July 2016 - tor-commits - lists.torproject.org

[webwml/master] update teor's entry
by sebastian＠torproject.org 02 Jul '16

02 Jul '16

commit dafc9f8b7b31b173639bc51015a37a2a49fd47b4 Author: Sebastian Hahn <sebastian(a)torproject.org> Date: Sat Jul 2 11:05:11 2016 +0200 update teor's entry --- about/en/corepeople.wml | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/about/en/corepeople.wml b/about/en/corepeople.wml index a3318aa..015c23b 100644 --- a/about/en/corepeople.wml +++ b/about/en/corepeople.wml @@ -358,9 +358,10 @@ <dd>Working on build automation, particularly around the Tor Browser.</dd> - <dt>Tim Wilson-Brown, Developer</dt> - <dd>Onion services developer, and core member of Tor development - team.</dd> + <dt>Tim Wilson-Brown, Developer, Researcher</dt> + <dd>Onion services developer, and core member of Tor + development team. Researches Tor network measurement and onion + service scalability.</dd> <dt>Philipp Winter, Researcher</dt> <dd>Understands how to manipulate and circumvent Tor network

1 0

[tor/master] Keep make check-spaces happy
by andrea＠torproject.org 01 Jul '16

01 Jul '16

commit be78e9ff3782639b9fa72dcfa9bda559cfc83f17 Author: Andrea Shepard <andrea(a)torproject.org> Date: Fri Jul 1 21:52:32 2016 +0000 Keep make check-spaces happy --- src/or/dirvote.c | 3 ++- src/or/shared_random.c | 8 +++++--- src/or/shared_random.h | 1 + src/or/shared_random_state.c | 1 + src/or/shared_random_state.h | 1 + src/test/test_dir.c | 6 ++++-- src/test/test_shared_random.c | 1 + 7 files changed, 15 insertions(+), 6 deletions(-) diff --git a/src/or/dirvote.c b/src/or/dirvote.c index 4399bad..c31894a 100644 --- a/src/or/dirvote.c +++ b/src/or/dirvote.c @@ -2648,7 +2648,8 @@ get_voting_schedule(const or_options_t *options, time_t now, int severity) new_voting_schedule->fetch_missing_signatures = start - (dist_delay/2); new_voting_schedule->voting_ends = start - dist_delay; - new_voting_schedule->fetch_missing_votes = start - dist_delay - (vote_delay/2); + new_voting_schedule->fetch_missing_votes = + start - dist_delay - (vote_delay/2); new_voting_schedule->voting_starts = start - dist_delay - vote_delay; { diff --git a/src/or/shared_random.c b/src/or/shared_random.c index a7a2238..e9e6cbc 100644 --- a/src/or/shared_random.c +++ b/src/or/shared_random.c @@ -327,7 +327,6 @@ reveal_decode(const char *encoded, sr_commit_t *commit) return -1; } - /* Encode a reveal element using a given commit object to dst which is a * buffer large enough to put the base64-encoded reveal construction. The * format is as follow: @@ -629,7 +628,8 @@ should_keep_commit(const sr_commit_t *commit, const char *voter_key, lasts multiple rounds. However if the commitment value changes during commit phase, it might be a bug so log more loudly. */ if (!commitments_are_the_same(commit, saved_commit)) { - log_info(LD_DIR, "SR: Received altered commit from %s in commit phase.", + log_info(LD_DIR, + "SR: Received altered commit from %s in commit phase.", sr_commit_get_rsa_fpr(commit)); } else { log_debug(LD_DIR, "SR: Ignoring known commit during commit phase."); @@ -1348,9 +1348,11 @@ sr_save_and_cleanup(void) /* Set the global value of number of SRV agreements so the test can play * along by calling specific functions that don't parse the votes prior for * the AuthDirNumSRVAgreements value. */ -void set_num_srv_agreements(int32_t value) +void +set_num_srv_agreements(int32_t value) { num_srv_agreements_from_vote = value; } #endif /* TOR_UNIT_TESTS */ + diff --git a/src/or/shared_random.h b/src/or/shared_random.h index 3922f33..51f3b55 100644 --- a/src/or/shared_random.h +++ b/src/or/shared_random.h @@ -164,3 +164,4 @@ void set_num_srv_agreements(int32_t value); #endif /* TOR_UNIT_TESTS */ #endif /* TOR_SHARED_RANDOM_H */ + diff --git a/src/or/shared_random_state.c b/src/or/shared_random_state.c index d0cd460..73df9c4 100644 --- a/src/or/shared_random_state.c +++ b/src/or/shared_random_state.c @@ -1351,3 +1351,4 @@ get_sr_state(void) } #endif /* TOR_UNIT_TESTS */ + diff --git a/src/or/shared_random_state.h b/src/or/shared_random_state.h index e0b6e46..43a7f1d 100644 --- a/src/or/shared_random_state.h +++ b/src/or/shared_random_state.h @@ -144,3 +144,4 @@ STATIC sr_state_t *get_sr_state(void); #endif /* TOR_UNIT_TESTS */ #endif /* TOR_SHARED_RANDOM_STATE_H */ + diff --git a/src/test/test_dir.c b/src/test/test_dir.c index 200cddd..8889ccc 100644 --- a/src/test/test_dir.c +++ b/src/test/test_dir.c @@ -1438,7 +1438,8 @@ test_dir_measured_bw_kb_cache(void *arg) } static char * -my_dirvote_compute_params(smartlist_t *votes, int method, int total_authorities) +my_dirvote_compute_params(smartlist_t *votes, int method, + int total_authorities) { smartlist_t *s = dirvote_compute_params(votes, method, total_authorities); tor_assert(s); @@ -1573,7 +1574,8 @@ test_dir_param_voting_lookup(void *arg) tt_int_op(1000, OP_EQ, dirvote_get_intermediate_param_value(lst, "ab", 1000)); tt_int_op(9, OP_EQ, dirvote_get_intermediate_param_value(lst, "abc", 1000)); - tt_int_op(99, OP_EQ, dirvote_get_intermediate_param_value(lst, "abcd", 1000)); + tt_int_op(99, OP_EQ, + dirvote_get_intermediate_param_value(lst, "abcd", 1000)); /* moomin appears twice. */ tt_int_op(-100, OP_EQ, diff --git a/src/test/test_shared_random.c b/src/test/test_shared_random.c index 95f8198..d001785 100644 --- a/src/test/test_shared_random.c +++ b/src/test/test_shared_random.c @@ -1263,3 +1263,4 @@ struct testcase_t sr_tests[] = { NULL, NULL }, END_OF_TESTCASES }; +

1 0

[tor/master] Windows open() returns eacces when eisdir would be sane
by nickm＠torproject.org 01 Jul '16

01 Jul '16

commit aa05dea5fff43c6185b0e6c17d7468ae9de6fce0 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jul 1 16:23:06 2016 -0400 Windows open() returns eacces when eisdir would be sane --- src/test/test_shared_random.c | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/src/test/test_shared_random.c b/src/test/test_shared_random.c index e5a7d21..95f8198 100644 --- a/src/test/test_shared_random.c +++ b/src/test/test_shared_random.c @@ -638,7 +638,11 @@ test_state_load_from_disk(void *arg) /* Try to load the directory itself. Should fail. */ ret = disk_state_load_from_disk_impl(dir); - tt_assert(ret == -EISDIR); +#ifdef _WIN32 + tt_int_op(ret, OP_EQ, -EACCES); +#else + tt_int_op(ret, OP_EQ, -EISDIR); +#endif /* State should be non-existent at this point. */ the_sr_state = get_sr_state();

