[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #2693 [Tor Relay]: Design and implement improved algorithm for choosing consensus method
#2693: Design and implement improved algorithm for choosing consensus method
-------------------------+--------------------------------------------------
Reporter: nickm | Owner:
Type: enhancement | Status: new
Priority: normal | Milestone: Tor: 0.2.3.x-final
Component: Tor Relay | Version:
Keywords: | Parent: #2664
Points: | Actualpoints:
-------------------------+--------------------------------------------------
Our current algorithm for picking a consenus method is, "Pick the highest
method supported by more than 2/3 of the authorities currently voting."
This can sometimes result in an insufficiently signed consensus. Instead,
it should be something like, "Pick the highest method supported by more
than 2/3 of the authorities currently voting, UNLESS the number of
authorities supporting that method is less than the threshold needed to
sign a valid consensus. In that case, pick the highest method supported
by enough authorities to sign a valid consensus."
Alternatively, the algorithm could be something like, "Pick the highest
method supported by enough authorities to sign a valid consensus", which I
believe is mathematically identical to the above (more obviously safe)
formulation.
This change would make some attacks harder for a hostile authority, and
some attacks easier. It needs a design proposal and some analysis.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2693>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs