aboutsummaryrefslogtreecommitdiff
path: root/crates
Commit message (Collapse)AuthorAgeFilesLines
...
* | | | | | | | | tor-netdoc: rustfmt (re-alphabetise and re-wrap imports)Ian Jackson2026-05-131-2/+1
| | | | | | | | |
* | | | | | | | | tor-netdoc: vote authority entry: declare it completeIan Jackson2026-05-131-3/+0
| | | | | | | | |
* | | | | | | | | tor-netdoc: vote authority entry: parse shared-rand-commitIan Jackson2026-05-131-2/+89
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is rather ugly, because the protocol is being ad-hoc again.
* | | | | | | | | tor-netdoc: vote authority entry: parse shared-rand-participateIan Jackson2026-05-131-1/+21
| | | | | | | | |
* | | | | | | | | tor-netdoc: vote authority entry: parse legacy-dir-keyIan Jackson2026-05-131-1/+6
| | | | | | | | |
* | | | | | | | | tor-netdoc: Soften a TODO.Ian Jackson2026-05-131-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Preamble now doesn't contain anything that's *wrong*. It is missing a couple of fields that will be wanted when we generate votes.
* | | | | | | | | tor-netdoc: Add a ticket reference for a TODOIan Jackson2026-05-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This isn't needed for the arti dirauth consensus method, but it will be needed for arti dirauth vote calculator.
* | | | | | | | | tor-netdoc: Add shared-rand-*-status to VoteAuthorityEntryIan Jackson2026-05-132-5/+4
| | | | | | | | |
* | | | | | | | | tor-netdoc: Break out SharedRandStatuses, and remove it from votesIan Jackson2026-05-136-14/+40
| | | | | | | | |
* | | | | | | | | tor-netdoc: impl Ord and PartialOrd for byte wrapper typesIan Jackson2026-05-132-2/+15
| | | | | | | | |
* | | | | | | | | tor-netdoc: derive Ord and PartialOrd for RSA fingerprint typesIan Jackson2026-05-132-4/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This will let us use them in types in ordered lists in netdocs, without fuss.
* | | | | | | | | tor-netdoc: impl NetdocEncodableFields for NotPresentIan Jackson2026-05-131-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | And document its meaning when parsing and encoding as flattened fields.
* | | | | | | | | tor-netdoc: NetdocEncodableFields: Suppress warnings for empty structsIan Jackson2026-05-131-0/+2
| | | | | | | | |
* | | | | | | | | tor-netdoc: NetdocEncodableFields: Suppress warnings for empty structs (pre-fmt)Ian Jackson2026-05-131-1/+4
| | | | | | | | |
* | | | | | | | | tor-netdoc: Parsing with `#[netdoc(flatten)]`: cope with non-path typesIan Jackson2026-05-131-1/+1
|/ / / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | ns_type! is a non-path type.
* | | | | | | | Merge branch 'rd-fingerprint' into 'main'Clara Engler2026-05-133-6/+24
|\ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Store fingerprint in Option<SpFingerprint> See merge request tpo/core/arti!3978
| * | | | | | | | tor-netdoc: Change fingerprint to Option<SpFingerprint>Clara Engler2026-05-122-2/+3
| | | | | | | | |
| * | | | | | | | tor-netdoc: Obtain RSA identity from signing keyClara Engler2026-05-121-2/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Will be required and unavoidable as we will change fingerprint to Option<SpFingerprint> in the next commit.
| * | | | | | | | tor-netdoc: Return copy in RouterDesc::rsa_identity()Clara Engler2026-05-123-4/+22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This change might seem pointless for now but it will be required and unavoidable later on, because we will have to change RouterDesc::fingerprint from RsaIdentity to Option<SpFingerprint> which will make it impossible to be used inside the getter anymore. With this change, our only resort is to obtain the RSA identity from the signing key but we can only return a copy then because that RSA identity is created ad-hoc then.
* | | | | | | | | Merge branch 'directory-signature-3' into 'main'Clara Engler2026-05-139-584/+620
|\ \ \ \ \ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | tor-netdoc: Sort out netstatus signatures See merge request tpo/core/arti!3937
| * | | | | | | | | tor-netdoc: Replace an IEFE with use of .and_then() (fmt)Ian Jackson2026-05-051-6/+5
| | | | | | | | | |
| * | | | | | | | | tor-netdoc: Replace an IEFE with use of .and_then()Ian Jackson2026-05-051-3/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As per https://gitlab.torproject.org/tpo/core/arti/-/merge_requests/3937#note_3405033 Suggested-by: Clara Engler <[email protected]>
| * | | | | | | | | tor-netdoc: Apply deferred rustfmt churnIan Jackson2026-04-294-37/+42
| | | | | | | | | |
| * | | | | | | | | tor-netdoc: Turn DirectorySignatureHashAlgo back into a normal structIan Jackson2026-04-292-31/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Abolish the terrible macro. Review with --color-moved-ws=allow-indentation-change --color-moved.
| * | | | | | | | | tor-netdoc: re-privatise some methodsIan Jackson2026-04-291-6/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | hash_slice_for_verification is still needed by code in poc, that we're not replacing in this MR. So that TODO gets downgraded, instead.
| * | | | | | | | | tor-netdoc: directory-signature: don't re-hash unnecessarilyIan Jackson2026-04-291-3/+4
| | | | | | | | | |
| * | | | | | | | | tor-netdoc: Fix handling of explicit vs implicit dir sig SHA1 hashIan Jackson2026-04-291-6/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Now that everything is prepared, we can add the sha1_unnamed field in the hash accumulator.
