[OpenTRV-dev] Key loss code review

[Deniz Erbilgin]

We've found a major cause for our key loss problem and are in the process
of a code review on how to fix it.

The bug is part of the secure frame generation code and we're having
trouble finding a way of both forcing people to use it in a safe way and
not making everything a big blob that has to be used together.

The basic goals are:

   1. To find possible fixes.
   2. To make sure they do fix the problem (through code analysis and
   testing).
   3. To make sure the fix doesn't compromise security and does not affect
   the library dependencies.
   4. To be as certain as possible that the fix will not break anything
   else.
   5. To improve our documentation.


Commentable link here:
https://docs.google.com/document/d/1sFEzTRqnw-XiYz1n5aE38FUyYFd6NUULx0SlueNOF4Q/edit?usp=sharing
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.opentrv.org.uk/pipermail/opentrv-dev/attachments/20160630/a60357f7/attachment.html>