From 01122c5bd7d2f0fbb45991dcdddede30a358130f Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Thu, 17 Sep 2020 10:48:45 -0400 Subject: Clarify ed25519 signatures on routerdescs. --- dir-spec.txt | 11 ++++++----- 1 file changed, 6 insertions(+), 5 deletions(-) (limited to 'dir-spec.txt') diff --git a/dir-spec.txt b/dir-spec.txt index 2314974..74493ad 100644 --- a/dir-spec.txt +++ b/dir-spec.txt @@ -627,12 +627,13 @@ It MUST be the next-to-last element in the descriptor, appearing immediately before the RSA signature. It MUST contain an Ed25519 - signature of a SHA256 digest of the entire document, from the - first character up to and including the first space after the - "router-sig-ed25519" string, prefixed with the string "Tor - router descriptor signature v1". Its format is: + signature of a SHA256 digest of the entire document. This digest is + taken from the first character up to and including the first space + after the "router-sig-ed25519" string. Before computing the digest, + the string "Tor router descriptor signature v1" is prefixed to the + document. - The signature is encoded in Base64 with terminating =s removed. + The signature is encoded in Base64, with terminating =s removed. The signing key in the identity-ed25519 certificate MUST be the one used to sign the document. -- cgit v1.2.3-54-g00ecf