mirrors/arti.git/crates/tor-llcrypto/src/rng.rs, branch arti-v1.4.3 mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.4.3 2025-03-24T19:11:48Z llcrypto: Document some design choices from CautiousRng. 2025-03-24T19:11:48Z Nick Mathewson nickm@torproject.org 2025-03-24T16:39:41Z urn:sha1:d3ba62b6e9bfa9d138042a062838c65d7fa3ab0f Use an EntropicRng trait to enforce key generation rules. 2025-03-24T19:11:48Z Nick Mathewson nickm@torproject.org 2025-03-20T15:09:08Z urn:sha1:8a33afe155e9bd29d9302b4b44dd5843d00866db We want to require that whenever we generate a key that's persistent (stored in KeyMgr), it's going to be made from a stronger-than-usual Rng. This trait helps us enforce that. We also add a FakeEntropicRng struct to use for testing. Note that this turned up a case that we'd missed, which required an internal change in tor-hsservice. llcrypto: new CautiousRng for constructing long-lived keys 2025-03-24T19:10:21Z Nick Mathewson nickm@torproject.org 2025-03-20T14:26:56Z urn:sha1:ee7c15868e916bc7dbbd26e707077c452dd5d452 This Rng combines inputs from several sources, including OsRng, to minimize the likelihood of falling to a vulnerability in any particular one.