mirrors/arti.git/crates/tor-rpc-connect/src/auth, branch arti-v2.2.0 mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v2.2.0 2025-11-06T11:28:22Z Fix name of clippy lint to unchecked_time_subtraction (2) 2025-11-06T11:28:22Z Ian Jackson ijackson@chiark.greenend.org.uk 2025-11-06T11:23:25Z urn:sha1:a5fd5c48ea059a80cc1f6c50e248654b5ff3aaff Run maint/add_warning squash! Upgrade rand dependency to 0.9. 2025-03-18T16:09:44Z Nick Mathewson nickm@torproject.org 2025-03-18T13:01:31Z urn:sha1:2f8993c22c2b86010e4fd8b5169ef0ab83f8c754 - `rand::thread_rng()` has been deprecated and renamed to `rand::rng()` rpc-connect: Abort on misformed cookie file, and explain why. 2025-01-27T20:14:39Z Nick Mathewson nickm@torproject.org 2025-01-27T20:14:39Z urn:sha1:2ef3084a5e489516c4c449818dd652b1cf781ff7 rpc-connect: Use file_access() API, and permit symlinks. 2025-01-27T20:09:19Z Nick Mathewson nickm@torproject.org 2025-01-27T20:09:19Z urn:sha1:b8f7a2a654d3c7732ec3e888b8857fed2a9ed187 rpc: Expose Cookie::load unconditionally. 2025-01-15T15:21:05Z Nick Mathewson nickm@torproject.org 2025-01-15T15:21:05Z urn:sha1:86ad28dda17b7e181dcb8e93e8aaf312a43e7a38 rpc: Use symbolic constants for nonce/mac lengths. 2025-01-15T14:18:44Z Nick Mathewson nickm@torproject.org 2025-01-15T14:00:36Z urn:sha1:0d9ec0383df8230dfe8bc9720f84bcb30d63f662 rpc: Tests for cookie nonce/mac encoding/decoding. 2025-01-15T14:18:44Z Nick Mathewson nickm@torproject.org 2025-01-15T13:56:45Z urn:sha1:7a1daa02f4ef9d749d3fd4abb4304ccac196d7b7 Also fix a bug in decoding, where we accepted too-short strings. rpc: Tweak cookie protocol to bind both nonces. 2025-01-15T14:18:44Z Nick Mathewson nickm@torproject.org 2025-01-09T19:55:50Z urn:sha1:f3fcd71f218595402175c2530a09dabb7ed10f9d Previously participants in the cookie protocol only bound the peer nonce in their MACs. With this change, they bind both nonces. This change is _probably_ not necessary for security, but it can't hurt. It follows a general principle that Adam Langley told me a long time ago: you won't regret binding more, but you might regret binding less. arti-rpcserver: Server side of cookie auth. 2025-01-15T14:18:44Z Nick Mathewson nickm@torproject.org 2025-01-09T18:49:55Z urn:sha1:a9136cf5b7e253019c5752a09b7690bf47056bf2 tor-rpc-connect: Cryptographic support for cookie auth. 2025-01-15T14:18:44Z Nick Mathewson nickm@torproject.org 2025-01-09T16:13:53Z urn:sha1:d43de9a6a204b5c0c0b638d32c34f9beb42147ea Conforms to rpc-cookie-sketch.md.