mirrors/arti.git/crates/tor-proto/src/relay/channel/responder.rs, branch arti-v2.2.0

tor-proto: Port to web-time-compat

2026-03-26T19:20:16Z

Fix typos

2026-03-24T16:04:08Z

Typos found with codespell

proto: Compare AUTHENTICATE expected body in constant-time

2026-03-19T20:31:09Z

Signed-off-by: David Goulet

proto: The relay signing key signs the auth cert

2026-03-19T20:31:09Z

In other words kp_relaysign_ed. Signed-off-by: David Goulet

proto: Check the AUTHENTICATE auth type that we support it

2026-03-19T20:31:09Z

As a responder, we should check the AUTHENTICATE auth type and make sure we support it. We were not doing that, we were simply putting in our max version. Signed-off-by: David Goulet

chanmgr: Clarify the use of no identity ChanTarget

2026-03-19T20:31:09Z

Signed-off-by: David Goulet

tor-proto: fix the relay responder's CLOG/SLOG digests

2026-03-19T20:31:09Z

tor-proto: get SLOG/CLOG outside of `ChannelAuthenticationData`

2026-03-19T20:31:09Z

cell: Simplify the Authenticate API

2026-03-19T20:31:09Z

Remove the is_equal_no_sig() and instead add a getter that returns a reference to the body without the random part so it can be used to verify the signature. The caller now checks the equality with what it is expected. Signed-off-by: David Goulet

proto: Fix AUTHENTICATE equality check and signature check

2026-03-19T20:31:09Z

This fixes two things. 1. The "is_equal_no_sig()", if true, was going into the error path. 2. The signature verification is done against the body of the AUTHENTICATE cell that is all fields except the signature. Next commit will change the is_equal_no_sig() to make more sense with the "body" semantic. Signed-off-by: David Goulet