[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #7202 [Tor]: Implement ntor handshake or its successor
#7202: Implement ntor handshake or its successor
--------------------------------+-------------------------------------------
Reporter: karsten | Owner:
Type: project | Status: needs_review
Priority: normal | Milestone: Tor: 0.2.4.x-final
Component: Tor | Version:
Keywords: SponsorZ tor-relay | Parent:
Points: | Actualpoints:
--------------------------------+-------------------------------------------
Comment(by mikeperry):
I started checking that the unit tests match the ntor paper's page 16, and
I noticed what looks like a serious issue: In
onion_skin_ntor_server_handshake(), it seems you omit step 9, the
identity-element check on X.
Oh wait, hah! I just checked the client side in
onion_skin_ntor_client_handshake() and saw "XXXXX VERIFY Y IS NOT POINT AT
INFINITY". So it looks like you're aware of it. But damn, we better add a
matching comment in onion_skin_ntor_server_handshake() too. Probably also
a log message or something until we fix the XXXX. Otherwise the old 2007
DH bug could sneak back in again :(.
I have a bunch more questions and comments, but this seemed pressing
enough that it needed to be written down ASAP.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7202#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs