmNNpHOx5UA=",
35573557
"/components/thin-hook/demo/shared-worker-client.js": "WE5mA1PRKWU5fULLeEqjSJ5RpFF3uf4fWyvNkGK83D0=",
35583558
"/components/thin-hook/demo/shared-worker.js": "B9AZYCwUFTYmnEXQ0hLA6JJbVR5vakBrX3426XaEbbI=",
35593559
"/components/thin-hook/demo/spread.js": "gpfCZwAb/tn4HErIHzwhcCC0eMbvuzExYzK97dlma2A=",
3560-
"/components/thin-hook/demo/sub-document.html": "KdFm/VrPk09aIzwfr+Y/SvWun/KwYfVClma8LA9nUVs=",
3561-
"/components/thin-hook/demo/sub-sub-document.html": "l5uX3x6kaTMf/5PPOh9oQlmemHK8yhJOIOWDdbISK64=",
3560+
"/components/thin-hook/demo/sub-document.html": "SjExNXFoU2sH2ScDlIDPIfQixmNw2CjCbikNgovuUOY=",
3561+
"/components/thin-hook/demo/sub-sub-document.html": "yj7T5NC+F17stTk5ha8eC0wVMyAhd4j8cJ93EygczZo=",
35623562
"/components/thin-hook/demo/unauthorized-no-hook-script.js": "YjNcphHrG7UkmBspO6aCgkw+hh4Y7XvsD4TmuplpABE=",
35633563
"/components/thin-hook/demo/unauthorized-no-hook-worker-script.js": "j5e2u8zJ41kNLbACDJCY/DJkneDOzuWJwZ+lw2bh1XE=",
35643564
"/components/thin-hook/demo/web-worker-client.js": "stBjyffqLegDpNIyI3pc9q3H0lmL961LWhGr0eR5N/0=",

‎demo-frontend/components/thin-hook/demo/integrity.json.gz

4 Bytes
Binary file not shown.

‎demo-frontend/components/thin-hook/demo/no-hook-authorization.js

+1-1
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ else {
3333
"c135fd6ba3cad41e63985ecca191995bf311abc756c5f574ef5b641e7db56914": true, // (function writeln2() { console.log("no-hook script tag via document.writeln"); })()
3434
"e233738578fd7e8f2e961fb11885e2c187146314a8e3fc65692633ff89c5d34a": true, // (function writeln4() { console.log("no-hook script tag in div tag via document.writeln"); })()
3535
"4f0395d52a8c1c7edaacacade9c31fe18555b79ce963dfb1abaaa34990993374": true, // location = "about:blank";
36-
"c6ff2d2f498c4e8f5a010cb18de7174c2989cd1677dacab890d556047668b149": true, // demo/integrity.js
36+
"8324e84eb23d5958cabb31d23a9ed0b40db243cf6d1db0cbbca7fba05502499c": true, // demo/integrity.js
3737
"ba07654d1c24a271ba0fa7ee5c55cd60c02133b0e53cb6bb6e634da473b1e540": true, // demo/script-hashes.js
3838
"0242016e2887b322ab28b887f03779c63899db232bb036d794a0278db9e54339": true, // demo/content-loader.js
3939
};

‎demo-frontend/components/thin-hook/demo/no-hook-authorization.js.gz

-1 Bytes
Binary file not shown.

