From 7ad026a2d6cec0e8ae7f9b663dcc218f684c52fd Mon Sep 17 00:00:00 2001 From: Nick Mathewson Date: Wed, 10 Aug 2016 14:23:46 -0400 Subject: prop220: Add a siglen field to RSA cross-certificates We need this because RSA signatures aren't fixed-length. Closes part of #19020 --- proposals/220-ecc-id-keys.txt | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) (limited to 'proposals/220-ecc-id-keys.txt') diff --git a/proposals/220-ecc-id-keys.txt b/proposals/220-ecc-id-keys.txt index c41aa23..7a21f20 100644 --- a/proposals/220-ecc-id-keys.txt +++ b/proposals/220-ecc-id-keys.txt @@ -462,7 +462,8 @@ Status: Accepted with RSA key) contains the following data: ED25519_KEY [32 bytes] EXPIRATION_DATE [4 bytes] - SIGNATURE [128 bytes] + SIGLEN [1 byte] + SIGNATURE [SIGLEN bytes] Here, the Ed25519 identity key is signed with router's RSA identity key, to indicate that authenticating with a key certified by the Ed25519 key counts as certifying with RSA -- cgit v1.2.3-54-g00ecf