summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | Merge branch 'extend_EXTEND_extensions' into 'main'Nick Mathewson2025-05-0721-201/+450
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Circuit handshake extensions: Implement proposal 358, and SubprotocolRequest from proposal 346. Closes #1946 See merge request tpo/core/arti!2980
| * | | | cell: Teach extlist definition macro to make conditional extensionsNick Mathewson2025-05-072-1/+7
| | | | | | | | | | | | | | | | | | | | | | | | | We need the macro to propagate only certain #[meta] values to all places where a case is used.
| * | | | Fix topological sort order of Cargo.toml.Nick Mathewson2025-05-071-1/+1
| | | | |
| * | | | cell: Implement SubprotocolRequest extension from prop346.Nick Mathewson2025-05-072-1/+139
| | | | | | | | | | | | | | | | | | | | Part of #1945.
| * | | | protover: New `NumberedSubver` to represent a subprotocol capNick Mathewson2025-05-073-2/+86
| | | | | | | | | | | | | | | | | | | | | | | | | This type differs from `NamedSubver` in that the represented subprotocol capability isn't necessarily recognized or valid.
| * | | | protover: Change ProtoKind to be a u8Nick Mathewson2025-05-072-2/+4
| | | | | | | | | | | | | | | | | | | | | | | | | It is not remotely close to exhausting a u8, and several of our protocols expect it to be expressible as one.
| * | | | cell: Unify HS-ntor and ntor-v3 extensions.Nick Mathewson2025-05-076-32/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Implements proposal 358. Closes #1946.
| * | | | cell,proto: Split request/response extensions into seprate typesNick Mathewson2025-05-075-36/+59
| | | | | | | | | | | | | | | | | | | | Implements part of proposal 358.
| * | | | cell: Use ExtList to implement CircRequestExt.Nick Mathewson2025-05-077-122/+120
| | | | | | | | | | | | | | | | | | | | This required some renaming, so that the types and their codes matched.
| * | | | Rename NtorV3Extension to CircRequestExtNick Mathewson2025-05-077-46/+49
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This type will, because of prop358, be shared by ntorv3, hs-ntor, and probably other future handshakes. There will also be a CircResponseExt type.
| * | | | cell: Make decl_extension_group macro more self-contained.Nick Mathewson2025-05-074-14/+21
| | | | | | | | | | | | | | | | | | | | Previously it required the caller to import a whole bunch of stuff.
| * | | | cell: Clarify documentation in extlist.rs.Nick Mathewson2025-05-071-11/+10
| | | | | | | | | | | | | | | | | | | | It is no longer hs only.
| * | | | cell: move ExtList module out of hs module.Nick Mathewson2025-05-076-7/+6
|/ / / / | | | | | | | | | | | | We're going to use it for ntorv3 extensions as well.
* | | | Merge branch 'cgo-followups' into 'main'Nick Mathewson2025-05-0617-543/+659
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refactor tor-proto and tor-cell in preparation for CGO Closes #1975 and #1956 See merge request tpo/core/arti!2972
| * | | | tor_proto: name fields in bench_utils.Nick Mathewson2025-05-061-7/+10
| | | | |
| * | | | proto: Apply type-specific wrappers for tor1 cryptoNick Mathewson2025-05-066-79/+143
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Now instead of using CryptState for everything, we have specific types for each role and direction of crypto. This turned up a harmless-so-far bug in our onion service code: as an onion service, we were using _client_ crypto layers to respond to a client request. That's not correct, and wouldn't have worked with CGO. Instead, we need to use relay crypto layers, wrapped as client layers. Closes #1975.
| * | | | proto, cell: Remove RelayCellFormatTrait.Nick Mathewson2025-05-0611-248/+120
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The purpose of the trait was to parameterize the tor1 cell crypto on the different possible relay cell layouts. It made sense to have this trait when we thought we would implement the new cell layout for prop340 (packed-and-fragmented) well before we implemented CGO. But it now appears all but certain that CGO will land long before we make any more headway on prop340. Therefore, it doesn't make sense to carry the ability to customize `tor1` for other relay cell layouts. Removing this trait saves a fair bit of complexity.
| * | | | tor-proto: Rename some no-longer-apt tor1 members.Nick Mathewson2025-05-061-14/+13
| | | | |
| * | | | tor-proto: remove some now-unneeded accessors.Nick Mathewson2025-05-061-35/+15
| | | | |
| * | | | Emit SendmeTag directly from cell crypto.Nick Mathewson2025-05-067-100/+90
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This changes the code to copy a SendmeTag rather than returning a slice. This isn't actually a big change: sending a slice already required 16 bytes (on 64-bit platforms), so sending a SendmeTag around isn't a big deal. We rely extensively on the compiler's ability to optimize away all the checking in code like this: ``` let slice: &[u8]; let a: [u8;N] = slice[0..N].try_into().expect("Nope"); ``` I've spot-checked it somewhat with "cargo-show-asm", but it could use more thorough checking. Closes #1956.
| * | | | Remove the last traces of CircTag.Nick Mathewson2025-05-065-21/+19
| | | | |
| * | | | proto: Use SendmeTag in place of CircTagNick Mathewson2025-05-064-58/+13
| | | | | | | | | | | | | | | | | | | | | | | | | This doesn't make much change yet, but does save us an allocation when handling SENDMEs.
| * | | | tor-cell: define a new SendmeTag typeNick Mathewson2025-05-061-9/+149
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a more efficient representation for the tag on an authenticated SENDME message: it comes in at 21 bytes. Previously, we used Vec<u8>, which has 24 bytes of overhead (on a 64 bit system), plus malloc overhead, plus 20 bytes of allocated tag. We had a similar type to this as `tor_proto::congestion::sendme::CircTag`, but it could only accomodate 20-byte values. I don't expect that we will have enough of these simultaneously that the memory savings will matter, but the allocation savings could be significant.
| * | | | proto: Split out CGO BlkCipher trait for Encryption/DecryptionNick Mathewson2025-05-062-57/+172
|/ / / / | | | | | | | | | | | | | | | | | | | | This lets us use `Aes128Dec` and `Aes128Enc` in place of plain old `Aes128`, which can be less space-efficient depending on the back-end.
* | | | Merge branch 'clientcirc_extend' into 'main'Nick Mathewson2025-05-066-25/+70
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | tor-proto: New extend() and create_firsthop() to pick between ntor and ntor3 Closes #1970 See merge request tpo/core/arti!2967
| * | | | proto: Fix documentation to avoid recommending ntor methodsNick Mathewson2025-04-281-6/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since we have create_firsthop() and extend(), we should recommend them in our documentation, instead of recommending the no-longer-best methods.
| * | | | proto: Provide and use a create_firsthop() wrapper too.Nick Mathewson2025-04-282-7/+25
| | | | |
| * | | | circmgr: Rename AbstractCirc::{extend_ntor => extend}Nick Mathewson2025-04-284-6/+5
| | | | | | | | | | | | | | | | | | | | | | | | | We don't want to be thinking about ntor vs ntor3 in circmgr.
| * | | | tor-proto: New extend() to pick between ntor and ntor3Nick Mathewson2025-04-283-7/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In the future, when we add more circuit handshakes (PQ anyone?) we'll want to have the logic for choosing which to use be unified. Almost nobody calling tor-proto should need to care which circuit handshake is going to be used. Closes #1970.
* | | | | Merge branch 'file_limit' into 'main'David Goulet2025-05-061-1/+1
|\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | debian: Match default limit of file descriptors with systemd See merge request tpo/core/arti!2937
| * | | | | debian: Match default limit of file descriptors with systemdsyphyr2025-04-231-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The default arti.toml configuration sets the maximum number of available file descriptiors (max_files) to 16384. So, match arti default limit with systemd.