1 0

[torspec/master] prop250: Update SRV construction to reflect the upstream code
by dgoulet＠torproject.org 01 Jul '16

01 Jul '16

commit 381699215439305d47edb1a9a8db09b561151dea Author: David Goulet <dgoulet(a)torproject.org> Date: Fri Jul 1 16:07:40 2016 -0400 prop250: Update SRV construction to reflect the upstream code Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- proposals/250-commit-reveal-consensus.txt | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/proposals/250-commit-reveal-consensus.txt b/proposals/250-commit-reveal-consensus.txt index d386dcb..e88d784 100644 --- a/proposals/250-commit-reveal-consensus.txt +++ b/proposals/250-commit-reveal-consensus.txt @@ -317,7 +317,7 @@ Supersedes: 225 HASHED_REVEALS = H(ID_a | R_a | ID_b | R_b | ..) - SRV = SHA3-256("shared-random" | INT_1(REVEAL_NUM) | INT_1(VERSION) | + SRV = SHA3-256("shared-random" | INT_8(REVEAL_NUM) | INT_4(VERSION) | HASHED_REVEALS | PREVIOUS_SRV) where the ID_a value is the identity key fingerprint of authority 'a' and R_a @@ -331,9 +331,6 @@ Supersedes: 225 To maintain consistent ordering in HASHED_REVEALS, all the ID_a | R_a pairs are ordered based on the R_a value in ascending order. - Because the number of reveals (REVEAL_NUM) is using a 1 byte value, it - imposes a hard limit of 255 authorities participating in the protocol. - 3.4. Bootstrapping Procedure As described in [CONS], two shared random values are required for the HSDir

1 0

[torspec/master] prop241: Updated status to Rejected
by dgoulet＠torproject.org 01 Jul '16

01 Jul '16

commit 7762f794764126473f45daeaf50d8b384634a0d6 Author: David Goulet <dgoulet(a)torproject.org> Date: Fri Jul 1 16:08:44 2016 -0400 prop241: Updated status to Rejected Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- proposals/000-index.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/proposals/000-index.txt b/proposals/000-index.txt index 062f782..486b0dd 100644 --- a/proposals/000-index.txt +++ b/proposals/000-index.txt @@ -161,7 +161,7 @@ Proposals by number: 238 Better hidden service stats from Tor relays [CLOSED] 239 Consensus Hash Chaining [DRAFT] 240 Early signing key revocation for directory authorities [DRAFT] -241 Resisting guard-turnover attacks [DRAFT] +241 Resisting guard-turnover attacks [REJECTED] 242 Better performance and usability for the MyFamily option [OPEN] 243 Give out HSDir flag only to relays with Stable flag [CLOSED] 244 Use RFC5705 Key Exporting in our AUTHENTICATE calls [ACCEPTED] @@ -200,7 +200,6 @@ Proposals by status: 231 Migrating authority RSA1024 identity keys [for 0.2.?] 239 Consensus Hash Chaining 240 Early signing key revocation for directory authorities - 241 Resisting guard-turnover attacks 245 Deprecating and removing the TAP circuit extension protocol 247 Defending Against Guard Discovery Attacks using Vanguards 248 Remove all RSA identity keys @@ -365,6 +364,7 @@ Proposals by status: 147 Eliminate the need for v2 directories in generating v3 directories [for 0.2.4.x] 175 Automatically promoting Tor clients to nodes 197 Message-based Inter-Controller IPC Channel + 241 Resisting guard-turnover attacks OBSOLETE: 127 Relaying dirport requests to Tor download site / website 131 Help users to verify they are using Tor

1 0

[torspec/master] prop250: Close proposal after upstream merge
by dgoulet＠torproject.org 01 Jul '16

