fix: make sure that only pake messages are unencrypted

src/croc/croc.go

@@ -931,6 +931,15 @@ func (c *Client) processMessage(payload []byte) (done bool, err error) {
 		return
 	}
 
+	// only "pake" messages should be unencrypted
+	// if a non-"pake" message is received unencrypted something
+	// is weird
+	if m.Type != "pake" && c.Key == nil {
+		err = fmt.Errorf("unencrypted communication rejected")
+		done = true
+		return
+	}
+
 	switch m.Type {
 	case "finished":
 		err = message.Send(c.conn[0], c.Key, message.Message{