diff options
| author | Nick Mathewson <nickm@torproject.org> | 2019-05-17 11:03:16 -0400 |
|---|---|---|
| committer | George Kadianakis <desnacked@riseup.net> | 2019-05-27 14:20:07 +0300 |
| commit | 0bc1241494a118d5319207a9f4683b993d389e77 (patch) | |
| tree | 64d010086cf5f330dd1fcceaf9ad39b9364b6a09 /scripts | |
| parent | 530d1179ffe54ad0db2678142154fdd20f71cf53 (diff) | |
| download | tor-0bc1241494a118d5319207a9f4683b993d389e77.tar.gz tor-0bc1241494a118d5319207a9f4683b993d389e77.zip | |
Make sure that we send at least some random data in RELAY_DATA cells
Proposal 289 prevents SENDME-flooding by requiring the other side to
authenticate the data it has received. But this data won't actually
be random if they are downloading a known resource. "No problem",
we said, "let's fell the empty parts of our cells with some
randomness!" and we did that in #26871.
Unfortunately, if the relay data payloads are all completely full,
there won't be any empty parts for us to randomize.
Therefore, we now pick random "randomness windows" between
CIRCWINDOW_INCREMENT/2 and CIRCWINDOW_INCREMENT. We remember whether we have
sent a cell containing at least 16 bytes of randomness in that window. If we
haven't, then when the window is exhausted, we send one. (This window approach
is designed to lower the number of rng checks we have to do. The number 16 is
pulled out of a hat to change the attacker's guessing difficulty to
"impossible".)
Implements 28646.
Diffstat (limited to 'scripts')
| -rw-r--r-- | scripts/maint/practracker/exceptions.txt | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/scripts/maint/practracker/exceptions.txt b/scripts/maint/practracker/exceptions.txt index 712e59dc5b..3a32e97beb 100644 --- a/scripts/maint/practracker/exceptions.txt +++ b/scripts/maint/practracker/exceptions.txt @@ -120,7 +120,7 @@ problem function-size /src/core/or/connection_or.c:connection_or_compute_authent problem file-size /src/core/or/policies.c 3249 problem function-size /src/core/or/policies.c:policy_summarize() 107 problem function-size /src/core/or/protover.c:protover_all_supported() 117 -problem file-size /src/core/or/relay.c 3173 +problem file-size /src/core/or/relay.c 3250 problem function-size /src/core/or/relay.c:circuit_receive_relay_cell() 127 problem function-size /src/core/or/relay.c:relay_send_command_from_edge_() 116 problem function-size /src/core/or/relay.c:connection_ap_process_end_not_open() 194 |