01 Jul '16

commit 75dc7675f4e580e505bc0b75cd0a52a068bbc1d4 Author: David Goulet <dgoulet(a)torproject.org> Date: Fri Jul 1 16:09:16 2016 -0400 prop250: Close proposal after upstream merge Also, dir-spec.txt has been updated in a previous commit so we are done for now. Signed-off-by: David Goulet <dgoulet(a)torproject.org> --- proposals/000-index.txt | 4 ++-- proposals/250-commit-reveal-consensus.txt | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/proposals/000-index.txt b/proposals/000-index.txt index 486b0dd..23fc3dc 100644 --- a/proposals/000-index.txt +++ b/proposals/000-index.txt @@ -170,7 +170,7 @@ Proposals by number: 247 Defending Against Guard Discovery Attacks using Vanguards [DRAFT] 248 Remove all RSA identity keys [DRAFT] 249 Allow CREATE cells with >505 bytes of handshake data [DRAFT] -250 Random Number Generation During Tor Voting [DRAFT] +250 Random Number Generation During Tor Voting [CLOSED] 251 Padding for netflow record resolution reduction [DRAFT] 252 Single Onion Services [DRAFT] 253 Out of Band Circuit HMACs [DRAFT] @@ -204,7 +204,6 @@ Proposals by status: 247 Defending Against Guard Discovery Attacks using Vanguards 248 Remove all RSA identity keys 249 Allow CREATE cells with >505 bytes of handshake data - 250 Random Number Generation During Tor Voting 251 Padding for netflow record resolution reduction 252 Single Onion Services 253 Out of Band Circuit HMACs @@ -333,6 +332,7 @@ Proposals by status: 228 Cross-certifying identity keys with onion keys 238 Better hidden service stats from Tor relays 243 Give out HSDir flag only to relays with Stable flag + 250 Random Number Generation During Tor Voting SUPERSEDED: 112 Bring Back Pathlen Coin Weight 113 Simplifying directory authority administration diff --git a/proposals/250-commit-reveal-consensus.txt b/proposals/250-commit-reveal-consensus.txt index e88d784..3e701fc 100644 --- a/proposals/250-commit-reveal-consensus.txt +++ b/proposals/250-commit-reveal-consensus.txt @@ -2,7 +2,7 @@ Filename: 250-commit-reveal-consensus.txt Title: Random Number Generation During Tor Voting Authors: David Goulet, George Kadianakis Created: 2015-08-03 -Status: Draft +Status: Closed Supersedes: 225

