mirrors/arti.git/crates/tor-cell/src, branch arti-v2.2.0

cell: Derive PartialEq for Begin and BeginFlags

2026-03-25T11:23:27Z

Merge branch 'build_certs_refactor' into 'main'

2026-03-23T14:33:56Z

cell, proto, cert: Simplify CERTS cell building. See merge request tpo/core/arti!3795

cell: Feature-gate API using the possibly absent EncodedCert type.

2026-03-23T12:08:59Z

proto: Check the AUTHENTICATE auth type that we support it

2026-03-19T20:31:09Z

As a responder, we should check the AUTHENTICATE auth type and make sure we support it. We were not doing that, we were simply putting in our max version. Signed-off-by: David Goulet

cell: Use Error::MissingData if Authenticate fields length is wrong

2026-03-19T20:31:09Z

Proper error to use and better code to use checked_sub(). Signed-off-by: David Goulet

cell: Simplify the Authenticate API

2026-03-19T20:31:09Z

Remove the is_equal_no_sig() and instead add a getter that returns a reference to the body without the random part so it can be used to verify the signature. The caller now checks the equality with what it is expected. Signed-off-by: David Goulet

proto: Fix AUTHENTICATE equality check and signature check

2026-03-19T20:31:09Z

This fixes two things. 1. The "is_equal_no_sig()", if true, was going into the error path. 2. The signature verification is done against the body of the AUTHENTICATE cell that is all fields except the signature. Next commit will change the is_equal_no_sig() to make more sense with the "body" semantic. Signed-off-by: David Goulet

proto: Responder channel properly validates the AUTHENTICATE cell

2026-03-19T20:31:09Z

It is now validated against the received KP_link_ed of the initiator peer and we compare only the section of the AUTHENTICATE cell that we can compare (minus random bytes and sig). Signed-off-by: David Goulet

cell, proto, cert: Simplify CERTS cell building.

2026-03-19T15:43:38Z

Formerly we required the caller for push_cert_body to specify the type of the cert that they were pushing. But in nearly every case, the certificate object that the caller is holding knows what its own type is! This makes the tor_proto build_certs_cell function a bit less error-prone, since we don't have to worry about mismatch.

tor-cell: rename `RestrictedMsg::restricted_cmds()` to `cmds_for_logging()`

2026-03-04T16:41:47Z