permissionlesstech/bitchat
1
0
Fork 0
mirror of https://github.com/permissionlesstech/bitchat.git synced 2026-07-25 05:25:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #944 from permissionlesstech/fix/BCH-01-011-timestamp-validation

Browse Source 
fix(security): reduce timestamp validation window to ±5 minutes [BCH-01-011]
This commit is contained in:
jack
2026-01-12 15:33:38 -10:00
committed by GitHub
parent b1aeb931bc 1563209797
commit cada784844
2 changed files with 37 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
bitchat/Utils/InputValidator.swift
+5 -3
View File
@@ -52,11 +52,13 @@ struct InputValidator {
// MessageType/NoisePayloadType enums; keeping validator free of stale lists.
/// Validates timestamp is reasonable (not too far in past or future)
/// BCH-01-011: Reduced from ±1 hour to ±5 minutes to limit replay attack window
static func validateTimestamp(_ timestamp: Date) -> Bool {
let now = Date()
let oneHourAgo = now.addingTimeInterval(-3600)
let oneHourFromNow = now.addingTimeInterval(3600)
return timestamp >= oneHourAgo && timestamp <= oneHourFromNow
// 5 minutes = 300 seconds (industry standard for replay protection)
let fiveMinutesAgo = now.addingTimeInterval(-300)
let fiveMinutesFromNow = now.addingTimeInterval(300)
return timestamp >= fiveMinutesAgo && timestamp <= fiveMinutesFromNow
}
}