aboutsummaryrefslogtreecommitdiff
path: root/src/or
Commit message (Expand)AuthorAge
...
| * | | Code to parse and format CREATE{,2,_FAST} cells and their allies•••As elsewhere, it makes sense when adding or extending a cell type to actually make the code to parse it into a separate tested function. This commit doesn't actually make anything use these new functions; that's for a later commit. Nick Mathewson2013-01-03
| * | | Rename handshake_digest to rend_circ_nonce•••The handshake_digest field was never meaningfully a digest *of* the handshake, but rather is a digest *from* the handshake that we exapted to prevent replays of ESTABLISH_INTRO cells. The ntor handshake will generate it as more key material rather than taking it from any part of the circuit handshake reply.. Nick Mathewson2013-01-03
| * | | Massive refactoring of the various handshake types•••The three handshake types are now accessed from a unified interface; their state is abstracted from the rest of the cpath state, and so on. Nick Mathewson2013-01-03
| * | | Refactor the CREATE_FAST handshake code to match the others.Nick Mathewson2013-01-03
| * | | Split onion.[ch] into onion{,_fast,_tap}.[ch]•••I'm going to want a generic "onionskin" type and set of wrappers, and for that, it will be helpful to isolate the different circuit creation handshakes. Now the original handshake is in onion_tap.[ch], the CREATE_FAST handshake is in onion_fast.[ch], and onion.[ch] now handles the onion queue. This commit does nothing but move code and adjust header files. Nick Mathewson2013-01-02
| * | | Wrangle curve25519 onion keys: generate, store, load, publish, republish•••Here we try to handle curve25519 onion keys from generating them, loading and storing them, publishing them in our descriptors, putting them in microdescriptors, and so on. This commit is untested and probably buggy like whoa Nick Mathewson2013-01-02
| * | | Move curve25519 keypair type to src/common; give it functions•••This patch moves curve25519_keypair_t from src/or/onion_ntor.h to src/common/crypto_curve25519.h, and adds new functions to generate, load, and store keypairs. Nick Mathewson2013-01-02
| * | | Implementat the ntor handshake•••The ntor handshake--described in proposal 216 and in a paper by Goldberg, Stebila, and Ustaoglu--gets us much better performance than our current approach. Nick Mathewson2013-01-02
| * | | Implement HKDF from RFC5869•••This is a customizable extract-and-expand HMAC-KDF for deriving keys. It derives from RFC5869, which derives its rationale from Krawczyk, H., "Cryptographic Extraction and Key Derivation: The HKDF Scheme", Proceedings of CRYPTO 2010, 2010, <http://eprint.iacr.org/2010/264>. I'm also renaming the existing KDF, now that Tor has two of them. This is the key derivation scheme specified in ntor. There are also unit tests. Nick Mathewson2012-12-06
* | | | Avoid spurious local-port warnings•••Our old warn_nonlocal_client_ports() would give a bogus warning for every nonlocal port every time it parsed any ports at all. So if it parsed a nonlocal socksport, it would complain that it had a nonlocal socksport...and then turn around and complain about the nonlocal socksport again, calling it a nonlocal transport or nonlocal dnsport, if it had any of those. Fixes bug 7836; bugfix on 0.2.3.3-alpha. Nick Mathewson2013-01-02
* | | | Fix a couple of harmless clang3.2 warningsSebastian Hahn2012-12-31
* | | | Fix a crash bug when running an node without IPv6-exit support.•••Fixes bug 7814; bugfix on 0.2.4.7-alpha. Nick Mathewson2012-12-29
* | | | Rate-limit "No circuits are opened" message to once-per-hour•••mr-4 reports on #7799 that he was seeing it several times per second, which suggests that things had gone very wrong. This isn't a real fix, but it should make Tor usable till we can figure out the real issue. Nick Mathewson2012-12-26
