[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #22948 [Core Tor/Tor]: Padding, Keepalive and Drop cells should have random payloads
#22948: Padding, Keepalive and Drop cells should have random payloads
--------------------------------+------------------------------------
Reporter: teor | Owner:
Type: defect | Status: new
Priority: Medium | Milestone: Tor: 0.3.1.x-final
Component: Core Tor/Tor | Version:
Severity: Normal | Resolution:
Keywords: tor-spec, security | Actual Points:
Parent ID: #18856 | Points: 0.5
Reviewer: | Sponsor:
--------------------------------+------------------------------------
Changes (by teor):
* keywords: tor-spec, security-maybe => tor-spec, security
* milestone: Tor: 0.3.2.x-final => Tor: 0.3.1.x-final
Comment:
I don't know how to classify this security issue.
https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/SecurityPolicy
Is it low severity: "A defense-in-depth mechanism provides less defense-
in-depth than it should"?
Or is it high severity: A potential denial of service attack that affects
clients and hidden services?
(I split the security policy clarification off into #22962.)
Should we fix it in 0.3.1?
Should we fill all cells with random bytes? (Split off into #22963.)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22948#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs