[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #12404 [Tor]: #9777 breaks clients that build with disabled curve25519



#12404: #9777 breaks clients that build with disabled curve25519
------------------------+-------------------------------------
     Reporter:  arma    |      Owner:  nickm
         Type:  defect  |     Status:  assigned
     Priority:  normal  |  Milestone:  Tor: 0.2.5.x-final
    Component:  Tor     |    Version:
   Resolution:          |   Keywords:  tor-client 024-backport
Actual Points:          |  Parent ID:
       Points:          |
------------------------+-------------------------------------
Changes (by nickm):

 * owner:   => nickm
 * keywords:   => tor-client 024-backport
 * status:  new => assigned


Comment:

 Maaaybe?  I gotta say, the case made on that ticket is not exactly
 compelling.  It mixes up the use of curve25519 in ntor with the use of
 P256/P224 ECDHE in TLS -- the latter of which has nothing to do with
 curve25519.

 Still, this isn't exactly a hard fix.  Just because I don't agree with the
 one user who thinks that DH1024 is better choice than curve25519, doesn't
 mean that there isn't some other reason to try --disable-curve25519.  (And
 breaking a feature by accident is not exactly the right way to deprecate
 it.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12404#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs