anastasis

Credential backup and recovery protocol and service
Log | Files | Refs | Submodules | README | LICENSE

commit 047035bf58e4fec5d5c9f6b3f449d8e36e724ebb
parent 9d36faaae6a8b1bcecc36686bbbacaedd532172c
Author: Christian Grothoff <christian@grothoff.org>
Date:   Wed, 29 Jul 2026 18:54:39 +0200

bump the protocol version for the key derivation flag day

Diffstat:
Msrc/backend/anastasis-httpd_config.c | 5++++-
Msrc/restclient/anastasis_api_config.c | 7++++++-
2 files changed, 10 insertions(+), 2 deletions(-)

diff --git a/src/backend/anastasis-httpd_config.c b/src/backend/anastasis-httpd_config.c @@ -104,8 +104,11 @@ AH_handler_config (struct AH_RequestHandler *rh, response = TALER_MHD_MAKE_JSON_PACK ( GNUNET_JSON_pack_string ("name", "anastasis"), + /* Deliberately incompatible with 0:x:x: the key derivation was fixed to + use the full context string, so every key derived by an older client + differs and backups made with one cannot be recovered by the other. */ GNUNET_JSON_pack_string ("version", - "0:3:0"), + "1:0:0"), GNUNET_JSON_pack_string ("implementation", "urn:net:taler:specs:anastasis:c-reference"), GNUNET_JSON_pack_string ("business_name", diff --git a/src/restclient/anastasis_api_config.c b/src/restclient/anastasis_api_config.c @@ -32,8 +32,13 @@ /** * Which version of the Taler protocol is implemented * by this library? Used to determine compatibility. + * + * Raised to 1 when the key derivation was fixed to use the full context + * string: every key derived by a 0:x:x client differs, so backups written by + * one side cannot be recovered by the other. The age stays 0 because there + * is no compatibility to keep. */ -#define ANASTASIS_PROTOCOL_CURRENT 0 +#define ANASTASIS_PROTOCOL_CURRENT 1 /** * How many versions are we backwards compatible with?