diff options
author | Nick Mathewson <nickm@torproject.org> | 2015-07-16 16:06:25 -0400 |
---|---|---|
committer | Nick Mathewson <nickm@torproject.org> | 2015-07-16 16:06:25 -0400 |
commit | 60a52ed83ddc2c1591b896ce32dcdfc903031aea (patch) | |
tree | fcc8c63ebe2148b0cbacc950878f2ff45b7a9f9d /changes/bug12498 | |
parent | 515de3ac1947455d60d1eb873ecb6fa45729076b (diff) | |
download | tor-60a52ed83ddc2c1591b896ce32dcdfc903031aea.tar.gz tor-60a52ed83ddc2c1591b896ce32dcdfc903031aea.zip |
Add the remaining changes items to ChangeLog for 0.2.7.2-alpha
Diffstat (limited to 'changes/bug12498')
-rw-r--r-- | changes/bug12498 | 29 |
1 files changed, 0 insertions, 29 deletions
diff --git a/changes/bug12498 b/changes/bug12498 deleted file mode 100644 index 185ba467f4..0000000000 --- a/changes/bug12498 +++ /dev/null @@ -1,29 +0,0 @@ - o Major features (Ed25519 identity keys, Prop220): - - All relays now maintain a stronger identity key, using the - Ed25519 elliptic curve signature format. This master key is - designed so that it can be kept offline. Relays also generate - an online signing key, and a set of other Ed25519 keys and certificates. - These are all automatically regenerated and rotated as needed. - - Directory authorities track which Ed25519 identity keys have been - used with which RSA1024 identity keys, and do not allow them to vary - freely. - - Directory authorities now vote on Ed25519 identity keys along with - RSA1024 keys. - - Microdescriptors now include ed25519 identity keys. - - o Major features (onion key cross-certification): - - Relay descriptors now include signatures of the identity keys using - the TAP and ntor onion keys. This allows relays to prove ownership of - their own onion keys. Because of this change, microdescriptors no longer - need to include RSA identity keys. Implements proposal 228; - closes ticket 12499. - - o Code simplification and refactoring: - - The link authentication code has been refactored for better testability - and reliability. It now uses code generated with the "trunnel" - binary encoding generator, to reduce the risk of bugs due to - programmer error. Done as part of ticket 12498. - - o Testing: - - The link authentication protocol code now has extensive tests. - - The relay descriptor signature testing code now has extensive tests. |