Re: [tor-bugs] #21509 [Core Tor/Tor]: Fuzz v3 hidden services

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#21509: Fuzz v3 hidden services
-----------------------------------+------------------------------------
 Reporter:  teor                   |          Owner:  dgoulet
     Type:  task                   |         Status:  needs_review
 Priority:  Very High              |      Milestone:  Tor: 0.3.2.x-final
Component:  Core Tor/Tor           |        Version:
 Severity:  Normal                 |     Resolution:
 Keywords:  fuzz, prop224, tor-hs  |  Actual Points:
Parent ID:                         |         Points:  2
 Reviewer:                         |        Sponsor:  SponsorR-can
-----------------------------------+------------------------------------

Comment (by dgoulet):

 Replying to [comment:12 nickm]:
 > merging to 0.3.2 and forward.
 >
 > How hard would it be to get the decrypted part fuzzed too?

 A bit more work in mocking functions because lots of crypto checks are
 done (decrypt, MAC validation, signature...)

 And we would need to expose the inners like `desc_decrypt_all()` or
 `decrypt_desc_layer()`. A bit of work but not that crazy I think.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21509#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs