blob: 60554be61f73862a017564d622e7bb387f09451a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
|
//! This module is where all relay related keys are declared along their key specifier for the
//! KeyMgr so some of them can be stored on disk.
use tor_key_forge::{define_curve25519_keypair, define_ed25519_keypair, define_rsa_keypair};
define_ed25519_keypair!(
/// [KP_relayid_ed] Long-term identity keypair. Never rotates.
pub RelayIdentity
);
define_rsa_keypair!(
/// [KP_relayid_rsa] Legacy RSA long-term identity keypair. Never rotates.
pub RelayIdentityRsa
);
define_ed25519_keypair!(
/// [KP_relaysign_ed] Medium-term signing keypair. Rotated periodically.
pub RelaySigning
);
define_ed25519_keypair!(
/// [KP_link_ed] Short-term signing keypair for link authentication. Rotated frequently.
pub RelayLinkSigning
);
define_curve25519_keypair!(
/// [KP_ntor] Medium-term keypair for the circuit extension handshake. Rotated periodically.
#[derive(Clone)]
pub RelayNtor
);
/// The relay’s ntor key set contains both the current key and the previous one, allowing it to
/// handle clients or relays that may be using different consensus views.
#[derive(Clone)]
pub struct RelayNtorKeys {
/// The latest Ntor key.
latest: RelayNtorKeypair,
/// The previous Ntor key. First run, not previous key or if expired.
previous: Option<RelayNtorKeypair>,
}
impl RelayNtorKeys {
/// Constructor.
pub fn new(latest: RelayNtorKeypair) -> Self {
Self {
latest,
previous: None,
}
}
/// Set the previous Ntor key.
pub fn with_previous(mut self, previous: RelayNtorKeypair) -> Self {
self.previous = Some(previous);
self
}
/// Return the latest.
pub fn latest(&self) -> &RelayNtorKeypair {
&self.latest
}
/// Return the previous key, if any.
pub fn previous(&self) -> Option<&RelayNtorKeypair> {
self.previous.as_ref()
}
}
|
