mirrors/arti.git/crates/tor-cell/src/chancell, branch arti-v2.4.0

cell: Add Authenticate::BODY_LEN as a public const

2026-03-30T15:00:18Z

We use this constant value when building the AUTHENTICATE cell to optimize the memory allocation as this won't ever change. Signed-off-by: David Goulet

Merge branch 'build_certs_refactor' into 'main'

2026-03-23T14:33:56Z

cell, proto, cert: Simplify CERTS cell building. See merge request tpo/core/arti!3795

cell: Feature-gate API using the possibly absent EncodedCert type.

2026-03-23T12:08:59Z

proto: Check the AUTHENTICATE auth type that we support it

2026-03-19T20:31:09Z

As a responder, we should check the AUTHENTICATE auth type and make sure we support it. We were not doing that, we were simply putting in our max version. Signed-off-by: David Goulet

cell: Use Error::MissingData if Authenticate fields length is wrong

2026-03-19T20:31:09Z

Proper error to use and better code to use checked_sub(). Signed-off-by: David Goulet

cell: Simplify the Authenticate API

2026-03-19T20:31:09Z

Remove the is_equal_no_sig() and instead add a getter that returns a reference to the body without the random part so it can be used to verify the signature. The caller now checks the equality with what it is expected. Signed-off-by: David Goulet

proto: Fix AUTHENTICATE equality check and signature check

2026-03-19T20:31:09Z

This fixes two things. 1. The "is_equal_no_sig()", if true, was going into the error path. 2. The signature verification is done against the body of the AUTHENTICATE cell that is all fields except the signature. Next commit will change the is_equal_no_sig() to make more sense with the "body" semantic. Signed-off-by: David Goulet

proto: Responder channel properly validates the AUTHENTICATE cell

2026-03-19T20:31:09Z

It is now validated against the received KP_link_ed of the initiator peer and we compare only the section of the AUTHENTICATE cell that we can compare (minus random bytes and sig). Signed-off-by: David Goulet

cell, proto, cert: Simplify CERTS cell building.

2026-03-19T15:43:38Z

Formerly we required the caller for push_cert_body to specify the type of the cert that they were pushing. But in nearly every case, the certificate object that the caller is holding knows what its own type is! This makes the tor_proto build_certs_cell function a bit less error-prone, since we don't have to worry about mismatch.

proto: Implement a Canonicity struct

2026-02-12T16:11:07Z

This struct will be put in a Channel and derived from the received NETINFO cell. This follows the C-tor implementation for which we have two indicator of canonicity: 1. Peer is canonical: the address they advertise in the NETINFO cell matches the one we see on the TCP connection. 2. Canonical to peer: the peer sees us as canonical. Those flag will get used to select "the best" channel. Signed-off-by: David Goulet