‎demo-keys/keys.json

+8-8
Original file line numberDiff line numberDiff line change
@@ -1,11 +1,11 @@
11
{
22
"version": "version_668",
3-
"rsa-private-key.pem": "-----BEGIN RSA PRIVATE KEY-----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\n8pmXJ7TZwx/5ekry17o0X0zkXKcNrBxzfva9BYXcfZCKAAc+PsmugQ==\n-----END RSA PRIVATE KEY-----\n",
4-
"rsa-public-key.pem": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxd5OKVoLgirReke8SqdE\nkels5xwpJ8j9qZlyMjbFScCC9DNcbFCuOFHrpPBtauCXprygbT2WGnahU/NZGF46\n7A1NNoi2NBxbYqhKRZ+6mHKIHEmNM+ANAOssgoFsj2bynz6G6DjN2pEBVL9mXxeo\ngvNnn3N0EJtnrKwqRtyMay4CxrilT+v46Or99mlkJP/2UcJqoTax8FVovVb4tL69\nCu6Vkn3I2ATUu3gA1evUJgNrtLdQTnpi3AK4h9zW3TuF0yAexSvb5mCmlZ92tHvv\nNuRUS5pevRAyDWawv9j2vZmLwBk5MSBBmqg0NNAnuSz4iKJBEV6JVPTQdxrmAFZ6\nYQIDAQAB\n-----END PUBLIC KEY-----\n",
5-
"ecdsa-private-key.pem": "-----BEGIN PRIVATE KEY-----\nMIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQgol9sh9RfyGekZhzs\nA20JU+qdnylbiq+NEggc0pzSsxWhRANCAASkQ5uqJeyaajXURebw9IJpmW6BOzw+\nUMrNz02bjpzcRFbyUMb7pcnWcbQpo4mYHm+Pe/8E6IzjVBYdx+RFCAOc\n-----END PRIVATE KEY-----\n",
6-
"ecdsa-public-key.pem": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEpEObqiXsmmo11EXm8PSCaZlugTs8\nPlDKzc9Nm46c3ERW8lDG+6XJ1nG0KaOJmB5vj3v/BOiM41QWHcfkRQgDnA==\n-----END PUBLIC KEY-----\n",
7-
"session-id-aes-key": "rI+QhBk9UU2/Ti5HOQXDxigiBQahB3Mej1d06PiYYN4=",
8-
"session-id-aes-iv": "G6Pc8e6czCb+RldB",
9-
"scriptsHashHex": "8ffeab66e4852948556d2a48fa97f41fe6e30c399c2a632c8eed758ad51f2ac4",
10-
"htmlHashHex": "0df45eb2b7be2bd96c0264603394003ccb1f1b975d0068a6d93dd9b776c13880"
3+
"rsa-private-key.pem": "-----BEGIN RSA PRIVATE KEY-----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\np+6lokcZR0CucLGlcBmsQ2+arH6ut2dOT2kXb/fETe6+4snQGK8=\n-----END RSA PRIVATE KEY-----\n",
4+
"rsa-public-key.pem": "-----BEGIN PUBLIC KEY-----\nMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6dGbIUSD3kQWmvBYXna\nUszgJI1e8AbVcerOHOI3nSrgi3n2v/JBnuPwRlsffyRxEEZZYWh7aRMUhujTQON8\nxjxblhS42/veIIr9s30sOnn/u7+/+I9XdvZOZtAw0+UPhWLgmV6LRvQW/55Bq6p+\nFTcNpw/b3dYSKOUqz0zIXTlNEl6RTxmq5qyKGMN4MU5r1vU/199ShGnfF5EtAQL/\nHr6q/M+bwINy0IW/31VFbIJyLYASJyuj28gkz3szjr9GQ8W3MOXetD/bQhYP8YPi\nwmf4W6EfaI5GSMaymn2Wrl68X0I1p5P5ZY4zJwh7Q1hIB1UT5l9SPE+Nrvp8Fc43\nZQIDAQAB\n-----END PUBLIC KEY-----\n",
5+
"ecdsa-private-key.pem": "-----BEGIN PRIVATE KEY-----\nMIGHAgEAMBMGByqGSM49AgEGCCqGSM49AwEHBG0wawIBAQQg6qQTnsYmsrvjjqbz\nEWgPgqRbE3Fmxi7F/SYc552IXpWhRANCAATuBR8VkNH3tY9gbest5yIFffz2XgL9\nR+UkonhlSPMyQg4ZZdgfVNY8ZSfJb3/ds2N8ee/FFBcy84n8mzGqOTcy\n-----END PRIVATE KEY-----\n",
6+
"ecdsa-public-key.pem": "-----BEGIN PUBLIC KEY-----\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE7gUfFZDR97WPYG3rLeciBX389l4C\n/UflJKJ4ZUjzMkIOGWXYH1TWPGUnyW9/3bNjfHnvxRQXMvOJ/Jsxqjk3Mg==\n-----END PUBLIC KEY-----\n",
7+
"session-id-aes-key": "PY1CbXHCUEK9k1XW82t/HReE9BhiWq7iBKwG70cxHqY=",
8+
"session-id-aes-iv": "X+rSqEyZKymMSggk",
9+
"scriptsHashHex": "c3b272e09fb367d183cb102c373e565324cff10fccb0d00bc7881a662aba60a1",
10+
"htmlHashHex": "ad7135ec3c11e5acfa5896aac925254d9af06d58149823ce80368517fd1feb77"
1111
}

0 commit comments

Comments
 (0)