mirrors/arti.git/crates/tor-llcrypto/src/pk, branch arti-v1.1.4

tor-llcrypto: key blinding: Use consistent terminology

2023-03-28T11:47:12Z

Unhelpfully, the spec uses the variable name `h` and the phrase "blinding factor" for both the unclamped and clamped value. The clamped value is internal to the algorithm. In our code: * Don't ever use the word "parameter" or variable name `param`. This doesn't appear in the spec anywhere. * Use `h` for the unclamped blinding factor, and `blinding_factor` for the clamped blinding factor. * Rename `blinding_factor` function to `clamp_blinding_factor`, since in the spec's terminology it takes an (unclamped) "blinding factor" and returns a (clamped) "blinding factor". * State explicitly what thing in the spec the `h` parameters are.

Use the type system to enforce use of blinded keys.

2023-03-27T10:45:51Z

Hidden services use blinded singing keys derived from the identity key to sign descriptor signing keys. Before this patch, the hidden descriptor builder represented its blinded signing keys (`blinded_id`) as plain `ed25519::Keypair`s. This was not ideal, as there was nothing preventing the caller from accidentally initializing `blinded_id` with an unblinded keypair. This introduces a new `HsBlindKeypair` type to represent blinded keypairs. Signed-off-by: Gabriela Moldovan

Expose a little new functionality from tor-llcrypto.

2023-02-28T16:23:44Z

Expose ED25519 signature length; make ValidatableEd25519Signature implement Debug and Clone.

llcrypto: Implement `Into<[u8;32]>` for Ed25519Identity

2023-02-07T14:00:19Z

tor-llcrypto: Tolerate some warnings (fmt)

2023-01-20T17:29:45Z

tor-llcrypto: Tolerate some warnings

2023-01-20T16:37:31Z

Without this, cargo +stable clippy -p tor-netdoc --all-features produces warnings.

Upgrade to latest rsa crate.

2023-01-20T13:06:30Z

Complete our migration to base64ct.

2023-01-20T13:06:30Z

This is in lieu of upgrading to the latest base64 crate, which has a different API from the old one. Since we have to migrate either way, we might as well use base64ct everywhere. I don't think that most of these cases _require_ constant-time base64, but it won't hurt.

Merge branch 'blind_privkey' into 'main'

2023-01-09T18:06:00Z

llcrypto: Implement secret-key blinding. Closes #719 See merge request tpo/core/arti!964

llcrypto: fix a comment.

2023-01-06T18:03:50Z

This described the wrong type of key.