From 34371126b1c3e336dc128fe695bc7db6cbe2472b Mon Sep 17 00:00:00 2001
From: Dmitry Zuikov <dzuikov@gmail.com>
Date: Fri, 23 Aug 2024 06:26:27 +0300
Subject: [PATCH] wip

---
 hbs2-core/lib/HBS2/Net/Auth/GroupKeySymm.hs | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/hbs2-core/lib/HBS2/Net/Auth/GroupKeySymm.hs b/hbs2-core/lib/HBS2/Net/Auth/GroupKeySymm.hs
index 93053108..c3bb765d 100644
--- a/hbs2-core/lib/HBS2/Net/Auth/GroupKeySymm.hs
+++ b/hbs2-core/lib/HBS2/Net/Auth/GroupKeySymm.hs
@@ -276,10 +276,8 @@ generateGroupKeyFancy mbk pks = create
       rcpt <- forM pks $ \pk -> do
                 box <- liftIO $ AK.boxSeal pk (LBS.toStrict $ serialise sk) <&> EncryptedBox
                 pure (pk, box)
-      -- TODO: GroupKeyIdJustHash-implies-timestamp
-      --   теперь просто хэш = хэш (ключ, таймстемп)
-      --   так лучше
-      let ha = hashObject @HbSync (serialise (sk,now))
+      let enc = SK.secretbox sk (nonceFrom (mempty :: ByteString)) (LBS.toStrict $ serialise sk)
+      let ha = hashObject @HbSync enc
       pure $ GroupKeySymmFancy
                 (HashMap.fromList rcpt)
                 (Just GroupKeyIdJustHash)