mirrors/arti.git/crates/tor-keymgr/src/keystore.rs, branch arti-v1.2.3mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.2.32024-04-10T01:36:17Ztor-keymgr: added initial implementation for in-memory ArtiEphemeralKeystore2024-04-10T01:36:17ZRichard Pospeselrichard@torproject.org2024-04-07T21:49:10Zurn:sha1:062432ff9f4ee7838af6ed1a08a41e181369eb5aFix typos in doc comments2024-03-06T19:52:42ZTobias Stoeckmanntobias@stoeckmann.org2024-03-06T19:05:17Zurn:sha1:18db641cca83fa707b3a97fa2975f99063f08875tor-keymgr: Downgrade a TODO to a Note.2024-02-05T19:19:01ZGabriela Moldovangabi@torproject.org2024-02-05T11:48:49Zurn:sha1:c2db0d2aa3bd1dfac4ec636fff756110b0a8747a
I don't think we need to do this right now, so I am downgrading this
TODO.
Part of #1115
tor-keymgr: Remove a TODO about renaming Keystore.2024-02-05T19:18:35ZGabriela Moldovangabi@torproject.org2024-02-05T10:35:34Zurn:sha1:c3cef13d9fa335fcab96bd509435a5debc392e34
I think the current naming is fine.
Part of #1115
tor-keymgr: Turn some TODOs into #1115.2024-01-10T19:23:36ZGabriela Moldovangabi@torproject.org2024-01-10T15:31:16Zurn:sha1:6c607554b09b6e773e1be245a5aa999280847bd3Fix typos2024-01-08T18:19:11ZDimitris Apostoloudimitris.apostolou@icloud.com2024-01-04T18:32:22Zurn:sha1:4eb54be0657862f5d56b047c16c08dabde6a7377llcrypto: Hide the members of ExpandedKeypair.2023-11-29T17:10:18ZNick Mathewsonnickm@torproject.org2023-11-29T17:10:18Zurn:sha1:adc3209c6bef9cc03542c31c22c0f308938e1643
With this change, we no longer expose the ExpandedSecretKey
unescorted, which makes it harder to misuse the API.
Remove RngCompatExt.2023-11-29T15:55:04ZNick Mathewsonnickm@torproject.org2023-11-29T15:49:26Zurn:sha1:7fb24cb69da537ac04ab2dae80997c6d481622ef
This code was needed with the old version of dalek-cryptography,
which wasn't compatible with up-to-date versions of the `rand`
crate(s). But now that we've upgraded, we can drop this.
(We could have left it around and deprecated it, but we are already
making a breaking change to tor-llcrypto by upgrading
dalek-cryptography.)
Convert to the latest versions of dalek-cryptography2023-11-29T15:34:58ZNick Mathewsonnickm@torproject.org2023-11-21T15:58:29Zurn:sha1:98037a2c788bd901679139178d25f855324637f3
The main changes that we have to adjust for are as follows:
* In x25519-dalek:
* `StaticSecret` is now behind a feature.
* `StaticSecret::new` is deprecated in favor of
`StaticSecret::random_from_rng`.
* StaticSecret no longer does its own clamping.
* In ed25519-dalek:
* `SecretKey` has (in effect) been renamed to `SigningKey`. The name
`SecretKey` is now an alias for `[u8; 32]`.
* `SigningKey` is effectively a keypair, since it contains a
public key as well.
* `PublicKey` has been renamed to `VerifyingKey`.
* The functions to extract a signing key and verifying key have
been renamed as you might expect.
* `ExpandedSecretKey` has been moved to `hasmat` and no longer
implements `sign`.
* `ExpanededSecretKey` now has as its elements a scalar and a hash
prefix.
* Various functions that took `&[u8]` now take `&[u8; N]`.
* We no longer need a wrapper for older versions of rand.
There is a single test in tor-keymgr that does not pass. I've
marked it as ignore for now, in hopes that @gabi-250 can help me
figure it out.
This closes #808. There are several changes I want to make before
we merge, however. They are marked with TODO DALEK.
tor-keymgr: impl ToEncodableKey for IPT keys2023-11-23T17:29:51ZIan Jacksonijackson@chiark.greenend.org.uk2023-11-23T14:54:40Zurn:sha1:8c2f4ee5270b4e0fc2664e40993e8a9813e8efce