[tor-dev] Interoperation with libp2p

Jeff Burdges burdges at gnunet.org
Tue Dec 7 18:32:51 UTC 2021



> On 7 Dec 2021, at 19:26, Jeff Burdges <burdges at gnunet.org> wrote:
> I advise against allowing any libp2p cruft into tor itself though.

Among the many reasons. I’d expect libp2p to be a nightmare of downgrade attacks, given the amount of badly rolled stuff they must still support, like their dangerous key exchange SECIO built on the legacy curve sep256k1, but it’ll go deep than that.

Jeff


More information about the tor-dev mailing list