mirrors/arti.git/crates/tor-cert/src, branch tor-llcrypto-v0.4.4

Use the type system to enforce use of blinded keys.

2023-03-27T10:45:51Z

Hidden services use blinded singing keys derived from the identity key to sign descriptor signing keys. Before this patch, the hidden descriptor builder represented its blinded signing keys (`blinded_id`) as plain `ed25519::Keypair`s. This was not ideal, as there was nothing preventing the caller from accidentally initializing `blinded_id` with an unblinded keypair. This introduces a new `HsBlindKeypair` type to represent blinded keypairs. Signed-off-by: Gabriela Moldovan

Merge branch 'ticket_525_part2' into 'main'

2023-02-09T18:06:39Z

Apply restricted_msg to ChanMsg parts of tor-proto See merge request tpo/core/arti!1013

Change tor_bytes::Error::BadMessage to a Cow.

2023-02-09T15:20:31Z

Actually, to avoid making a breaking change, I'm deprecating BadMessage and creating a new InvalidMessage variant that takes a Cow. This way I don't need to track every crate that re-exposes tor_bytes::Error and call this a breaking change in those. Making this change will allow tor_bytes errors to be much more helpful.

Rename key identifiers that have changed in the spec

2023-02-08T16:57:51Z

Generated with perl: s/K([PS])_hs_intro_tid/K$1_hs_ipt_sid/g; s/K([PS])_onion_ntor/K$1_ntor/g; s/K([PS])_hs_intro_ntor/K$1_hss_ntor/g; s/K([PS])_hs_desc_ephem/K$1_hss_desc_enc/g;

tor-cert: document hs-related certificate types.

2023-02-07T14:00:19Z

Also, explain why a few of these certificates aren't actually useful as certificates. (This issue is also documented in torspec!110)

tor-cert: Implement Timebound for Ed25519Cert

2023-02-07T14:00:19Z

This allows us to run `is_valid_at` and friends on the certificate itself, which we will use soon in hsdesc validity checks.

Allow clippy::unchecked_duration_subtraction in tests

2023-01-27T13:28:02Z

This panics on error, and we're fine with a panic on misbehavior in tests.

Disable clippy::unlinlined-format-args

2023-01-27T13:27:47Z

This warning kind of snuck up on us! (See #748) For now, let's disable it. (I've cleaned it up in a couple of examples, since those are meant to be more idiomatic and user-facing.) Closes #748.

tor-cert: add a few hs TODOs

2023-01-06T18:03:50Z

test lint blocks: Add many many automatically

2022-12-12T18:00:30Z

This is precisely the result of running the rune in maint/adhoc-add-lint-blocks.