| * | | | | | | | | tor-netdoc: Fix signature of hash_slice_for_verificationIan Jackson2026-04-292-14/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In order to handle marked vs unmarked SHA1 correctly, it needs the original DigestAlgoInSignature. The only call site is in poc's verification code.
| * | | | | | | | | tor-netdoc: Fix signature of hash_slice_for_verification (pre-fmt)Ian Jackson2026-04-291-1/+4
| | | | | | | | | |
| * | | | | | | | | tor-netdoc: Abolish poc's netstatus signature typeIan Jackson2026-04-293-173/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Use prod's Signature instead. This gets rid of: * The old parsing code. We have a new approach based on ItemValueParseable, KeywordOrString and and DigestAlgoInSignature. * The duplicate DirectorySignaturesHashesAccu and its temporary conversions. poc's verify_timeless function needs a little adjustment for the new struct layout.
| * | | | | | | | | tor-netdoc: Promote hash_slice_for_verification to prodIan Jackson2026-04-292-13/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This function is not right, yet. We're going to fix it later. Review with --color-moved.
| * | | | | | | | | tor-netdoc: impl SignatureItemParseable for netstatus::SignatureIan Jackson2026-04-291-1/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is now pretty straightforward. The functions it calls need some work - we have blocking TODOs for that.
| * | | | | | | | | tor-netdoc: Introduce DirectorySignaturesHashesAccu::update_fromIan Jackson2026-04-292-16/+53
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This now contains the hashing code that was in poc. In poc it was entangled with the signature type, mostly because once upon a time the hash was inside the signature. In the real code we can make it a standalone method. It takes DigestAlgoInSignature so that it will be able to handle the explicit vs implicit sha1 anomaly correctly - but it can't do that yet because the necessary field doesn't exist yet. Also, we are going to want to make it a bit lazier - preserve the MR-blocking todo for that. A handful of lines are being actually moved verbatim, so --color-moved may help a bit.
| * | | | | | | | | tor-netdoc: Promote poc's DirectorySignaturesHashesAccu to prodIan Jackson2026-04-292-29/+41
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There are definitely some things wrong with this, but they all have MR-blocking TODOs so we can promote this type now. Largely code motion. Review with --color-moved.
| * | | | | | | | | tor-netdoc: Make some items temporarily pub(crate)Ian Jackson2026-04-291-2/+4
| | | | | | | | | |
| * | | | | | | | | tor-netdoc: Temporary conversions between the two DirectorySignatureHashAlgosIan Jackson2026-04-291-0/+20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Because we have two DirectorySignatureHashAlgo types because of the macrology problem, we need to introduce temporary conversions, to let us move code from poc to prod.
| * | | | | | | | | tor-netdoc: netstatus signature hashing: Add TODO re wasted workIan Jackson2026-04-291-0/+1
| | | | | | | | | |
| * | | | | | | | | tor-netdoc: netstatus signature hashing: Add TODO re unnamed sha1Ian Jackson2026-04-291-0/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We're going to fix this in this branch, as part of promoting the poc code to prod.
| * | | | | | | | | tor-netdoc: netstatus signing algorithms: Improve a doc commentIan Jackson2026-04-291-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There isn't a "this" here; self is DirectorySignaturesHashesAccu.
| * | | | | | | | | tor-netdoc: derive ItemValue parsing/encoding for SignatureIan Jackson2026-04-292-4/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This doesn't let us do any verification or anything.
| * | | | | | | | | tor-netdoc: impl parsing/encoding for AuthCertKeyIds in directory-signatureIan Jackson2026-04-291-1/+68
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This module will be used when we derive ItemValueParseable on Signature.
| * | | | | | | | | tor-netdoc: Introduce DigestAlgoInSignature parsing/encoding typeIan Jackson2026-04-291-3/+59
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | And change the type of the field in Signature. We are going to abandon the almost completely manual parsing approach taken in poc's NdiDirectorySignature. That parsing approach was heavily influenced by poc's struct layout, which in turn was influenced by the way that previously, hashes were inside signatures. Instead we'll derive ItemValueParseable from Signature, and semi-manually implement the hash update. This type is the one that embodies the `directory-signature` item's parsing strangeness: the optional initial positional argument.
| * | | | | | | | | tor-netdoc: Unify authcert test modules (fmt)Ian Jackson2026-04-291-313/+308
| | | | | | | | | |
| * | | | | | | | | tor-netdoc: Unify authcert test modulesIan Jackson2026-04-291-32/+18
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Abolish the parse2_test and encode_test modules. These mostly existed because of cfg gates. Now, we can unify the test module namespace, and also remove an indentation level (that will come next, with rustfmt).
| * | | | | | | | | tor-netdoc: derive Display for DirectorySignatureHashAlgoIan Jackson2026-04-291-1/+1
| | | | | | | | | |
| * | | | | | | | | tor-netdoc: netsatus: glob import from types, not types::miscIan Jackson2026-04-291-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This way we import via the public names, which is more sensible, and we include things that aren't in misc. The whole of types is pretty good as a glob import here.
| * | | | | | | | | tor-netdoc: types.rs: Add a missing exportIan Jackson2026-04-291-0/+1
| | | | | | | | | |
| * | | | | | | | | tor-netdoc: parse2: Improve another error span for missing trait implIan Jackson2026-04-291-1/+1
| | | | | | | | | |
| * | | | | | | | | tor-netdoc: parse2: Add missing ItemObjectParseable to prelude (fmt)Ian Jackson2026-04-291-2/+2
| | | | | | | | | |
| * | | | | | | | | tor-netdoc: parse2: Add missing ItemObjectParseable to preludeIan Jackson2026-04-292-3/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | And remove a then-unneeded import in a using module.