1 0

[tor/master] Fix i386 conversion warnings
by nickm＠torproject.org 01 Jul '16

01 Jul '16

commit 1597c423844de4da82cde58c9162d05ff5b28b40 Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Jul 1 15:52:57 2016 -0400 Fix i386 conversion warnings --- src/or/shared_random.c | 10 ++++++---- src/test/test_shared_random.c | 12 ++++++------ 2 files changed, 12 insertions(+), 10 deletions(-) diff --git a/src/or/shared_random.c b/src/or/shared_random.c index 7a0273d..a7a2238 100644 --- a/src/or/shared_random.c +++ b/src/or/shared_random.c @@ -254,8 +254,9 @@ commit_decode(const char *encoded, sr_commit_t *commit) if (decoded_len != SR_COMMIT_LEN) { log_warn(LD_BUG, "SR: Commit from authority %s decoded length doesn't " - "match the expected length (%d vs %lu).", - sr_commit_get_rsa_fpr(commit), decoded_len, SR_COMMIT_LEN); + "match the expected length (%d vs %u).", + sr_commit_get_rsa_fpr(commit), decoded_len, + (unsigned)SR_COMMIT_LEN); goto error; } @@ -307,8 +308,9 @@ reveal_decode(const char *encoded, sr_commit_t *commit) if (decoded_len != SR_REVEAL_LEN) { log_warn(LD_BUG, "SR: Reveal from authority %s decoded length is " - "doesn't match the expected length (%d vs %lu)", - sr_commit_get_rsa_fpr(commit), decoded_len, SR_REVEAL_LEN); + "doesn't match the expected length (%d vs %u)", + sr_commit_get_rsa_fpr(commit), decoded_len, + (unsigned)SR_REVEAL_LEN); goto error; } diff --git a/src/test/test_shared_random.c b/src/test/test_shared_random.c index 141c12b..e5a7d21 100644 --- a/src/test/test_shared_random.c +++ b/src/test/test_shared_random.c @@ -302,7 +302,7 @@ test_sr_commit(void *arg) tt_assert(!tor_mem_is_zero((char *) our_commit->random_number, sizeof(our_commit->random_number))); /* Commit and reveal timestamp should be the same. */ - tt_int_op(our_commit->commit_ts, ==, our_commit->reveal_ts); + tt_u64_op(our_commit->commit_ts, ==, our_commit->reveal_ts); /* We should have a hashed reveal. */ tt_assert(!tor_mem_is_zero(our_commit->hashed_reveal, sizeof(our_commit->hashed_reveal))); @@ -404,14 +404,14 @@ test_encoding(void *arg) { /* Test the reveal encoded value. */ tt_int_op(0, ==, reveal_decode(encoded_reveal, &parsed_commit)); - tt_uint_op(ts, ==, parsed_commit.reveal_ts); + tt_u64_op(ts, ==, parsed_commit.reveal_ts); tt_mem_op(hashed_rand, OP_EQ, parsed_commit.random_number, sizeof(hashed_rand)); /* Test the commit encoded value. */ memset(&parsed_commit, 0, sizeof(parsed_commit)); tt_int_op(0, ==, commit_decode(encoded_commit, &parsed_commit)); - tt_uint_op(ts, ==, parsed_commit.commit_ts); + tt_u64_op(ts, ==, parsed_commit.commit_ts); tt_mem_op(encoded_commit, OP_EQ, parsed_commit.encoded_commit, sizeof(parsed_commit.encoded_commit)); tt_mem_op(hashed_reveal, OP_EQ, parsed_commit.hashed_reveal, @@ -803,7 +803,7 @@ test_sr_compute_srv(void *arg) /* Check the result against the test vector */ current_srv = sr_state_get_current_srv(); tt_assert(current_srv); - tt_int_op(current_srv->num_reveals, ==, 3); + tt_u64_op(current_srv->num_reveals, ==, 3); tt_str_op(hex_str((char*)current_srv->value, 32), ==, SRV_TEST_VECTOR); @@ -895,7 +895,7 @@ test_sr_get_majority_srv_from_votes(void *arg) set_num_srv_agreements(7); chosen_srv = get_majority_srv_from_votes(votes, 1); tt_assert(chosen_srv); - tt_int_op(chosen_srv->num_reveals, ==, 42); + tt_u64_op(chosen_srv->num_reveals, ==, 42); tt_mem_op(chosen_srv->value, OP_EQ, SRV_1, sizeof(chosen_srv->value)); done: @@ -919,7 +919,7 @@ test_utils(void *arg) memcpy(srv->value, srv_value, sizeof(srv->value)); dup_srv = srv_dup(srv); tt_assert(dup_srv); - tt_int_op(dup_srv->num_reveals, ==, srv->num_reveals); + tt_u64_op(dup_srv->num_reveals, ==, srv->num_reveals); tt_mem_op(dup_srv->value, OP_EQ, srv->value, sizeof(srv->value)); tor_free(srv); tor_free(dup_srv);

1 0

[torspec/master] Add shared randomness (prop250) info to dir-spec.txt .
by dgoulet＠torproject.org 01 Jul '16

