mirrors/arti.git/crates/tor-llcrypto/src/pk, branch arti-v1.1.0 mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.1.0 2022-11-28T13:01:10Z llcrypto: Make key id types Redactable. 2022-11-28T13:01:10Z Nick Mathewson nickm@torproject.org 2022-11-21T19:25:30Z urn:sha1:8d36fa9996a2ca76e18513003ea77eea6146114a Fix a bunch of "needless borrow" warnings on nightly 2022-11-18T15:12:05Z Nick Mathewson nickm@torproject.org 2022-11-18T15:12:05Z urn:sha1:d51162e55b19036528b4fafc1d4b15c8d9d23a04 It looks like, despite a few false starts, they've got this warning right; there weren't any false positives. Upgrade rsa to 0.7. Closes #613. 2022-11-10T16:04:20Z Nick Mathewson nickm@torproject.org 2022-10-28T17:38:42Z urn:sha1:e19ff0ec2129c5bd19deb5cbf61b52c0648e6553 Add a new constant-time is_zero() check for RsaIdentity 2022-09-20T13:13:31Z Nick Mathewson nickm@torproject.org 2022-09-20T13:13:31Z urn:sha1:657914f7787a0ac5bdaad8c15d41a91425e1c8cf There are some places in the protocol where we have an all-zero RSA identity that does not truly represent a key, but rather represents an absent or unknown key. For these, it's better to use `RsaIdentity::is_zero` instead of manually checking for a set of zero bytes: it expresses the intent better, and ensures that the operation is constant-time. I am deliberately not introducing a more general IsZero trait here, or implementing is_zero for anything else: This is the only one we seem to need right now. We can generalize it later if we have to. Merge branch 'main' into 'linkspec_refactor_v3' 2022-08-10T14:48:57Z Nick Mathewson nickm@torproject.org 2022-08-10T14:48:57Z urn:sha1:36a28a8587bbef44daa735c52a0207434989f11b # Conflicts: # crates/tor-netdir/semver.md Define a constant for ED25519 identity length. 2022-08-10T14:39:36Z Nick Mathewson nickm@torproject.org 2022-08-03T21:31:39Z urn:sha1:62850a24c970382d008346a23511008cf8ad5383 Stop deriving Zeroize for RsaIdentity. 2022-08-01T16:27:53Z Nick Mathewson nickm@torproject.org 2022-08-01T16:23:59Z urn:sha1:dd0a83925c7cfb944155be57327f73891cb2f52a These are not secret. Merge branch 'generate_cert' into 'main' 2022-07-08T13:25:29Z Nick Mathewson nickm@torproject.org 2022-07-08T13:25:29Z urn:sha1:033a05a9afd7a3408d117fb651a79cf5efab8b6b Implement functionality to construct signed Ed25519 certs. Closes #511 See merge request tpo/core/arti!611 tor-llcrypto: expose the Signer API from ed25519-dalek 2022-07-06T15:11:04Z Nick Mathewson nickm@torproject.org 2022-06-29T15:46:39Z urn:sha1:56fefd7adf1fb66b645daebf15efbbe32e063364 Update `rsa` dependency (and use `x25519-dalek` prerelease) 2022-07-06T13:57:45Z eta tor@eta.st 2022-07-05T10:57:10Z urn:sha1:c2e2da5dc35b2e0aa4cc17865ec4d14c725558c7 - arti#448 and arti!607 highlight an issue with upgrading `rsa`: namely, the `x25519-dalek` version previously used has a hard dependency on `zeroize` 1.3, which creates a dependency conflict. - However, `x25519-dalek` version `2.0.0-pre.1` relaxes this dependency. Reviewing the changelogs, it doesn't look like that version is substantially different from the current one at all, so it should be safe to use despite the "prerelease" tag. - The new `x25519-dalek` version also bumps `rand_core`, which means we don't have to use the RNG compat wrapper in `tor-llcrypto` as much. closes arti#448