aboutsummaryrefslogtreecommitdiff
path: root/dir-spec.txt
diff options
context:
space:
mode:
authorNick Mathewson <nickm@torproject.org>2019-01-14 14:07:11 -0500
committerNick Mathewson <nickm@torproject.org>2019-01-14 14:07:11 -0500
commit81aeca7501f89e9889d592ef2217b265c41bf2df (patch)
tree5d2071b729d5f5b8b4d4a79cbc0a6e87f975a200 /dir-spec.txt
parent139b5d05b038aec9ea2ba91b9fc371119a7e8fd1 (diff)
parentc2cc4dea16a3b90816e08380da0c7a8de54903e4 (diff)
downloadtorspec-81aeca7501f89e9889d592ef2217b265c41bf2df.tar.gz
torspec-81aeca7501f89e9889d592ef2217b265c41bf2df.zip
Merge remote-tracking branch 'tor-github/pr/44'
Diffstat (limited to 'dir-spec.txt')
-rw-r--r--dir-spec.txt18
1 files changed, 12 insertions, 6 deletions
diff --git a/dir-spec.txt b/dir-spec.txt
index 39be9df..685a62e 100644
--- a/dir-spec.txt
+++ b/dir-spec.txt
@@ -706,17 +706,23 @@
[Versions before 0.2.0.1-alpha don't recognize this]
- "extra-info-digest" SP sha1digest [SP sha256-digest] NL
+ "extra-info-digest" SP sha1-digest [SP sha256-digest] NL
[At most once]
- "sha1-digest" is a hex-encoded digest (using upper-case characters) of
- the router's extra-info document, as signed in the router's extra-info
- (that is, not including the signature). (If this field is absent, the
- router is not uploading a corresponding extra-info document.)
+ "sha1-digest" is a hex-encoded SHA1 digest (using upper-case characters)
+ of the router's extra-info document, as signed in the router's
+ extra-info (that is, not including the signature). (If this field is
+ absent, the router is not uploading a corresponding extra-info
+ document.)
"sha256-digest" is a base64-encoded SHA256 digest of the extra-info
- document, computed over the same data.
+ document. Unlike the "sha1-digest", this digest is calculated over the
+ entire document, including the signature. This difference is due to
+ a long-lived bug in the tor implementation that it would be difficult
+ to roll out an incremental fix for, not a design choice. Future digest
+ algorithms specified should not include the signature in the data used
+ to compute the digest.
[Versions before 0.2.7.2-alpha did not include a SHA256 digest.]
[Versions before 0.2.0.1-alpha don't recognize this field at all.]