summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | | | Use CautiousRng for keys going into the KeyMgr.Nick Mathewson2025-03-247-6/+23
| | | | | | |
| * | | | | | llcrypto: new CautiousRng for constructing long-lived keysNick Mathewson2025-03-244-0/+176
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This Rng combines inputs from several sources, including OsRng, to minimize the likelihood of falling to a vulnerability in any particular one.
* | | | | | Merge branch 'tests-rpcserver-msgs' into 'main'Nick Mathewson2025-03-241-6/+25
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | rpcserver: Increase coverage in msgs module See merge request tpo/core/arti!2870
| * | | | | | rpcserver: Increase coverage in msgs modulevcrn2025-03-241-6/+25
| | | | | | |
* | | | | | | Merge branch 'coc_link' into 'main'David Goulet2025-03-243-3/+3
|\ \ \ \ \ \ \ | |_|_|/ / / / |/| | | | | | | | | | | | | | | | | | | | Update links to the code of conduct See merge request tpo/core/arti!2882
| * | | | | | Update links to the code of conductNick Mathewson2025-03-243-3/+3
| | |/ / / / | |/| | | | | | | | | | | | | | | | The old link seems not to work any more.
* | | | | | Merge branch 'fallbackdirs-03-2025' into 'main'opara2025-03-241-920/+897
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | fallbackdir: Update list generated on March 20, 2025 See merge request tpo/core/arti!2875
| * | | | | | fallbackdir: Update list generated on March 20, 2025Tor CI Release2025-03-241-920/+897
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Tor CI Release <[email protected]>
* | | | | | | Merge branch 'return-errors-through-channel' into 'main'opara2025-03-243-50/+74
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | | | | | | | | | | | | | | | | | tor-proto: some TODO fixes in `ControlHandler` See merge request tpo/core/arti!2867
| * | | | | | tor-proto: send errors to oneshot channel in more placesSteven Engler2025-03-241-16/+38
| | | | | | |
| * | | | | | tor-proto: made `StreamTarget::send_sendme` async and fixed a TODOSteven Engler2025-03-243-10/+28
| | | | | | |
| * | | | | | tor-proto: remove previously completed TODOsSteven Engler2025-03-241-21/+7
| | | | | | |
| * | | | | | tor-proto: fix small TODOSteven Engler2025-03-241-3/+1
| |/ / / / /
* | | | | | Merge branch 'af-unix' into 'main'Ian Jackson2025-03-2423-70/+142
|\ \ \ \ \ \ | |/ / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Correct terminology for unix-domain sockets Closes #827 See merge request tpo/core/arti!2841
| * | | | | Style.md: Be more nuanced about identifiers with `Unix` inIan Jackson2025-03-241-3/+7
| | | | | |
| * | | | | RPC: Explain in more detail about Windows "named pipe"sIan Jackson2025-03-241-2/+5
| | | | | |
| * | | | | AF_UNIX terminology: Rename two error structsIan Jackson2025-03-2410-21/+43
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We change `NoUnixAddressSupport` to `NoAfUnixSocketSupport` because it doesn't make much sense to talk about support for the addresses separately from support for the sockets.
| * | | | | AF_UNIX terminology: Rename two error variantsIan Jackson2025-03-247-13/+32
| | | | | | | | | | | | | | | | | | | | | | | | Change `..UnixAddress...` to `...AfUnixAddress..`.
| * | | | | RPC: Abolish an unused and misnamed error variantIan Jackson2025-03-243-5/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This variant breaches the new guidelines about AF_UNIX terminology. And its purpose is unclear and it's not used.
| * | | | | Fix AF_UNIX terminology in docs, comments, and error messagesIan Jackson2025-03-2412-26/+26
| | | | | |
| * | | | | Style.md: Discuss how to refer to AF_UNIX socketsIan Jackson2025-03-241-0/+25
| | | | | |
| * | | | | Style.md: (ab)use linguists' *-convention to decorate deprected usagesIan Jackson2025-03-241-3/+3
|/ / / / / | | | | | | | | | | | | | | | This marks the anti-examples more clearly.
* | | | | Merge branch 'maint-cargo-sort' into 'main'Jim Newsome2025-03-211-2/+21
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix erratic rust-checks pipeline on non-arti toplevels Closes #1868 See merge request tpo/core/arti!2864
| * | | | | maint: docs and formatting for cargo_sortmatt0222025-03-211-2/+10
| | | | | |
| * | | | | cargo_sort: better checking scriptmatt0222025-03-211-2/+13
|/ / / / /
* | | | | Merge branch 'rand-select-more' into 'main'Nick Mathewson2025-03-201-0/+8
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | tor-netdir: Handle InsufficientNonZero error. See merge request tpo/core/arti!2877
| * | | | | tor-netdir: Handle InsufficientNonZero error.Nick Mathewson2025-03-201-0/+8
|/ / / / / | | | | | | | | | | | | | | | Possible fix for #1902.
