| Commit message (Collapse) | Author | Age | Files | Lines | |
|---|---|---|---|---|---|
| * | Upgrade rand crates to 0.10. | Wesley Aptekar-Cassels | 2026-05-12 | 1 | -3/+5 |
| | | | | | | | | | | | | When the circ-padding feature is enabled, we use maybenot, which does not yet support rand 0.10. In the meantime, enabling this feature pulls in rand 0.9. This is not ideal, but should be okay as a temporary situation. This also replaces the use of ReseedingRng (which was removed in 0.10) with the reseeding_rng crate. This is somewhat less performant, but it should be okay. | ||||
| * | Fix name of clippy lint to unchecked_time_subtraction (2) | Ian Jackson | 2025-11-06 | 1 | -1/+1 |
| | | | | | Run maint/add_warning | ||||
| * | squash! Upgrade rand dependency to 0.9. | Nick Mathewson | 2025-03-18 | 1 | -3/+3 |
| | | | | | - `rand::thread_rng()` has been deprecated and renamed to `rand::rng()` | ||||
| * | rpc-connect: Abort on misformed cookie file, and explain why. | Nick Mathewson | 2025-01-27 | 1 | -6/+3 |
| | | |||||
| * | rpc-connect: Use file_access() API, and permit symlinks. | Nick Mathewson | 2025-01-27 | 1 | -7/+11 |
| | | |||||
| * | rpc: Expose Cookie::load unconditionally. | Nick Mathewson | 2025-01-15 | 1 | -2/+0 |
| | | |||||
| * | rpc: Use symbolic constants for nonce/mac lengths. | Nick Mathewson | 2025-01-15 | 1 | -7/+14 |
| | | |||||
| * | rpc: Tests for cookie nonce/mac encoding/decoding. | Nick Mathewson | 2025-01-15 | 1 | -2/+46 |
| | | | | | Also fix a bug in decoding, where we accepted too-short strings. | ||||
| * | rpc: Tweak cookie protocol to bind both nonces. | Nick Mathewson | 2025-01-15 | 1 | -2/+8 |
| | | | | | | | | | | | Previously participants in the cookie protocol only bound the peer nonce in their MACs. With this change, they bind both nonces. This change is _probably_ not necessary for security, but it can't hurt. It follows a general principle that Adam Langley told me a long time ago: you won't regret binding more, but you might regret binding less. | ||||
| * | arti-rpcserver: Server side of cookie auth. | Nick Mathewson | 2025-01-15 | 1 | -2/+25 |
| | | |||||
| * | tor-rpc-connect: Cryptographic support for cookie auth. | Nick Mathewson | 2025-01-15 | 1 | -2/+208 |
| | | | | | Conforms to rpc-cookie-sketch.md. | ||||
| * | tor-rpc-connect: defer loading auth cookies on the client side. | Nick Mathewson | 2025-01-15 | 1 | -1/+22 |
| | | | | | | We want to load cookies only after we've connected and gotten a banner. | ||||
| * | tor-rpc-connect: move cookie auth support to its own module. | Nick Mathewson | 2025-01-15 | 1 | -0/+167 |
