aboutsummaryrefslogtreecommitdiff
path: root/spec/vanguards-spec/vanguards-lite.md
blob: 877a5adbd9b87dc7f2ab1a5c917999786b9aa7a7 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
# Vanguards-Lite

Vanguards-Lite is meant for short-lived onion services such as OnionShare, as
well as for onion client activity.

It is designed for clients and services that expect to have an uptime of no
longer than 1 month.

## Design

Because it is for short-lived activity, its rotation times are chosen with the
Sybil adversary in mind, using the [max(X,X) skewed
distribution](./vanguards-stats.md#MaxDist).

We let NUM_LAYER2_GUARDS=4. We also introduce a consensus parameter
`guard-hs-l2-number` that controls the number of layer2 guards (with a
maximum of 19 layer2 guards).

No third layer of guards is used.

We don't write guards on disk. This means that the guard topology resets
when tor restarts.

## Rotation Period

The Layer2 lifetime uses the max(x,x) distribution with a minimum of one day
and maximum of 22 days. This makes the average lifetime of approximately two
weeks. Significant extensions of this lifetime are not recommended, as they
will shift the balance in favor of coercive attacks.

From the [Sybil Rotation Table](./vanguards-stats.md#SybilTable),
with NUM_LAYER2_GUARDS=4 it can be seen that this means that the Sybil attack
on Layer2 will complete with 50% chance in 18\*14 days (252 days) for the 1%
adversary, 4\*14 days (two months) for the 5% adversary, and 2\*14 days (one
month) for the 10% adversary.