* | | | | | Merge branch 'item-metadata-cert-support' into 'main'gabi-2502025-05-061-75/+159
|\ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | tor-keymgr: Refactor ItemMetadata to support certificate metadata Closes #1913 See merge request tpo/core/arti!2921
| * | | | | | tor-keymgr: Refactor ItemMetadata to support certificate metadatashivam374832025-05-061-75/+159
| | | | | | |
* | | | | | | Merge branch 'experimental_api_path' into 'main'gabi-2502025-05-061-1/+9
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | circmgr: Make path module public on "--features=experimental-api" Closes #1981 See merge request tpo/core/arti!2990
| * | | | | | | circmgr: Make path module public on "--features=experimental-api"Nick Mathewson2025-05-051-1/+9
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Back in 4c1eb94173521bc5104449327650e20ffe32afa7, for sensible reasons, we made `tor_circmgr::path` a crate-private module. But when we did that, we lost the ability for callers to construct circuits with custom paths. This will make it possible for callers to build custom circuits again, without committing to a very-long-term API for that. Closes #1981.
* | | | | | | | Merge branch 'debug-ci' into 'main'gabi-2502025-05-064-3/+51
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | shadow CI tweaks See merge request tpo/core/arti!2989
| * | | | | | | | Bump shadow version used in CIJim Newsome2025-05-051-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Mostly to get the `faccessat` fix in <https://github.com/shadow/shadow/pull/3578>. I don't *think* it's currently affecting these tests, but is a very confusing bug when it does bite.
| * | | | | | | | CI jobs: use tor package repositoryJim Newsome2025-05-052-0/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It probably makes sense to test against a version of c-tor that we still support.
| * | | | | | | | shadow CI: enable model-unblocked-syscall-latencyJim Newsome2025-05-051-0/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Not expected to solve any immediate issue, but helpful for consistency with the chutney-shadow CI, and I think in the past we've hit busy-loop deadlock without it if/when we try increasing the simulation end time. Similarly, we apply the same tuning of "max_unapplied_cpu_latency" as we use in the chutney-shadow simulation, which gets back some of the simulation stability that enabling model-unblocked-syscall-latency otherwise sometimes sacrifices.
| * | | | | | | | shadow CI: disable strace loggingJim Newsome2025-05-051-1/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | While useful, it significantly slows down the test. We should probably just enable it when needed.
* | | | | | | | | Merge branch 'windows' into 'main'Jim Newsome2025-05-061-0/+1
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | fs-mistrust: fix build on non-unix systems See merge request tpo/core/arti!2962
| * | | | | | | | | fs-mistrust: fix build on non-unix systemsTobias Stoeckmann2025-04-251-0/+1
| | |_|/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The TrustAdminOnly enum value is only defined for unix systems. Consider this fact in mistrust_build function to fix build on e.g. Windows systems.
* | | | | | | | | Merge branch 'conflux-link' into 'main'David Goulet2025-05-0614-87/+2232
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | tor-proto: Start handling conflux cells in the circuit reactor See merge request tpo/core/arti!2946
| * | | | | | | | | tor-proto: Use AcqRel instead of SeqCst to clarify intent.Gabriela Moldovan2025-05-062-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Prompted by https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/2946#note_3192334
| * | | | | | | | | tor-proto: Document the lifecycle of a ConfluxSet.Gabriela Moldovan2025-05-061-1/+28
| | | | | | | | | |
| * | | | | | | | | tor-proto: Document why RemoveLegReason exists.Gabriela Moldovan2025-05-061-0/+14
| | | | | | | | | |
| * | | | | | | | | tor-proto: Move error binding under is_conflux_pending condition.Gabriela Moldovan2025-05-061-7/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We don't use it outside this branch, so might as well move it there.
| * | | | | | | | | tor-proto: Remove already-addressed TODO.Gabriela Moldovan2025-05-061-2/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We already do this, using `note_conflux_handshake_result`.
| * | | | | | | | | tor-proto: Explain why the handshake result is noted before the LINKED_ACK.Gabriela Moldovan2025-05-061-1/+10
| | | | | | | | | |
| * | | | | | | | | tor-proto: Remove confusing parts of join_point docs.Gabriela Moldovan2025-05-061-4/+1
| | | | | | | | | |
generated by cgit v1.2.3 (git 2.46.0) at 2026-08-27 21:45:13 +0000