mirror of https://gitlab.torproject.org/tpo/core/arti http://git.dilluti0n.com/mirrors/arti.git/atom?h=arti-v2.5.1 2024-10-21T10:11:20Z 2024-10-21T10:11:20Z Ian Jackson ijackson@chiark.greenend.org.uk 2024-10-16T16:27:24Z urn:sha1:87e9d36c9afecd51f045ef53276e1130ed410f0a 2024-02-22T18:00:34Z Gabriela Moldovan gabi@torproject.org 2024-02-21T18:53:59Z urn:sha1:79fa5573a26eed11ee90a93a01fdb504f0fc56d2 Closes #1283 2024-01-31T11:15:53Z Gabriela Moldovan gabi@torproject.org 2024-01-29T12:38:23Z urn:sha1:f28158d1b6b2e5cd88e707c3ed385acc65fdfcee The role is a slug, and slugs are not allowed to contain uppercase characters. Closes #1195 2024-01-31T10:43:06Z Gabriela Moldovan gabi@torproject.org 2024-01-26T12:20:48Z urn:sha1:7b0cb45d0ebcf15f57b2b41c464b2bb903c5893d We are about to replace `ArtiPathComponent` with `Slug`, but `Slug`s don't support `.`, so let's strip the `.onion` suffix before encoding it in the `ArtiPath`. 2023-12-14T18:21:38Z Gabriela Moldovan gabi@torproject.org 2023-12-14T17:37:47Z urn:sha1:c65a35fab5e6786f0be5c4645db7df054251514c The algorithm name for x25519 keys has changed, so the test keys need to be updated. 2023-10-13T17:11:28Z Gabriela Moldovan gabi@torproject.org 2023-10-13T11:14:56Z urn:sha1:3b2f1b838b0113effb98852a750db90ac7e20262 There are 2 reasons to make this change: * because having the word `private` in the extension will make it more difficult to accidentally misuse or misplace a private key (see https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/1618#note_2947461) * because `Keystore`s will soon grow a `list()` function returning all `(ArtiPath, KeyType)`s in the keystore, and in order for `ArtiNativeKeystore` to implement this function, it will need to be able to reverse the `KeyType -> file extension` mapping (if two different `KeyType`s are mapped to the same extension, `ArtiNativeKeystore`s won't be able to reverse the mapping) 2023-09-12T15:58:29Z Gabriela Moldovan gabi@torproject.org 2023-09-12T15:58:29Z urn:sha1:d8ead902fcd7cd80905d8acd5299c3865bb6b0ab The secret keys are prefixed with `KS`, not `KP`. 2023-09-12T15:56:15Z Gabriela Moldovan gabi@torproject.org 2023-09-12T15:56:15Z urn:sha1:83c69cd9cba152babc7ddac86b58897f44035b14 The privateness of the keys is encoded in their name. 2023-08-16T09:43:28Z Gabriela Moldovan gabi@torproject.org 2023-07-25T10:51:34Z urn:sha1:17d965e8941397b8c362d88df8c90e6a2632bd52 Previously, the Arti key store would store x25519 secret keys as ed25519 OpenSSH keys, which it would convert to x25519 upon loading (using the conversion function added in !1297 (merged)). This approach isn't good enough though: most people will probably want to bring their existing x25519 keys, and in order to store those in OpenSSH format, we'd need convert them to ed25519, which is impossible (because the secret part of an x25519 key contains a SHA512'd secret, whereas the corresponding, "un-expanded", ed25519 secret key contains the secret itself rather than the SHA). Now that `ssh-key` has support for ssh keys with [custom algorithm names], we can store x25519 in OpenSSH format directly. This commit changes the storage format used by the keymgr for x25519 client auth keys (from ed25519-ssh to our own custom key type with an algorithm name of `"x25519@torproject.org"`). Closes #936 [custom algorithm names]: https://github.com/RustCrypto/SSH/pull/136 2023-07-12T15:36:11Z Gabriela Moldovan gabi@torproject.org 2023-07-10T18:42:28Z urn:sha1:24501fdf0e4e4588b84d2ffd94e8288394ca7acd