01 Jul '16

commit 9949f649b0ce88d8acf6735b07d8840ff3690d78 Author: George Kadianakis <desnacked(a)riseup.net> Date: Fri Feb 26 12:58:17 2016 +0100 Add shared randomness (prop250) info to dir-spec.txt . --- dir-spec.txt | 54 ++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 54 insertions(+) diff --git a/dir-spec.txt b/dir-spec.txt index 8a8b583..2db035c 100644 --- a/dir-spec.txt +++ b/dir-spec.txt @@ -1664,6 +1664,51 @@ enough votes were counted for the consensus for an authoritative opinion to have been formed about their status. + "shared-rand-participate" NL + + [At most once for votes; does not occur in consensuses.] + + Denotes that the directory authority supports and can participate in the + shared random protocol. + + "shared-rand-commit" SP AlgName SP Identity SP Commit [SP Reveal] NL + + [Any number for votes; does not occur in consensuses.] + + AlgName ::= 1*(ALPHA / DIGIT / "_" / "-") + Identity ::= 40 * HEXDIG + Commit ::= Base64-encoded-data + Reveal ::= Base64-encoded-data + + A commit of a directory authority for the shared randomness protocol, + containing the commitment value and potentially also the reveal + value. AlgName is the hash algorithm that is used and Identity is the + authority's SHA1 identity fingerprint. Commit is the encoded commitment + value in base64. Reveal is optional and if it's set, it contains the + reveal value in base64. + + "shared-rand-previous-value" SP NumReveals SP Value NL + + [At most once.] + + NumReveals ::= An integer greater or equal to 0. + Value ::= Base64-encoded-data + + The previous shared random value. Value is the actual shared random + value encoded in base64. NumReveals is the number of commits used to + generate this SRV. + + "shared-rand-current-value" SP NumReveals SP Value NL + + [At most once.] + + NumReveals ::= An integer greater or equal to 0. + Value ::= Base64-encoded-data + + The current shared random value. Value is the actual shared random value + encoded in base64. NumReveals is the number of commits used to generate + this SRV. + "params" SP [Parameters] NL [At most once] @@ -1795,6 +1840,12 @@ Min: 0. Max: 1. Default: 0. First-appeared: 0.2.3.11-alpha + "AuthDirNumSRVAgreements" -- Minimum number of agreeing directory + authority votes required for a fresh shared random value to be written + in the consensus (this rule only applies on the first commit round of + the shared randomness protocol). + Min: 1. Max: INT32_MAX. Default: 2/3 of the total number of dirauth. + The authority section of a vote contains the following items, followed in turn by the authority's current key certificate: @@ -2406,6 +2457,9 @@ the "s" line for every relay whose listed Ed key does not reflect consensus. + * If consensus method 23 or later is used, authorities include + shared randomness protocol data on their votes and consensus. + The signatures at the end of a consensus document are sorted in ascending order by identity digest.

1 0

[torspec/master] Provide more information on the SR vote fields.
by dgoulet＠torproject.org 01 Jul '16

01 Jul '16

commit c4ae4dd31749dbb3e98182b1033ada21c07931d0 Author: George Kadianakis <desnacked(a)riseup.net> Date: Thu Jun 9 15:35:05 2016 +0300 Provide more information on the SR vote fields. based on arma's comments. Specifically: - Give example of algname. - Point to relevant sections of prop250 when needed. - Fix the max value of AuthDirNumSRVAgreements. --- dir-spec.txt | 45 +++++++++++++++++++++++++++++++++------------ 1 file changed, 33 insertions(+), 12 deletions(-) diff --git a/dir-spec.txt b/dir-spec.txt index 2db035c..3823da5 100644 --- a/dir-spec.txt +++ b/dir-spec.txt @@ -1680,12 +1680,18 @@ Commit ::= Base64-encoded-data Reveal ::= Base64-encoded-data - A commit of a directory authority for the shared randomness protocol, - containing the commitment value and potentially also the reveal - value. AlgName is the hash algorithm that is used and Identity is the - authority's SHA1 identity fingerprint. Commit is the encoded commitment - value in base64. Reveal is optional and if it's set, it contains the - reveal value in base64. + Denotes a directory authority commit for the shared randomness + protocol, containing the commitment value and potentially also the + reveal value. See sections [COMMITREVEAL] and [VALIDATEVALUES] of + proposal 250 on how to generate and validate these values. + + AlgName is the hash algorithm that is used (e.g. "sha3-256") and + Identity is the authority's SHA1 v3 identity fingerprint. Commit is the + encoded commitment value in base64. Reveal is optional and if it's set, + it contains the reveal value in base64. + + If a vote contains multiple commits from the same authority, the + receiver MUST only consider the first commit listed. "shared-rand-previous-value" SP NumReveals SP Value NL @@ -1694,9 +1700,17 @@ NumReveals ::= An integer greater or equal to 0. Value ::= Base64-encoded-data - The previous shared random value. Value is the actual shared random - value encoded in base64. NumReveals is the number of commits used to - generate this SRV. + The shared random value that was generated during the second-to-last + shared randomness protocol run. For example, if this document was + created on the 5th of November, this field carries the shared random + value generated during the protocol run of the 3rd of November. + + See section [SRCALC] of proposal 250 for instructions on how to compute + this value, and see section [CONS] for why we include old shared random + values in votes and consensus. + + Value is the actual shared random value encoded in base64. NumReveals + is the number of commits used to generate this SRV. "shared-rand-current-value" SP NumReveals SP Value NL @@ -1705,9 +1719,16 @@ NumReveals ::= An integer greater or equal to 0. Value ::= Base64-encoded-data - The current shared random value. Value is the actual shared random value - encoded in base64. NumReveals is the number of commits used to generate - this SRV. + The shared random value that was generated during the latest shared + randomness protocol run. For example, if this document was created on + the 5th of November, this field carries the shared random value + generated during the protocol run of the 4th of November + + See section [SRCALC] of proposal 250 for instructions on how to compute + this value given the active commits. + + Value is the actual shared random value encoded in base64. NumReveals + is the number of commits used to generate this SRV. "params" SP [Parameters] NL

1 0

[torspec/master] Add Version field in shared-rand-commit.
by dgoulet＠torproject.org 01 Jul '16

01 Jul '16

commit b140fdd115bd3e42b1fa6954eda609d5da883f55 Author: George Kadianakis <desnacked(a)riseup.net> Date: Thu Jun 9 15:37:55 2016 +0300 Add Version field in shared-rand-commit. This is the case in the current codebase. --- dir-spec.txt | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/dir-spec.txt b/dir-spec.txt index 3823da5..fb7ee9a 100644 --- a/dir-spec.txt +++ b/dir-spec.txt @@ -1671,10 +1671,11 @@ Denotes that the directory authority supports and can participate in the shared random protocol. - "shared-rand-commit" SP AlgName SP Identity SP Commit [SP Reveal] NL + "shared-rand-commit" SP Version SP AlgName SP Identity SP Commit [SP Reveal] NL [Any number for votes; does not occur in consensuses.] + Version ::= An integer greater or equal to 0. AlgName ::= 1*(ALPHA / DIGIT / "_" / "-") Identity ::= 40 * HEXDIG Commit ::= Base64-encoded-data @@ -1685,10 +1686,11 @@ reveal value. See sections [COMMITREVEAL] and [VALIDATEVALUES] of proposal 250 on how to generate and validate these values. - AlgName is the hash algorithm that is used (e.g. "sha3-256") and - Identity is the authority's SHA1 v3 identity fingerprint. Commit is the - encoded commitment value in base64. Reveal is optional and if it's set, - it contains the reveal value in base64. + Version is the current shared randomness protocol version. AlgName is + the hash algorithm that is used (e.g. "sha3-256") and Identity is the + authority's SHA1 v3 identity fingerprint. Commit is the encoded + commitment value in base64. Reveal is optional and if it's set, it + contains the reveal value in base64. If a vote contains multiple commits from the same authority, the receiver MUST only consider the first commit listed.

1 0