mirrors/arti.git/crates/tor-cert, branch tor-llcrypto-v0.4.4

Bump patchlevel on crates with non-breaking changes

2023-03-31T12:24:39Z

For these crates, the changes are nontrivial, so we _do_ bump the versions on which their dependent crates depend. Fortunately, since they are all pre-1.0, we don't need to distinguish semver-additions from other changes. (Except for arti, which _is_ post-1.0, but gets a patchlevel bump anyway.) These are unstable crates with breaking changes: ``` tor-hscrypto tor-hsclient ``` These have new or extended APIs: ``` safelog tor-bytes tor-cell tor-linkspec tor-llcrypto tor-proto tor-cert arti-client ``` These have new unstable APIs or features: ``` tor-netdoc tor-circmgr (also broke some unstable APIs) arti (is post-1.0) ``` These have bugfixes only: ``` caret tor-dirmgr ```

Use the type system to enforce use of blinded keys.

2023-03-27T10:45:51Z

Hidden services use blinded singing keys derived from the identity key to sign descriptor signing keys. Before this patch, the hidden descriptor builder represented its blinded signing keys (`blinded_id`) as plain `ed25519::Keypair`s. This was not ideal, as there was nothing preventing the caller from accidentally initializing `blinded_id` with an unblinded keypair. This introduces a new `HsBlindKeypair` type to represent blinded keypairs. Signed-off-by: Gabriela Moldovan

Remove semver.md files now that 1.1.2 is out.

2023-02-28T15:06:41Z

Patchlevel bumps for remaining changed crates.

2023-02-28T12:13:27Z

These crates have had small code changes, but no API additions: tor-config tor-socksproto tor-cert tor-chanmgr tor-ptmgr tor-guardmgr tor-circmgr tor-dirclient tor-dirmgr arti tor-hsservice tor-congestion These crates have had API extensions: fs-mistrust tor-llcrypto tor-bytes tor-checkable tor-linkspec tor-netdoc tor-persist arti-client

Merge branch 'ticket_525_part2' into 'main'

2023-02-09T18:06:39Z

Apply restricted_msg to ChanMsg parts of tor-proto See merge request tpo/core/arti!1013

Change tor_bytes::Error::BadMessage to a Cow.

2023-02-09T15:20:31Z

Actually, to avoid making a breaking change, I'm deprecating BadMessage and creating a new InvalidMessage variant that takes a Cow. This way I don't need to track every crate that re-exposes tor_bytes::Error and call this a breaking change in those. Making this change will allow tor_bytes errors to be much more helpful.

Rename key identifiers that have changed in the spec

2023-02-08T16:57:51Z

Generated with perl: s/K([PS])_hs_intro_tid/K$1_hs_ipt_sid/g; s/K([PS])_onion_ntor/K$1_ntor/g; s/K([PS])_hs_intro_ntor/K$1_hss_ntor/g; s/K([PS])_hs_desc_ephem/K$1_hss_desc_enc/g;

tor-cert: document hs-related certificate types.

2023-02-07T14:00:19Z

Also, explain why a few of these certificates aren't actually useful as certificates. (This issue is also documented in torspec!110)

tor-cert: Implement Timebound for Ed25519Cert

2023-02-07T14:00:19Z

This allows us to run `is_valid_at` and friends on the certificate itself, which we will use soon in hsdesc validity checks.

Bump the patch version of every crate that had API additions

2023-02-01T15:36:29Z

These crates had API or behavior changes that may affect downstream crates. Fortunately, they're all version 0.x, and don't need minor bumps for this.