mirrors/arti.git/crates/tor-llcrypto/src/pk/ed25519.rs, branch arti-v1.1.13

Resolve an unfinished sentence

2023-11-29T20:24:00Z

grammar fix in comment

2023-11-29T20:22:19Z

llcrypto: remove a comment suggesting a grand renaming.

2023-11-29T17:47:16Z

llcrypto: Hide the members of ExpandedKeypair.

2023-11-29T17:10:18Z

With this change, we no longer expose the ExpandedSecretKey unescorted, which makes it harder to misuse the API.

llcrypto: Remove ExpandedSecretKey export.

2023-11-29T16:11:39Z

This type was part of `hazmat`, and was no longer necessary anywhere in our codebase. (It had one remaining user, which was easy enough to remove.) By removing it, we remove the opportunity for using an unescorted ed25519 private key.

Convert to the latest versions of dalek-cryptography

2023-11-29T15:34:58Z

The main changes that we have to adjust for are as follows: * In x25519-dalek: * `StaticSecret` is now behind a feature. * `StaticSecret::new` is deprecated in favor of `StaticSecret::random_from_rng`. * StaticSecret no longer does its own clamping. * In ed25519-dalek: * `SecretKey` has (in effect) been renamed to `SigningKey`. The name `SecretKey` is now an alias for `[u8; 32]`. * `SigningKey` is effectively a keypair, since it contains a public key as well. * `PublicKey` has been renamed to `VerifyingKey`. * The functions to extract a signing key and verifying key have been renamed as you might expect. * `ExpandedSecretKey` has been moved to `hasmat` and no longer implements `sign`. * `ExpanededSecretKey` now has as its elements a scalar and a hash prefix. * Various functions that took `&[u8]` now take `&[u8; N]`. * We no longer need a wrapper for older versions of rand. There is a single test in tor-keymgr that does not pass. I've marked it as ignore for now, in hopes that @gabi-250 can help me figure it out. This closes #808. There are several changes I want to make before we merge, however. They are marked with TODO DALEK.

tor-llcrypto: remove use of arrayref

2023-06-01T14:50:25Z

llcrypto: Add an `ed25519::ExpandedKeypair` type.

2023-05-18T14:56:43Z

This is like an `ed25519::Keypair`, except that instead of a `SecretKey` it contains an `ExpandedSecretKey`. We'll be using this to implement #798, where we impose a rule that there must be no "unescorted" ed25519 secret keys.

Use the type system to enforce use of blinded keys.

2023-03-27T10:45:51Z

Hidden services use blinded singing keys derived from the identity key to sign descriptor signing keys. Before this patch, the hidden descriptor builder represented its blinded signing keys (`blinded_id`) as plain `ed25519::Keypair`s. This was not ideal, as there was nothing preventing the caller from accidentally initializing `blinded_id` with an unblinded keypair. This introduces a new `HsBlindKeypair` type to represent blinded keypairs. Signed-off-by: Gabriela Moldovan

Expose a little new functionality from tor-llcrypto.

2023-02-28T16:23:44Z

Expose ED25519 signature length; make ValidatableEd25519Signature implement Debug and Clone.