mirrors/arti.git/crates/tor-cell/src, branch arti-v2.4.0

Upgrade rand crates to 0.10.

2026-05-12T20:55:43Z

When the circ-padding feature is enabled, we use maybenot, which does not yet support rand 0.10. In the meantime, enabling this feature pulls in rand 0.9. This is not ideal, but should be okay as a temporary situation. This also replaces the use of ReseedingRng (which was removed in 0.10) with the reseeding_rng crate. This is somewhat less performant, but it should be okay.

cell: Add Authenticate::BODY_LEN as a public const

2026-03-30T15:00:18Z

We use this constant value when building the AUTHENTICATE cell to optimize the memory allocation as this won't ever change. Signed-off-by: David Goulet

cell: Derive PartialEq for Begin and BeginFlags

2026-03-25T11:23:27Z

Merge branch 'build_certs_refactor' into 'main'

2026-03-23T14:33:56Z

cell, proto, cert: Simplify CERTS cell building. See merge request tpo/core/arti!3795

cell: Feature-gate API using the possibly absent EncodedCert type.

2026-03-23T12:08:59Z

proto: Check the AUTHENTICATE auth type that we support it

2026-03-19T20:31:09Z

As a responder, we should check the AUTHENTICATE auth type and make sure we support it. We were not doing that, we were simply putting in our max version. Signed-off-by: David Goulet

cell: Use Error::MissingData if Authenticate fields length is wrong

2026-03-19T20:31:09Z

Proper error to use and better code to use checked_sub(). Signed-off-by: David Goulet

cell: Simplify the Authenticate API

2026-03-19T20:31:09Z

Remove the is_equal_no_sig() and instead add a getter that returns a reference to the body without the random part so it can be used to verify the signature. The caller now checks the equality with what it is expected. Signed-off-by: David Goulet

proto: Fix AUTHENTICATE equality check and signature check

2026-03-19T20:31:09Z

This fixes two things. 1. The "is_equal_no_sig()", if true, was going into the error path. 2. The signature verification is done against the body of the AUTHENTICATE cell that is all fields except the signature. Next commit will change the is_equal_no_sig() to make more sense with the "body" semantic. Signed-off-by: David Goulet

proto: Responder channel properly validates the AUTHENTICATE cell

2026-03-19T20:31:09Z

It is now validated against the received KP_link_ed of the initiator peer and we compare only the section of the AUTHENTICATE cell that we can compare (minus random bytes and sig). Signed-off-by: David Goulet