[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-bugs] #8961 [Tor]: src/or/replaycache.c hashes entries with SHA-1
#8961: src/or/replaycache.c hashes entries with SHA-1
---------------------+------------------------------------------------------
Reporter: rransom | Owner:
Type: defect | Status: new
Priority: minor | Milestone:
Component: Tor | Version:
Keywords: | Parent:
Points: | Actualpoints:
---------------------+------------------------------------------------------
Tor is supposed to be moving away from SHA-1, and the replay-detection
cache can be migrated ''and'' protected against hash flooding at the same
time (see also #4900) without a protocol change. Just add and use a
`crypto_digest_local` function which prepends a random bytestring (either
16 bytes or a full hash block), then applies either SHA-256 (if Tor was
compiled for a 32-bit architecture) or SHA-512 (if Tor was compiled for a
64-bit architecture), then returns the first 160 bits.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8961>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs