| Commit message (Expand) | Author | Age |
... | |
| * | | | Code to parse and format CREATE{,2,_FAST} cells and their allies•••As elsewhere, it makes sense when adding or extending a cell type to
actually make the code to parse it into a separate tested function.
This commit doesn't actually make anything use these new functions;
that's for a later commit.
| Nick Mathewson | 2013-01-03 |
| * | | | Rename handshake_digest to rend_circ_nonce•••The handshake_digest field was never meaningfully a digest *of* the
handshake, but rather is a digest *from* the handshake that we exapted
to prevent replays of ESTABLISH_INTRO cells. The ntor handshake will
generate it as more key material rather than taking it from any part
of the circuit handshake reply..
| Nick Mathewson | 2013-01-03 |
| * | | | Massive refactoring of the various handshake types•••The three handshake types are now accessed from a unified interface;
their state is abstracted from the rest of the cpath state, and so on.
| Nick Mathewson | 2013-01-03 |
| * | | | Refactor the CREATE_FAST handshake code to match the others. | Nick Mathewson | 2013-01-03 |
| * | | | Split onion.[ch] into onion{,_fast,_tap}.[ch]•••I'm going to want a generic "onionskin" type and set of wrappers, and
for that, it will be helpful to isolate the different circuit creation
handshakes. Now the original handshake is in onion_tap.[ch], the
CREATE_FAST handshake is in onion_fast.[ch], and onion.[ch] now
handles the onion queue.
This commit does nothing but move code and adjust header files.
| Nick Mathewson | 2013-01-02 |
| * | | | Wrangle curve25519 onion keys: generate, store, load, publish, republish•••Here we try to handle curve25519 onion keys from generating them,
loading and storing them, publishing them in our descriptors, putting
them in microdescriptors, and so on.
This commit is untested and probably buggy like whoa
| Nick Mathewson | 2013-01-02 |
| * | | | Move curve25519 keypair type to src/common; give it functions•••This patch moves curve25519_keypair_t from src/or/onion_ntor.h to
src/common/crypto_curve25519.h, and adds new functions to generate,
load, and store keypairs.
| Nick Mathewson | 2013-01-02 |
| * | | | Implementat the ntor handshake•••The ntor handshake--described in proposal 216 and in a paper by
Goldberg, Stebila, and Ustaoglu--gets us much better performance than
our current approach.
| Nick Mathewson | 2013-01-02 |
| * | | | Implement HKDF from RFC5869•••This is a customizable extract-and-expand HMAC-KDF for deriving keys.
It derives from RFC5869, which derives its rationale from Krawczyk,
H., "Cryptographic Extraction and Key Derivation: The HKDF Scheme",
Proceedings of CRYPTO 2010, 2010, <http://eprint.iacr.org/2010/264>.
I'm also renaming the existing KDF, now that Tor has two of them.
This is the key derivation scheme specified in ntor.
There are also unit tests.
| Nick Mathewson | 2012-12-06 |
* | | | | Avoid spurious local-port warnings•••Our old warn_nonlocal_client_ports() would give a bogus warning for
every nonlocal port every time it parsed any ports at all. So if it
parsed a nonlocal socksport, it would complain that it had a nonlocal
socksport...and then turn around and complain about the nonlocal
socksport again, calling it a nonlocal transport or nonlocal dnsport,
if it had any of those.
Fixes bug 7836; bugfix on 0.2.3.3-alpha.
| Nick Mathewson | 2013-01-02 |
* | | | | Fix a couple of harmless clang3.2 warnings | Sebastian Hahn | 2012-12-31 |
* | | | | Fix a crash bug when running an node without IPv6-exit support.•••Fixes bug 7814; bugfix on 0.2.4.7-alpha.
| Nick Mathewson | 2012-12-29 |
* | | | | Rate-limit "No circuits are opened" message to once-per-hour•••mr-4 reports on #7799 that he was seeing it several times per second,
which suggests that things had gone very wrong.
This isn't a real fix, but it should make Tor usable till we can
figure out the real issue.
| Nick Mathewson | 2012-12-26 |
* | | | | Fix a possibly-unused-var warning. Thank you, GCC. | Nick Mathewson | 2012-12-25 |
* | | | | Fix compilation warning: must not format u64 as long. | Nick Mathewson | 2012-12-25 |
* | | | | Fix whitespace | Nick Mathewson | 2012-12-25 |
* | | | | Merge remote-tracking branch 'mikeperry/209-path-bias-changes' | Nick Mathewson | 2012-12-25 |
|\ \ \ \ |
|
| * | | | | Nick's Code review #3 part 2. | Mike Perry | 2012-12-18 |
| * | | | | Changes from Nick's code review 'part 1'•••I think this is actually his third code review of this branch so far.
| Mike Perry | 2012-12-18 |
| * | | | | Tags on relay cells can result in certain reason codes.•••Close the circuit (it's probably junk anyways), and make sure we don't probe
it/count it as a success.
| Mike Perry | 2012-12-11 |
| * | | | | Woops, this log message triggers with the 2-hop bias commit. | Mike Perry | 2012-12-11 |
| * | | | | Add a missing comment. | Mike Perry | 2012-12-10 |
| * | | | | More log message and space fixups. | Mike Perry | 2012-12-10 |
| * | | | | Clean up some XXX comments. | Mike Perry | 2012-12-09 |
| * | | | | Space fixes. | Mike Perry | 2012-12-09 |
| * | | | | Fix a rather serious use-count state bug.•••We need to use the success count or the use count depending on the consensus
parameter.
| Mike Perry | 2012-12-09 |
| * | | | | Convert to doubles for all pathbias state.•••Let's hope this solves the rounding error issue..
| Mike Perry | 2012-12-09 |
| * | | | | Also shorten circuit_successes to circ_successes.•••For consistency and great justice.
Ok, mostly consistency.
| Mike Perry | 2012-12-09 |
| * | | | | Rename first_hop to circ_attempt.•••Since we've generalized what we can count from (first or second hop), we
should generalize the variable and constant naming too.
| Mike Perry | 2012-12-09 |
| * | | | | Change from first hop accounting to 2nd hop accounting•••This has several advantages, including more resilience to ambient failure.
I still need to rename all the first_hop vars tho.. Saving that for a separate
commit.
| Mike Perry | 2012-12-09 |
| * | | | | Add intro+rend cannibalize param.. | Mike Perry | 2012-12-09 |
| * | | | | Flag cannibalized circs as used (non-ideal).•••Also add some comments.
| Mike Perry | 2012-12-09 |
| * | | | | Allow any valid 'end' cell to mean a circuit was used successfully.•••Also improve some log messages.
| Mike Perry | 2012-12-08 |
| * | | | | Sadly, we can't safely count client intro circ success | Mike Perry | 2012-12-08 |
| * | | | | Fix some hidden service edge cases. | Mike Perry | 2012-12-08 |
| * | | | | Refactor path use bias code into own function.•••Also, improve and log some failure cases.
| Mike Perry | 2012-12-07 |
| * | | | | Actually, both nacks and acks indicate a valid path | Mike Perry | 2012-12-07 |
| * | | | | Note more potential issues. | Mike Perry | 2012-12-07 |
| * | | | | Note a strange case for SOCKS streams. | Mike Perry | 2012-12-07 |
| * | | | | Fix another crash bug. | Mike Perry | 2012-12-07 |
| * | | | | Fix a crash bug and pass down a remote reason code.•••Unexpected channel closures count as remote circ failures.
| Mike Perry | 2012-12-07 |
| * | | | | Document that care needs to be taken with any_streams_attached. | Mike Perry | 2012-12-07 |
| * | | | | Remove n_chan codepaths for determinining guard.•••Cpath is apparently good enough.
| Mike Perry | 2012-12-07 |
| * | | | | Move a pathbias function that depends on entryguard_t. | Mike Perry | 2012-12-07 |
| * | | | | Fix a crash due to NULL circ->n_chan.•••Is this redundant? Can we always rely on circ->cpath->extend_info
being present for origin circuits?
| Mike Perry | 2012-12-07 |
| * | | | | Prop209: Rend circuits weren't ever marked dirty. | Mike Perry | 2012-12-07 |
| * | | | | Prop 209: Add in hidserv path bias counts for usage. | Mike Perry | 2012-12-07 |
| * | | | | Prop 209: Add path bias counts for timeouts and other mechanisms.•••Turns out there's more than one way to block a tagged circuit.
This seems to successfully handle all of the normal exit circuits. Hidden
services need additional tweaks, still.
| Mike Perry | 2012-12-07 |
| * | | | | Be explicit about units for timeout. | Mike Perry | 2012-12-07 |
| * | | | | Fix an assert crash and an incorrectly placed return. | Mike Perry | 2012-12-07 |