Age | Commit message (Collapse) | Author |
|
|
|
Our regular DH parameters that we use for circuit and rendezvous
crypto are unchanged. This is yet another small step on the path of
protocol fingerprinting resistance.
|
|
Conflicts:
src/or/routerparse.c
src/or/test.c
|
|
|
|
Conflicts:
src/or/config.c
src/or/networkstatus.c
src/or/rendcommon.c
src/or/routerparse.c
src/or/test.c
|
|
mistake again
Our public key functions assumed that they were always writing into a
large enough buffer. In one case, they weren't.
(Incorporates fixes from sebastian)
|
|
I am not at all sure that it is possible to trigger a bug here,
but better safe than sorry.
|
|
Conflicts:
src/common/test.h
src/or/test.c
|
|
|
|
|
|
Conflicts:
src/common/test.h
src/or/test.c
|
|
|
|
In 5e4d53d535a3cc9903250b3df0caa829f1c5e4bf we made it so that
crypto_cipher_set_key cannot fail. The call will now
always succeed, to returning a boolean for success/failure makes
no sense.
|
|
See task 1114. The most plausible explanation for someone sending us weak
DH keys is that they experiment with their Tor code or implement a new Tor
client. Usually, we don't care about such events, especially not on warn
level. If we really care about someone not following the Tor protocol, we
can set ProtocolWarnings to 1.
|
|
|
|
This patch introduces a new type called document_signature_t to represent the
signature of a consensus document. Now, each consensus document can have up
to one document signature per voter per digest algorithm. Also, each
detached-signatures document can have up to one signature per <voter,
algorithm, flavor>.
|
|
|
|
|
|
This adds an openssl 0.9.8 dependency. Let's see if anybody cares.
|
|
|
|
|
|
|
|
The subversion $Id$ fields made every commit force a rebuild of
whatever file got committed. They were not actually useful for
telling the version of Tor files in the wild.
svn:r17867
|
|
not to collide with any system headers. This tripped us up on Android.
svn:r17805
|
|
svn:r17734
|
|
comments so that they will get recognized as doxygen.
svn:r17729
|
|
reference counts. Bugfix on 0.1.0.1-rc.
svn:r17672
|
|
authorization data. Tweaked a bit: see comments on or-dev.
svn:r16475
|
|
New (temporary) tool to dump the modulus of a key. May help with a project of weasel's.
svn:r14580
|
|
Use RAND_poll() again: the bug that made us stop using it has been fixed.
svn:r14150
|
|
More 64-to-32 fixes. Partial backport candidate. still not done.
svn:r13680
|
|
Fix all remaining shorten-64-to-32 errors in src/common. Some were genuine problems. Many were compatibility errors with libraries (openssl, zlib) that like predate size_t. Partial backport candidate.
svn:r13665
|
|
Replace the hefty tor_strpartition with a simple function to replace its only (trivial) use.
svn:r13532
|
|
Change DNs in x509 certificates to be harder to fingerprint. Raise common code. Refactor random hostname generation into crypto.c
svn:r13429
|
|
Be more thorough about memory poisoning and clearing. Add an in-place version of aes_crypt in order to remove a memcpy from relay_crypt_one_payload.
svn:r13414
|
|
svn:r13412
|
|
svn:r12786
|
|
Parse CERT cells and act correctly when we get them.
svn:r12396
|
|
HMAC-SHA-1 implementation, with unit tests based on vectors from RVFC2202. Steven's stuff will need this.
svn:r12289
|
|
Patch from karsten: remove cbc and make unit tests handle aes-ctr-with-iv.
svn:r11538
|
|
New (untested) code to implement AES-with-IV. Currently, IVs are generated randomly. Once tested, should be (almost) a drop-in replacement for the CBC functions.
svn:r11519
|
|
step of integrating his new hidden service stuff
svn:r11489
|
|
Fix compilation on compilers that do not allow you to typedef the same type twice.
svn:r10598
|
|
Expose a function to parse a private key from a string as CRYPTO_PRIVATE. For testing.
svn:r10583
|
|
Add a "swap" function to smartlist, add a "shuffle" function for smartlist to crypto.c, and make appropriate hashtable functions be more const.
svn:r10208
|
|
Move private function declarations from crypto.c into a new #ifdef CRYPTO_PRIVATE block in crypto.h
svn:r10074
|
|
Update copyright dates.
svn:r9570
|
|
Add documentation to src/common/*.h; improve documentation for SMARTLIST_FOREACH; remove never-used options and corresponding tests from tor_strpartition.
svn:r9483
|
|
Removing the last DOCDOC comment hurt so much that I had to use Doxygen to identify undocumented macros and comments, and add 150 more DOCDOCs to point out where they were. Oops. Hey, kids! Fixing some of these could be your first Tor patch!
svn:r9477
|
|
Add function to return a random uint64_t.
svn:r8570
|