* | | | Fix a possibly-unused-var warning. Thank you, GCC.Nick Mathewson2012-12-25
* | | | Fix compilation warning: must not format u64 as long.Nick Mathewson2012-12-25
* | | | Fix whitespaceNick Mathewson2012-12-25
* | | | Merge remote-tracking branch 'mikeperry/209-path-bias-changes'Nick Mathewson2012-12-25
|\ \ \ \
| * | | | Nick's Code review #3 part 2.Mike Perry2012-12-18
| * | | | Changes from Nick's code review 'part 1'•••I think this is actually his third code review of this branch so far. Mike Perry2012-12-18
| * | | | Tags on relay cells can result in certain reason codes.•••Close the circuit (it's probably junk anyways), and make sure we don't probe it/count it as a success. Mike Perry2012-12-11
| * | | | Woops, this log message triggers with the 2-hop bias commit.Mike Perry2012-12-11
| * | | | Add a missing comment.Mike Perry2012-12-10
| * | | | More log message and space fixups.Mike Perry2012-12-10
| * | | | Clean up some XXX comments.Mike Perry2012-12-09
| * | | | Space fixes.Mike Perry2012-12-09
| * | | | Fix a rather serious use-count state bug.•••We need to use the success count or the use count depending on the consensus parameter. Mike Perry2012-12-09
| * | | | Convert to doubles for all pathbias state.•••Let's hope this solves the rounding error issue.. Mike Perry2012-12-09
| * | | | Also shorten circuit_successes to circ_successes.•••For consistency and great justice. Ok, mostly consistency. Mike Perry2012-12-09
| * | | | Rename first_hop to circ_attempt.•••Since we've generalized what we can count from (first or second hop), we should generalize the variable and constant naming too. Mike Perry2012-12-09
| * | | | Change from first hop accounting to 2nd hop accounting•••This has several advantages, including more resilience to ambient failure. I still need to rename all the first_hop vars tho.. Saving that for a separate commit. Mike Perry2012-12-09
| * | | | Add intro+rend cannibalize param..Mike Perry2012-12-09
| * | | | Flag cannibalized circs as used (non-ideal).•••Also add some comments. Mike Perry2012-12-09
| * | | | Allow any valid 'end' cell to mean a circuit was used successfully.•••Also improve some log messages. Mike Perry2012-12-08
| * | | | Sadly, we can't safely count client intro circ successMike Perry2012-12-08
| * | | | Fix some hidden service edge cases.Mike Perry2012-12-08
| * | | | Refactor path use bias code into own function.•••Also, improve and log some failure cases. Mike Perry2012-12-07
| * | | | Actually, both nacks and acks indicate a valid pathMike Perry2012-12-07
| * | | | Note more potential issues.Mike Perry2012-12-07
| * | | | Note a strange case for SOCKS streams.Mike Perry2012-12-07
| * | | | Fix another crash bug.Mike Perry2012-12-07
| * | | | Fix a crash bug and pass down a remote reason code.•••Unexpected channel closures count as remote circ failures. Mike Perry2012-12-07
| * | | | Document that care needs to be taken with any_streams_attached.Mike Perry2012-12-07
| * | | | Remove n_chan codepaths for determinining guard.•••Cpath is apparently good enough. Mike Perry2012-12-07
| * | | | Move a pathbias function that depends on entryguard_t.Mike Perry2012-12-07
| * | | | Fix a crash due to NULL circ->n_chan.•••Is this redundant? Can we always rely on circ->cpath->extend_info being present for origin circuits? Mike Perry2012-12-07
| * | | | Prop209: Rend circuits weren't ever marked dirty.Mike Perry2012-12-07
| * | | | Prop 209: Add in hidserv path bias counts for usage.Mike Perry2012-12-07
| * | | | Prop 209: Add path bias counts for timeouts and other mechanisms.•••Turns out there's more than one way to block a tagged circuit. This seems to successfully handle all of the normal exit circuits. Hidden services need additional tweaks, still. Mike Perry2012-12-07
| * | | | Be explicit about units for timeout.Mike Perry2012-12-07
| * | | | Fix an assert crash and an incorrectly placed return.Mike Perry2012-12-07