mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v1.2.7 2024-03-13T16:30:53Z 2024-03-13T16:30:53Z Nick Mathewson nickm@torproject.org 2024-03-13T16:30:53Z urn:sha1:c0c9bd15d42897825dd0ab3d3b8dd1c17bd6320c 2024-01-11T19:25:46Z Gabriela Moldovan gabi@torproject.org 2024-01-11T19:23:17Z urn:sha1:14f9cbc1f2a39f236672f5e8f71674317b153bad 2023-12-14T18:00:17Z Gabriela Moldovan gabi@torproject.org 2023-12-14T17:14:17Z urn:sha1:f12dd6bb65900a5bbb3540eb85b67a2c6faea949 Closes #1019 2023-11-29T17:10:18Z Nick Mathewson nickm@torproject.org 2023-11-29T17:10:18Z urn:sha1:adc3209c6bef9cc03542c31c22c0f308938e1643 With this change, we no longer expose the ExpandedSecretKey unescorted, which makes it harder to misuse the API. 2023-11-29T16:17:17Z Nick Mathewson nickm@torproject.org 2023-11-29T16:17:17Z urn:sha1:af75131bcfca2c89d200fa13704be1f49a9fd94d (These types were all already re-exported from pk::ed25519.) 2023-11-29T15:55:04Z Nick Mathewson nickm@torproject.org 2023-11-29T15:49:26Z urn:sha1:7fb24cb69da537ac04ab2dae80997c6d481622ef This code was needed with the old version of dalek-cryptography, which wasn't compatible with up-to-date versions of the `rand` crate(s). But now that we've upgraded, we can drop this. (We could have left it around and deprecated it, but we are already making a breaking change to tor-llcrypto by upgrading dalek-cryptography.) 2023-11-29T15:34:58Z Nick Mathewson nickm@torproject.org 2023-11-21T15:58:29Z urn:sha1:98037a2c788bd901679139178d25f855324637f3 The main changes that we have to adjust for are as follows: * In x25519-dalek: * `StaticSecret` is now behind a feature. * `StaticSecret::new` is deprecated in favor of `StaticSecret::random_from_rng`. * StaticSecret no longer does its own clamping. * In ed25519-dalek: * `SecretKey` has (in effect) been renamed to `SigningKey`. The name `SecretKey` is now an alias for `[u8; 32]`. * `SigningKey` is effectively a keypair, since it contains a public key as well. * `PublicKey` has been renamed to `VerifyingKey`. * The functions to extract a signing key and verifying key have been renamed as you might expect. * `ExpandedSecretKey` has been moved to `hasmat` and no longer implements `sign`. * `ExpanededSecretKey` now has as its elements a scalar and a hash prefix. * Various functions that took `&[u8]` now take `&[u8; N]`. * We no longer need a wrapper for older versions of rand. There is a single test in tor-keymgr that does not pass. I've marked it as ignore for now, in hopes that @gabi-250 can help me figure it out. This closes #808. There are several changes I want to make before we merge, however. They are marked with TODO DALEK. 2023-10-30T14:18:02Z Gabriela Moldovan gabi@torproject.org 2023-10-30T13:56:58Z urn:sha1:28a0b24db240cc24230c80732c5f4ba3a0b0d461 Representing the supported HTYPEs as `HandshakeType`s instead of `u32`s makes it more difficult to pass in wrong/invalid values to `HsDescBuilder::create2_formats`. This also fixes a descriptor publisher bug spotted by @jnewsome, where the advertised CREATE2 HTYPEs included HTYPE `1`, which is actually supposed to be a reserved value. The publisher now only advertises the `NTOR` HTYPE (just like C Tor). 2023-10-25T15:32:36Z Gabriela Moldovan gabi@torproject.org 2023-10-25T14:54:49Z urn:sha1:36f8b29ffd4e6291168cf4b34132d83249e076a4 2023-10-25T15:32:36Z Gabriela Moldovan gabi@torproject.org 2023-10-25T14:30:43Z urn:sha1:aad987a47aa9584ce2ba6a16ab06710103737dc3 `Bug` wasn't necessarily the right error type here. Plus, with the new error type adding new errors (i.e. `CertEncodeError` variants), is not a breaking change.