* | | | | Merge branch 'named_protovers' into 'main'David Goulet2025-03-207-12/+177
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | protover: Add support for subprotocol version mnemonics. Closes #1891 See merge request tpo/core/arti!2854
| * | | | | Use named subprotocol versions throughout arti.Nick Mathewson2025-03-123-11/+12
| | | | | |
| * | | | | protover: Add support for subprotocol version mnemonics.Nick Mathewson2025-03-124-0/+162
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It's error-prone to have to remember e.g. that "Desc=5" means "family ID support", so in torspec!251 we added mnemonic names like DESC_FAMILY_IDS. Here we use those names in tor-protover.
| * | | | | protover: Add Conflux protocol group.Nick Mathewson2025-03-121-1/+3
| | | | | |
* | | | | | Merge branch 'inherent=none' into 'main'Nick Mathewson2025-03-201-2/+3
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | rpc-book: Clarify auth="none" vs auth:inherent Closes #1820 See merge request tpo/core/arti!2872
| * | | | | | rpc-book: Clarify auth="none" vs auth:inherentNick Mathewson2025-03-191-2/+3
| | |/ / / / | |/| | | | | | | | | | | | | | | | Closes #1820.
* | | | | | Merge branch 'client-arti' into 'main'opara2025-03-201-16/+12
|\ \ \ \ \ \ | |/ / / / / |/| | | | | | | | | | | | | | | | | replace state_dir and storage_mistrust with tor_persist::state_dir::StateDirectory See merge request tpo/core/arti!2863
| * | | | | replace state_dir and storage_mistrust with ↵abdul28012025-03-201-16/+12
| | | | | | | | | | | | | | | | | | | | | | | | tor_persist::state_dir::StateDirectory
* | | | | | Merge branch 'timeout_est_overflow' into 'main'Nick Mathewson2025-03-191-3/+11
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Impose a maximum on our fallback estimated timeout Closes #1693 See merge request tpo/core/arti!2842
| * | | | | | Impose a maximum on our fallback estimated timeoutNick Mathewson2025-03-061-3/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The fallback timeout is the one that we use when we have insufficient data. We reset our observations, and maybe rebuild our circuits, when we find that too many circuits have failed recently. When we do so, we double our fallback timeout. Previously we had no limit, which could lead to overflow (#1693). In this commit we impose a maximum of 2 hours, which is ridiculously high. (C tor uses a maximum of INT32_MAX seconds, which is even more ridiculously high.) Closes #1693.
* | | | | | | Merge branch 'rand-0.9' into 'main'Nick Mathewson2025-03-19121-524/+721
|\ \ \ \ \ \ \ | |_|/ / / / / |/| | | | | | | | | | | | | | | | | | | | Port to rand 0.9 See merge request tpo/core/arti!2869
| * | | | | | proto: make padding::Parameters construction fallible.Nick Mathewson2025-03-184-23/+106
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The constructor for rand::distr::Uniform is now fallible, so it makes sense to bubble up its restrictions. This is a breaking change.
| * | | | | | Update Cargo.lock in bench directories.Nick Mathewson2025-03-182-218/+256
| | | | | | |
| * | | | | | Add a semver note about rand 0.9Nick Mathewson2025-03-181-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (This applies to every crate that has an API that takes a `rand::Rng` or any related trait.)
| * | | | | | Run cargo fmtNick Mathewson2025-03-181-11/+3
| | | | | | |
| * | | | | | squash! Upgrade rand dependency to 0.9.Nick Mathewson2025-03-1823-45/+45
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - The Rng::gen() functions have been renamed to Rng::random().
| * | | | | | Use rng compatibility layer in keygen-openssh-testNick Mathewson2025-03-182-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | (This only needs to be used for DSA keys from ssh_key, which we should never touch in production.)
| * | | | | | squash! Upgrade rand dependency to 0.9.Nick Mathewson2025-03-184-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - Several methods have been moved out of SliceRandom.
| * | | | | | squash! Upgrade rand dependency to 0.9.Nick Mathewson2025-03-181-3/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - `rand::thread_rng()` has been deprecated and renamed to `rand::rng()` (I missed these cases because they were from prelude::*)
| * | | | | | squash! Upgrade rand dependency to 0.9.Nick Mathewson2025-03-181-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - `Uniform::new_inclusive` is now fallible.
| * | | | | | squash! Upgrade rand dependency to 0.9.Nick Mathewson2025-03-183-4/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - The Standard distribution has been renamed to StandardUniform.
| * | | | | | squash! Upgrade rand dependency to 0.9.Nick Mathewson2025-03-184-21/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - `try_fill_bytes()` is no longer a member of RngCore.
| * | | | | | llcrypto: add an rng compatibility shim for dalek-cryptoNick Mathewson2025-03-186-5/+58
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | dalek-cryptography is still on rand 0.8, so we need a compatibility shim for the Rng. Fortunately, since we merged interface-abstraction-of-the-daleks (!2868), we no longer need to propagate this compatibility layer throughout our codebase.