tor - Transit encryption and privacy out of the box

Age	Commit message (Collapse)	Author
2013-07-10	Completely refactor how FILENAME_PRIVATE works	Nick Mathewson
	We previously used FILENAME_PRIVATE identifiers mostly for identifiers exposed only to the unit tests... but also for identifiers exposed to the benchmarker, and sometimes for identifiers exposed to a similar module, and occasionally for no really good reason at all. Now, we use FILENAME_PRIVATE identifiers for identifiers shared by Tor and the unit tests. They should be defined static when we aren't building the unit test, and globally visible otherwise. (The STATIC macro will keep us honest here.) For identifiers used only by the unit tests and never by Tor at all, on the other hand, we wrap them in #ifdef TOR_UNIT_TESTS. This is not the motivating use case for the split test/non-test build system; it's just a test example to see how it works, and to take a chance to clean up the code a little.
2013-03-23	Avoid clang warnings from implicit off_t->size_t cast	Nick Mathewson

2013-02-07	Tolerate curve25519 backends where the high bit of the pk isn't ignored	Nick Mathewson
	Right now, all our curve25519 backends ignore the high bit of the public key. But possibly, others could treat the high bit of the public key as encoding out-of-bounds values, or as something to be preserved. This could be used to distinguish clients with different backends, at the cost of killing a circuit. As a workaround, let's just clear the high bit of each public key indiscriminately before we use it. Fix for bug 8121, reported by rransom. Bugfix on 0.2.4.8-alpha.
2013-02-04	Fix compilation with --disable-curve25519 option	Nick Mathewson
	The fix is to move the two functions to format/parse base64 curve25519 public keys into a new "crypto_format.c" file. I could have put them in crypto.c, but that's a big file worth splitting anyway. Fixes bug 8153; bugfix on 0.2.4.8-alpha where I did the fix for 7869.
2013-01-31	typo in crypto_curve25519.c comment, spotted by rransom	Nick Mathewson

2013-01-16	Check for nacl headers in nacl/ subdir	Nick Mathewson
	Fix for bug 7972
2013-01-16	Update the copyright date to 201.	Nick Mathewson

2013-01-15	Clean up odds and ends	Roger Dingledine

2013-01-05	Make the = at the end of ntor-onion-key optional.	Nick Mathewson
	Makes bug 7869 more easily fixable if we ever choose to do so.
2013-01-03	Check all crypto_rand return values for ntor.	Nick Mathewson

2013-01-03	Use safe_mem_is_zero for checking curve25519 output for 0-ness	Nick Mathewson
	This should make the intent more explicit. Probably needless, though.
2013-01-02	Move curve25519 keypair type to src/common; give it functions	Nick Mathewson
	This patch moves curve25519_keypair_t from src/or/onion_ntor.h to src/common/crypto_curve25519.h, and adds new functions to generate, load, and store keypairs.
2013-01-02	Refactor strong os-RNG into its own function	Nick Mathewson
	Previously, we only used the strong OS entropy source as part of seeding OpenSSL's RNG. But with curve25519, we'll have occasion to want to generate some keys using extremely-good entopy, as well as the means to do so. So let's! This patch refactors the OS-entropy wrapper into its own crypto_strongest_rand() function, and makes our new curve25519_secret_key_generate function try it as appropriate.
2013-01-02	Add a wrapper around, and test and build support for, curve25519.	Nick Mathewson
	We want to use donna-c64 when we have a GCC with support for 64x64->uint128_t multiplying. If not, we want to use libnacl if we can, unless it's giving us the unsafe "ref" implementation. And if that isn't going to work, we'd like to use the portable-and-safe-but-slow 32-bit "donna" implementation. We might need more library searching for the correct libnacl, especially once the next libnacl release is out -- it's likely to have bunches of better curve25519 implementations. I also define a set of curve25519 wrapper functions, though it really shouldn't be necessary. We should eventually make the -donna*.c files get build with -fomit-frame-pointer, since that can make a difference.