<feed xmlns='http://www.w3.org/2005/Atom'>
<title>mirrors/arti.git/crates/arti-rpcserver/src/connection/auth/cookie.rs, branch arti-v1.4.6</title>
<subtitle>mirror of https://gitlab.torproject.org/tpo/core/arti
</subtitle>
<id>http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.4.6</id>
<link rel='self' href='http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.4.6'/>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/'/>
<updated>2025-03-18T16:09:44Z</updated>
<entry>
<title>squash! Upgrade rand dependency to 0.9.</title>
<updated>2025-03-18T16:09:44Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2025-03-18T13:01:31Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=2f8993c22c2b86010e4fd8b5169ef0ab83f8c754'/>
<id>urn:sha1:2f8993c22c2b86010e4fd8b5169ef0ab83f8c754</id>
<content type='text'>
- `rand::thread_rng()` has been deprecated and renamed to `rand::rng()`
</content>
</entry>
<entry>
<title>rpc: More documentation on cookie_continue.</title>
<updated>2025-01-15T20:13:39Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2025-01-15T20:13:39Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=d6acbeadba6ffcff6fde00fc488abf5a8c652e24'/>
<id>urn:sha1:d6acbeadba6ffcff6fde00fc488abf5a8c652e24</id>
<content type='text'>
</content>
</entry>
<entry>
<title>rpc: Clarify auth-repetition rules.</title>
<updated>2025-01-15T14:18:44Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2025-01-15T14:09:31Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=bdbddedea0a5b8158e57e41ce141bc4424186f89'/>
<id>urn:sha1:bdbddedea0a5b8158e57e41ce141bc4424186f89</id>
<content type='text'>
</content>
</entry>
<entry>
<title>rpc: Document cookie messages a little more.</title>
<updated>2025-01-15T14:18:44Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2025-01-15T14:04:46Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=f2398569b460bf965dbaac5e7546a2125a9f5a14'/>
<id>urn:sha1:f2398569b460bf965dbaac5e7546a2125a9f5a14</id>
<content type='text'>
</content>
</entry>
<entry>
<title>rpc: Refactor Cookie and UnloadedCookie into a single type.</title>
<updated>2025-01-15T14:18:44Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2025-01-15T13:39:23Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=6e0f70d08f437bd593f5e564594dd8a44036c72c'/>
<id>urn:sha1:6e0f70d08f437bd593f5e564594dd8a44036c72c</id>
<content type='text'>
</content>
</entry>
<entry>
<title>rpc: Tweak cookie protocol to bind both nonces.</title>
<updated>2025-01-15T14:18:44Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2025-01-09T19:55:50Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=f3fcd71f218595402175c2530a09dabb7ed10f9d'/>
<id>urn:sha1:f3fcd71f218595402175c2530a09dabb7ed10f9d</id>
<content type='text'>
Previously participants in the cookie protocol only bound the peer
nonce in their MACs.  With this change, they bind both nonces.

This change is _probably_ not necessary for security, but it can't
hurt.  It follows a general principle that Adam Langley told me a
long time ago: you won't regret binding more, but you might regret
binding less.
</content>
</entry>
<entry>
<title>rpc: Keep Cookie in an Arc.</title>
<updated>2025-01-15T14:18:44Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2025-01-09T19:45:34Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=522b62fcc7769b9b33ae17a3692834e40a0035f4'/>
<id>urn:sha1:522b62fcc7769b9b33ae17a3692834e40a0035f4</id>
<content type='text'>
Since this is a secret value, it's probably best not to copy it
all over the place.
</content>
</entry>
<entry>
<title>arti-rpcserver: Server side of cookie auth.</title>
<updated>2025-01-15T14:18:44Z</updated>
<author>
<name>Nick Mathewson</name>
<email>nickm@torproject.org</email>
</author>
<published>2025-01-09T18:49:55Z</published>
<link rel='alternate' type='text/html' href='http://git.dilluti0n.com/mirrors/arti.git/commit/?id=a9136cf5b7e253019c5752a09b7690bf47056bf2'/>
<id>urn:sha1:a9136cf5b7e253019c5752a09b7690bf47056bf2</id>
<content type='text'>
</content>
</entry>
</feed>
