diff options
| author | Nick Mathewson <nickm@torproject.org> | 2014-04-07 18:17:35 -0400 |
|---|---|---|
| committer | Nick Mathewson <nickm@torproject.org> | 2014-04-18 15:52:52 -0400 |
| commit | 7901fc11a9ecc6e857bf860fecb5ed25bd073378 (patch) | |
| tree | ed4b114b436a8f4904a678c82d90b72eda89be3d /rend-spec.txt | |
| parent | 1c57e5de3b0de3eee2ee44b1ae2a0c800c2d5a76 (diff) | |
| download | torspec-7901fc11a9ecc6e857bf860fecb5ed25bd073378.tar.gz torspec-7901fc11a9ecc6e857bf860fecb5ed25bd073378.zip | |
Clarify KH behavior in rend-spec.txt
Diffstat (limited to 'rend-spec.txt')
| -rw-r--r-- | rend-spec.txt | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/rend-spec.txt b/rend-spec.txt index d030b8e..b070a18 100644 --- a/rend-spec.txt +++ b/rend-spec.txt @@ -736,6 +736,10 @@ and generate KH, Df, Db, Kf, and Kb as in the KDF-TOR key derivation approach documented in tor-spec.txt. + As in the TAP handshake, if the KH value derived from KDF-Tor does not + match the value in the RENDEZVOUS2 cell, the client must close the + circuit. + Subsequently, the rendezvous point passes relay cells, unchanged, from each of the two circuits to the other. When Alice's OP sends RELAY cells along the circuit, it authenticates with Df, and encrypts them with the |