Confirm
927
edits
Changes
→Definitions and assumptions
* '''Encryption Secret''': derived from the master secret, used to encrypt the metadata token.
* '''Token Secret''': derived from the master secret and auth token, used as '''oauth_consumer_secret'''. This is the only secret shared with the client and is different for each auth token.
* '''AES-CBC''': The symetric block cipher used to encrypt data. The block cipher mode in use is CBC with a random IV.
Some assumptions:
