mirrors/arti.git/crates/tor-llcrypto/src/pk, branch arti-v1.0.1mirror of https://gitlab.torproject.org/tpo/core/arti
http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.0.12022-09-20T13:13:31ZAdd a new constant-time is_zero() check for RsaIdentity2022-09-20T13:13:31ZNick Mathewsonnickm@torproject.org2022-09-20T13:13:31Zurn:sha1:657914f7787a0ac5bdaad8c15d41a91425e1c8cf
There are some places in the protocol where we have an all-zero RSA
identity that does not truly represent a key, but rather represents
an absent or unknown key. For these, it's better to use
`RsaIdentity::is_zero` instead of manually checking for a set of
zero bytes: it expresses the intent better, and ensures that the
operation is constant-time.
I am deliberately not introducing a more general IsZero trait here,
or implementing is_zero for anything else: This is the only one we
seem to need right now. We can generalize it later if we have to.
Merge branch 'main' into 'linkspec_refactor_v3'2022-08-10T14:48:57ZNick Mathewsonnickm@torproject.org2022-08-10T14:48:57Zurn:sha1:36a28a8587bbef44daa735c52a0207434989f11b
# Conflicts:
# crates/tor-netdir/semver.mdDefine a constant for ED25519 identity length.2022-08-10T14:39:36ZNick Mathewsonnickm@torproject.org2022-08-03T21:31:39Zurn:sha1:62850a24c970382d008346a23511008cf8ad5383Stop deriving Zeroize for RsaIdentity.2022-08-01T16:27:53ZNick Mathewsonnickm@torproject.org2022-08-01T16:23:59Zurn:sha1:dd0a83925c7cfb944155be57327f73891cb2f52a
These are not secret.
Merge branch 'generate_cert' into 'main'2022-07-08T13:25:29ZNick Mathewsonnickm@torproject.org2022-07-08T13:25:29Zurn:sha1:033a05a9afd7a3408d117fb651a79cf5efab8b6b
Implement functionality to construct signed Ed25519 certs.
Closes #511
See merge request tpo/core/arti!611tor-llcrypto: expose the Signer API from ed25519-dalek2022-07-06T15:11:04ZNick Mathewsonnickm@torproject.org2022-06-29T15:46:39Zurn:sha1:56fefd7adf1fb66b645daebf15efbbe32e063364Update `rsa` dependency (and use `x25519-dalek` prerelease)2022-07-06T13:57:45Zetator@eta.st2022-07-05T10:57:10Zurn:sha1:c2e2da5dc35b2e0aa4cc17865ec4d14c725558c7
- arti#448 and arti!607 highlight an issue with upgrading `rsa`: namely,
the `x25519-dalek` version previously used has a hard dependency on
`zeroize` 1.3, which creates a dependency conflict.
- However, `x25519-dalek` version `2.0.0-pre.1` relaxes this dependency.
Reviewing the changelogs, it doesn't look like that version is
substantially different from the current one at all, so it should be
safe to use despite the "prerelease" tag.
- The new `x25519-dalek` version also bumps `rand_core`, which means we
don't have to use the RNG compat wrapper in `tor-llcrypto` as much.
closes arti#448
Merge remote-tracking branch 'origin/mr/610'2022-07-05T13:10:10ZNick Mathewsonnickm@torproject.org2022-07-05T13:10:10Zurn:sha1:56f931e8e138ca8167db477f1514dca64fee42e0Fixed typo in convert_curve25519_to_ed25519_private comments2022-06-29T16:52:59ZRichard Pospeselrichard@torproject.org2022-06-29T16:52:59Zurn:sha1:61119d500470f876166646a0a9fdfcb7cc0e6533tor-llcrypto: style fixes on BlindingError2022-06-22T12:47:18ZNick Mathewsonnickm@torproject.org2022-06-22T12:47:18Zurn:sha1:f6d6ac7fe93b73a4914b747b106ea69885a89c39