mirrors/arti.git/crates/tor-relay-crypto/src, branch arti-v2.5.0

maint: Run maint/add_warning to deny string slices

2026-06-09T15:36:01Z

This commit executes maint/add_warning with the just added change to deny string slices except in tests. I recommend auditing this by checking out the previous commit followed by running the script yourself and then verifying that the diff is identical to this commit. This commit makes cargo clippy fail. We will add exceptions in the next commit.

tor-cert: Ed25519CertBuilder: do builder fn rename

2026-04-29T16:49:21Z

Change all call sites. This completes the rename.

relay: Modify RelayNtorKeys to use a constructor

2026-04-21T18:01:27Z

Because of the sorting requirement and the fact that a `KeyMgr` can have multiple Ntor keys, the caller now explicitly extract the two Ntor keys it wants from the `KeyMgr` and then creates a `RelayNtorKeys` object with them. Future changes (#2495) will move this into a view and warn if there are more than 2 keys. Signed-off-by: David Goulet

relay-crypto: Add RelayNtorKeys struct holding both Ntor keys

2026-04-21T18:01:27Z

Signed-off-by: David Goulet

relay-crypto: Add new RelayNtor key wrapper

2026-04-09T17:34:01Z

arti-relay: Move all key specifiers to a new keys module

2026-04-01T11:17:50Z

This extracts the key specifier types out of `tor-relay-crypto`, which * makes the code layout consistent with the hidden service crates (the key specifiers are defined in a `keys` module in `tor-hsservice`, while the key wrapper types live in `tor-hscrypto::pk`) * helps reduce the API surface: the key specifiers are only used in `arti-relay`, so we can move them there and make them `pub(crate)` instead of `pub`

relay-crypto: Make the certs module non-pub

2026-04-01T11:06:49Z

This doesn't really need to be public.

proto: Add key specifier types for the ntor keys

2026-04-01T11:06:40Z

Part of #2451

tor-relay-crypto: port to web-time-compat

2026-03-26T19:20:16Z

relay: Rewrite the rotation key logic in the crypto task

2026-03-17T19:07:06Z

This is almost a full rewrite of the crypto task which was needed in order to support our relay signing certificate to be put in the keystore which will be needed for the offline key feature. Instead of having rotate_key() do all the things, we now instead do two pass: 1. Remove all expired keys and certs. 2. Generate any missing keys. This still results in using the minimum valid_until of all our keys for the task sleep time. We can know cleanup the local trait used for this gymnastic and trade it for some more KeyMgr gymnastic. Fixes #2404 Signed-off-by: David Goulet