[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-bugs] #8961 [Tor]: src/or/replaycache.c hashes entries with SHA-1
#8961: src/or/replaycache.c hashes entries with SHA-1
--------------------------+------------------------------
Reporter: rransom | Owner:
Type: enhancement | Status: needs_review
Priority: Medium | Milestone: Tor: 0.2.???
Component: Tor | Version:
Severity: Normal | Resolution:
Keywords: tor-hs, easy | Actual Points:
Parent ID: | Points: small
Sponsor: |
--------------------------+------------------------------
Changes (by gtank):
* status: new => needs_review
* severity: => Normal
Comment:
Tried writing this in two ways; one less invasive and the other more so.
The small one (https://github.com/gtank/tor/tree/8961-small) just calls
openssl SHA512. The big one (https://github.com/gtank/tor/tree/8961-big)
adds SHA512 support throughout src/common/crypto.c.
Neither prepends random bytes- I'm unclear if the attacks discussed in
#4900 apply to cryptographic hashes. If they do, either of these could be
easily modified to take advantage of the existing siphash key.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8961#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs