March 2019 - tor-commits - lists.torproject.org

[translation/donatepages-messagespot] Update translations for donatepages-messagespot
by translation＠torproject.org 01 Mar '19

01 Mar '19

commit 1adf2274cd1b313d3e1b4783154eecf90cdf8e77 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 1 19:45:27 2019 +0000 Update translations for donatepages-messagespot --- locale/fr/LC_MESSAGES/messages.po | 27 ++++++++++++++++----------- 1 file changed, 16 insertions(+), 11 deletions(-) diff --git a/locale/fr/LC_MESSAGES/messages.po b/locale/fr/LC_MESSAGES/messages.po index e26648e8d..883b617ca 100644 --- a/locale/fr/LC_MESSAGES/messages.po +++ b/locale/fr/LC_MESSAGES/messages.po @@ -1699,13 +1699,15 @@ msgid "" "amount you donated, your full name, the payment method you used and your " "country of origin." msgstr "" -"Pour traiter votre remboursement, nous aurons besoin de connaître la date de" -" votre don, le montant que vous avez donné, votre nom complet, la méthode de" -" paiement que vous avez utilisée et votre pays d’origine." +"Pour traiter votre remboursement, nous devrons connaître la date de votre " +"don, son montant, votre nom complet, le mode de paiement que vous avez " +"utilisé ainsi que votre pays d’origine." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:466 msgid "Please also tell us why you're asking for a refund." -msgstr "Veuillez également nous dire pourquoi vous demandez un remboursement." +msgstr "" +"Veuillez également nous informer de la raison de votre demande de " +"remboursement." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:468 msgid "" @@ -1713,10 +1715,10 @@ msgid "" " to be made in a specific way, so we may need additional information from " "you in order to process yours." msgstr "" -"Veuillez noter que certaines méthodes de paiement ne prennent pas en charge " -"les remboursements, ou exigent qu’ils soient effectués d’une manière " -"spécifique, de sorte que nous pourrions avoir besoin de renseignements " -"supplémentaires de votre part afin de traiter les vôtres." +"Veuillez noter que certains modes de paiement n’accepteront pas les " +"remboursements ou exigeront qu’ils soient effectués d’une certaine façon. " +"Ainsi nous pourrions avoir besoin de renseignements supplémentaires de votre" +" part afin de traiter les vôtres." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:474 msgid "Can I donate by mail?" @@ -1732,8 +1734,11 @@ msgid "" "Our mailing address is The Tor Project, 217 First Avenue South #4903, " "Seattle WA 98194, USA" msgstr "" -"Notre adresse postale est The Tor Project, 217 First Avenue South #4903, " -"Seattle WA 98194, USA" +"Notre adresse postale est :\n" +"The Tor Project\n" +"217 First Avenue South #4903\n" +"Seattle WA 98194\n" +"États-Unis d’Amérique" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:486 msgid "Do you accept cash donations?" @@ -1745,7 +1750,7 @@ msgstr "Oui" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:496 msgid "Does Tor Project accept matching donations?" -msgstr "Le Projet Tor accepte-t-il des dons de contrepartie ?" +msgstr "Le Projet Tor accepte-t-il les dons jumelés ?" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:500 msgid ""

1 0

[translation/donatepages-messagespot_completed] Update translations for donatepages-messagespot_completed
by translation＠torproject.org 01 Mar '19

01 Mar '19

commit 6a45760d72832a7009600ccde1b59666ebb92dc4 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 1 19:15:34 2019 +0000 Update translations for donatepages-messagespot_completed --- locale/fr/LC_MESSAGES/messages.po | 43 ++++++++++++++++++++------------------- 1 file changed, 22 insertions(+), 21 deletions(-) diff --git a/locale/fr/LC_MESSAGES/messages.po b/locale/fr/LC_MESSAGES/messages.po index 1bc9dbabb..e26648e8d 100644 --- a/locale/fr/LC_MESSAGES/messages.po +++ b/locale/fr/LC_MESSAGES/messages.po @@ -26,7 +26,7 @@ msgstr "Politique de confidentialité de Tor" #: tmp/cache_locale/ad/ad05838d90eae883761f0bcec6c27d77959c6e2884e8abf6c4aec89d7a741ea9.php:44 msgid "Donor privacy policy" -msgstr "Politique de confidentialité au sujet des donateurs" +msgstr "Politique de confidentialité relative aux donateurs" #: tmp/cache_locale/ad/ad05838d90eae883761f0bcec6c27d77959c6e2884e8abf6c4aec89d7a741ea9.php:58 msgid "" @@ -1595,9 +1595,9 @@ msgid "" "do anything else that would publicly identify you as someone who has " "donated." msgstr "" -"Cela signifie que nous n’afficherons pas votre nom sur notre site Web, que " -"nous ne vous remercierons pas sur Twitter et que nous ne ferons rien d’autre" -" pour vous identifier publiquement comme une personne qui a fait un don." +"Cela signifie que nous ne publierons pas votre nom sur notre site Web, ne " +"vous remercierons pas sur Twitter, ni ne ferons quoi que ce soit qui vous " +"reconnaîtrait comme étant un donateur." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:417 msgid "" @@ -1613,16 +1613,16 @@ msgid "" "It's important to me that my donation be tax-deductible, but I don't pay " "taxes in the United States." msgstr "" -"Il est important pour moi que mon don soit déductible du revenu imposable, " -"mais je ne paie pas d’impôt aux États-Unis." +"Je tiens à ce que mon don soit déductible du revenu imposable, mais je ne " +"paie pas d’impôt aux États-Unis." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:427 msgid "" "Right now, we can only offer tax-deductibility to donors who pay taxes in " "the United States." msgstr "" -"À l’heure actuelle, nous ne pouvons offrir la déductibilité fiscale qu’aux " -"donateurs qui paient des impôts aux États-Unis." +"À l’heure actuelle, nous ne pouvons offrir la déductibilité du revenu " +"imposable qu’aux donateurs qui paient des impôts aux États-Unis." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:429 msgid "" @@ -1630,9 +1630,9 @@ msgid "" "different country, let us know and we will try to offer tax-deductibility in" " your country in future." msgstr "" -"S’il est important pour vous que vos dons soient déductibles du revenu " -"imposable dans un autre pays, faites-le-nous savoir et nous essaierons " -"d’offrir la déductibilité du revenu imposable dans votre pays à l’avenir." +"Si vous tenez à ce que vos dons soient déductibles du revenu imposable dans " +"un autre pays, faites-le-nous savoir et nous essaierons d’offrir la " +"déductibilité du revenu imposable dans votre pays à l’avenir." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:431 msgid "" @@ -1645,16 +1645,16 @@ msgstr "" "Ou, si vous êtes en Allemagne, en France ou en Suède, <a class=\"hyperlinks " "links\" target=\"_blank\" " "href=\"https://www.torproject.org/docs/faq.html.en#RelayDonations\">ces " -"organismes soutiennent le réseau Tor</a> et peuvent être en mesure de vous " -"offrir une déduction fiscale pour votre don." +"organismes soutiennent le réseau Tor</a> et seront peut-être à même de vous " +"offrir la déductibilité du revenu imposable pour votre don." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:437 msgid "" "What if I don't want to use credit card or PayPal? Is there another way I " "can donate?" msgstr "" -"Que faire si je ne veux pas utiliser ma carte de crédit ou PayPal ? Y a-t-il" -" un autre moyen de faire un don ?" +"Et si je ne veux pas utiliser une carte de crédit ou PayPal, puis-je faire " +"faire un don d’une autre façon ?" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:441 msgid "" @@ -1662,13 +1662,14 @@ msgid "" "options.html.en\" class=\"hyperlinks links\" target=\"_blank\">other ways " "you can donate.</a>" msgstr "" -"Oui ! Voici une liste <a href=\"https://www.torproject.org/donate/donate-" +"Oui ! Voici une liste <a href=\"https://www.torproject.org/donate/donate-" "options.html.en\" class=\"hyperlinks links\" target=\"_blank\">d’autres " "façons de faire un don.</a>" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:448 msgid "What is your donor privacy policy?" -msgstr "Quelle est votre politique de confidentialité ?" +msgstr "" +"Quelle est votre politique de confidentialité relative aux donateurs ?" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:452 msgid "" @@ -1676,8 +1677,8 @@ msgid "" "href=\"/%langcode%/privacy-policy\">donor privacy policy</a>." msgstr "" "Voici la <a class=\"hyperlinks links\" target=\"_blank\" href=\"/%langcode" -"%/privacy-policy\">politique de confidentialité des donateurs</a> du Projet " -"Tor.." +"%/privacy-policy\">politique de confidentialité relative aux donateurs</a> " +"du Projet Tor.." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:458 msgid "What is your refund policy?" @@ -1688,8 +1689,8 @@ msgid "" "If you want your donation refunded, please tell us by emailing giving(at)torproject.org." msgstr "" -"Si vous souhaitez être remboursé de votre don, veuillez nous le faire savoir" -" en nous envoyant un courriel à l’adresse giving(at)torproject.org." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:464

1 0

[translation/donatepages-messagespot] Update translations for donatepages-messagespot
by translation＠torproject.org 01 Mar '19

01 Mar '19

commit 19cc4dc799ee3de5381e1f633f0cce1ef8715d2c Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 1 19:15:27 2019 +0000 Update translations for donatepages-messagespot --- locale/fr/LC_MESSAGES/messages.po | 43 ++++++++++++++++++++------------------- 1 file changed, 22 insertions(+), 21 deletions(-) diff --git a/locale/fr/LC_MESSAGES/messages.po b/locale/fr/LC_MESSAGES/messages.po index 1bc9dbabb..e26648e8d 100644 --- a/locale/fr/LC_MESSAGES/messages.po +++ b/locale/fr/LC_MESSAGES/messages.po @@ -26,7 +26,7 @@ msgstr "Politique de confidentialité de Tor" #: tmp/cache_locale/ad/ad05838d90eae883761f0bcec6c27d77959c6e2884e8abf6c4aec89d7a741ea9.php:44 msgid "Donor privacy policy" -msgstr "Politique de confidentialité au sujet des donateurs" +msgstr "Politique de confidentialité relative aux donateurs" #: tmp/cache_locale/ad/ad05838d90eae883761f0bcec6c27d77959c6e2884e8abf6c4aec89d7a741ea9.php:58 msgid "" @@ -1595,9 +1595,9 @@ msgid "" "do anything else that would publicly identify you as someone who has " "donated." msgstr "" -"Cela signifie que nous n’afficherons pas votre nom sur notre site Web, que " -"nous ne vous remercierons pas sur Twitter et que nous ne ferons rien d’autre" -" pour vous identifier publiquement comme une personne qui a fait un don." +"Cela signifie que nous ne publierons pas votre nom sur notre site Web, ne " +"vous remercierons pas sur Twitter, ni ne ferons quoi que ce soit qui vous " +"reconnaîtrait comme étant un donateur." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:417 msgid "" @@ -1613,16 +1613,16 @@ msgid "" "It's important to me that my donation be tax-deductible, but I don't pay " "taxes in the United States." msgstr "" -"Il est important pour moi que mon don soit déductible du revenu imposable, " -"mais je ne paie pas d’impôt aux États-Unis." +"Je tiens à ce que mon don soit déductible du revenu imposable, mais je ne " +"paie pas d’impôt aux États-Unis." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:427 msgid "" "Right now, we can only offer tax-deductibility to donors who pay taxes in " "the United States." msgstr "" -"À l’heure actuelle, nous ne pouvons offrir la déductibilité fiscale qu’aux " -"donateurs qui paient des impôts aux États-Unis." +"À l’heure actuelle, nous ne pouvons offrir la déductibilité du revenu " +"imposable qu’aux donateurs qui paient des impôts aux États-Unis." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:429 msgid "" @@ -1630,9 +1630,9 @@ msgid "" "different country, let us know and we will try to offer tax-deductibility in" " your country in future." msgstr "" -"S’il est important pour vous que vos dons soient déductibles du revenu " -"imposable dans un autre pays, faites-le-nous savoir et nous essaierons " -"d’offrir la déductibilité du revenu imposable dans votre pays à l’avenir." +"Si vous tenez à ce que vos dons soient déductibles du revenu imposable dans " +"un autre pays, faites-le-nous savoir et nous essaierons d’offrir la " +"déductibilité du revenu imposable dans votre pays à l’avenir." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:431 msgid "" @@ -1645,16 +1645,16 @@ msgstr "" "Ou, si vous êtes en Allemagne, en France ou en Suède, <a class=\"hyperlinks " "links\" target=\"_blank\" " "href=\"https://www.torproject.org/docs/faq.html.en#RelayDonations\">ces " -"organismes soutiennent le réseau Tor</a> et peuvent être en mesure de vous " -"offrir une déduction fiscale pour votre don." +"organismes soutiennent le réseau Tor</a> et seront peut-être à même de vous " +"offrir la déductibilité du revenu imposable pour votre don." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:437 msgid "" "What if I don't want to use credit card or PayPal? Is there another way I " "can donate?" msgstr "" -"Que faire si je ne veux pas utiliser ma carte de crédit ou PayPal ? Y a-t-il" -" un autre moyen de faire un don ?" +"Et si je ne veux pas utiliser une carte de crédit ou PayPal, puis-je faire " +"faire un don d’une autre façon ?" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:441 msgid "" @@ -1662,13 +1662,14 @@ msgid "" "options.html.en\" class=\"hyperlinks links\" target=\"_blank\">other ways " "you can donate.</a>" msgstr "" -"Oui ! Voici une liste <a href=\"https://www.torproject.org/donate/donate-" +"Oui ! Voici une liste <a href=\"https://www.torproject.org/donate/donate-" "options.html.en\" class=\"hyperlinks links\" target=\"_blank\">d’autres " "façons de faire un don.</a>" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:448 msgid "What is your donor privacy policy?" -msgstr "Quelle est votre politique de confidentialité ?" +msgstr "" +"Quelle est votre politique de confidentialité relative aux donateurs ?" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:452 msgid "" @@ -1676,8 +1677,8 @@ msgid "" "href=\"/%langcode%/privacy-policy\">donor privacy policy</a>." msgstr "" "Voici la <a class=\"hyperlinks links\" target=\"_blank\" href=\"/%langcode" -"%/privacy-policy\">politique de confidentialité des donateurs</a> du Projet " -"Tor.." +"%/privacy-policy\">politique de confidentialité relative aux donateurs</a> " +"du Projet Tor.." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:458 msgid "What is your refund policy?" @@ -1688,8 +1689,8 @@ msgid "" "If you want your donation refunded, please tell us by emailing giving(at)torproject.org." msgstr "" -"Si vous souhaitez être remboursé de votre don, veuillez nous le faire savoir" -" en nous envoyant un courriel à l’adresse giving(at)torproject.org." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:464

1 0

[translation/donatepages-messagespot_completed] Update translations for donatepages-messagespot_completed
by translation＠torproject.org 01 Mar '19

01 Mar '19

commit 172ccd4da38275a74b240a85ea057a1b98899d27 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 1 18:45:34 2019 +0000 Update translations for donatepages-messagespot_completed --- locale/fr/LC_MESSAGES/messages.po | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/locale/fr/LC_MESSAGES/messages.po b/locale/fr/LC_MESSAGES/messages.po index 52e07e7fe..1bc9dbabb 100644 --- a/locale/fr/LC_MESSAGES/messages.po +++ b/locale/fr/LC_MESSAGES/messages.po @@ -143,8 +143,8 @@ msgstr "" msgid "" "We will never publicly identify you as a donor without your permission." msgstr "" -"Nous ne vous désignerons jamais publiquement comme étant donateur sans votre" -" permission." +"Nous ne vous présenterons jamais publiquement comme étant donateur sans " +"votre permission." #: tmp/cache_locale/ad/ad05838d90eae883761f0bcec6c27d77959c6e2884e8abf6c4aec89d7a741ea9.php:96 msgid "We do not publish, sell, trade, or rent any information about you." @@ -1517,7 +1517,7 @@ msgid "" "Is the Tor Project required to identify me as a donor to the United States " "government, or to any other authority?" msgstr "" -"Le Projet Tor doit-il me désigner comme étant donateur auprès du " +"Le Projet Tor doit-il me reconnaître comme étant donateur auprès du " "gouvernement des États-Unis ou de toute autre autorité ?" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:391 @@ -1546,7 +1546,7 @@ msgid "" "We are not required to identify donors to any other organization or " "authority, and we do not." msgstr "" -"Nous ne sommes tenus de désigner les donateurs auprès d’aucun autre " +"Nous ne sommes tenus de reconnaître les donateurs auprès d’aucun autre " "organisme ou autorité, et nous ne le faisons pas." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:397 @@ -1562,7 +1562,7 @@ msgid "" "In your privacy policy, you say you will never publicly identify me as a " "donor without my permission." msgstr "" -"Dans votre politique de confidentialité, vous dites que vous ne désignerez " +"Dans votre politique de confidentialité, vous dites que vous ne présenterez " "jamais publiquement comme étant donateur sans ma permission." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:405 @@ -1578,15 +1578,15 @@ msgid "" "If you donate to the Tor Project, there will be some people at the Tor " "Project who know about your donation." msgstr "" -"Si vous faites un don au Projet Tor, il y aura des gens au Projet Tor qui " -"seront au courant de votre don." +"Si vous faites un don au Projet Tor, certaines personnes du Projet Tor " +"seront au courant." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:413 msgid "" "However, we will never publicly identify you as a donor, unless you have " "given us permission to do so." msgstr "" -"Cependant, nous ne vous désignerons jamais publiquement comme étant " +"Cependant, nous ne vous présenterons jamais publiquement comme étant " "donateur, à moins que vous nous ayez permis de le faire." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:415

1 0

[translation/donatepages-messagespot] Update translations for donatepages-messagespot
by translation＠torproject.org 01 Mar '19

01 Mar '19

commit 29a7b8104e72be35fad909dfdf9c28d6a1a06ec1 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 1 18:45:27 2019 +0000 Update translations for donatepages-messagespot --- locale/fr/LC_MESSAGES/messages.po | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/locale/fr/LC_MESSAGES/messages.po b/locale/fr/LC_MESSAGES/messages.po index 52e07e7fe..1bc9dbabb 100644 --- a/locale/fr/LC_MESSAGES/messages.po +++ b/locale/fr/LC_MESSAGES/messages.po @@ -143,8 +143,8 @@ msgstr "" msgid "" "We will never publicly identify you as a donor without your permission." msgstr "" -"Nous ne vous désignerons jamais publiquement comme étant donateur sans votre" -" permission." +"Nous ne vous présenterons jamais publiquement comme étant donateur sans " +"votre permission." #: tmp/cache_locale/ad/ad05838d90eae883761f0bcec6c27d77959c6e2884e8abf6c4aec89d7a741ea9.php:96 msgid "We do not publish, sell, trade, or rent any information about you." @@ -1517,7 +1517,7 @@ msgid "" "Is the Tor Project required to identify me as a donor to the United States " "government, or to any other authority?" msgstr "" -"Le Projet Tor doit-il me désigner comme étant donateur auprès du " +"Le Projet Tor doit-il me reconnaître comme étant donateur auprès du " "gouvernement des États-Unis ou de toute autre autorité ?" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:391 @@ -1546,7 +1546,7 @@ msgid "" "We are not required to identify donors to any other organization or " "authority, and we do not." msgstr "" -"Nous ne sommes tenus de désigner les donateurs auprès d’aucun autre " +"Nous ne sommes tenus de reconnaître les donateurs auprès d’aucun autre " "organisme ou autorité, et nous ne le faisons pas." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:397 @@ -1562,7 +1562,7 @@ msgid "" "In your privacy policy, you say you will never publicly identify me as a " "donor without my permission." msgstr "" -"Dans votre politique de confidentialité, vous dites que vous ne désignerez " +"Dans votre politique de confidentialité, vous dites que vous ne présenterez " "jamais publiquement comme étant donateur sans ma permission." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:405 @@ -1578,15 +1578,15 @@ msgid "" "If you donate to the Tor Project, there will be some people at the Tor " "Project who know about your donation." msgstr "" -"Si vous faites un don au Projet Tor, il y aura des gens au Projet Tor qui " -"seront au courant de votre don." +"Si vous faites un don au Projet Tor, certaines personnes du Projet Tor " +"seront au courant." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:413 msgid "" "However, we will never publicly identify you as a donor, unless you have " "given us permission to do so." msgstr "" -"Cependant, nous ne vous désignerons jamais publiquement comme étant " +"Cependant, nous ne vous présenterons jamais publiquement comme étant " "donateur, à moins que vous nous ayez permis de le faire." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:415

1 0

[torspec/master] New version of Proposal 295 from Tomer Ashur, Orr Dunkelman, and Atul Luykx
by nickm＠torproject.org 01 Mar '19

01 Mar '19

commit 8edd7803d98c6ecbf286275aa38cd48125e1521a Author: Nick Mathewson <nickm(a)torproject.org> Date: Fri Mar 1 11:58:25 2019 -0500 New version of Proposal 295 from Tomer Ashur, Orr Dunkelman, and Atul Luykx --- proposals/000-index.txt | 4 +- proposals/295-relay-crypto-with-adl.txt | 402 ++++++++++++++++++++++++++++++++ proposals/295-relay-crypto-with-atl.txt | 263 --------------------- 3 files changed, 404 insertions(+), 265 deletions(-) diff --git a/proposals/000-index.txt b/proposals/000-index.txt index 8b01392..7cc5806 100644 --- a/proposals/000-index.txt +++ b/proposals/000-index.txt @@ -215,7 +215,7 @@ Proposals by number: 292 Mesh-based vanguards [ACCEPTED] 293 Other ways for relays to know when to publish [CLOSED] 294 TLS 1.3 Migration [DRAFT] -295 Using ADL-GCM for relay cryptography (solving the crypto-tagging attack) [OPEN] +295 Using ADL for relay cryptography (solving the crypto-tagging attack) [OPEN] 296 Have Directory Authorities expose raw bandwidth list files [OPEN] 297 Relaxing the protover-based shutdown rules [CLOSED] 298 Putting family lines in canonical form [CLOSED] @@ -250,7 +250,7 @@ Proposals by status: 285 Directory documents should be standardized as UTF-8 287 Reduce circuit lifetime without overloading the network 289 Authenticating sendme cells to mitigate bandwidth attacks - 295 Using ADL-GCM for relay cryptography (solving the crypto-tagging attack) + 295 Using ADL for relay cryptography (solving the crypto-tagging attack) 296 Have Directory Authorities expose raw bandwidth list files 299 Preferring IPv4 or IPv6 based on IP Version Failure Count ACCEPTED: diff --git a/proposals/295-relay-crypto-with-adl.txt b/proposals/295-relay-crypto-with-adl.txt new file mode 100644 index 0000000..f88f3cf --- /dev/null +++ b/proposals/295-relay-crypto-with-adl.txt @@ -0,0 +1,402 @@ +Filename: 295-relay-crypto-with-adl.txt +Title: Using ADL for relay cryptography (solving the crypto-tagging attack) +Author: Tomer Ashur, Orr Dunkelman, Atul Luykx +Created: 22 Feb 2018 +Last-Modified: 1 March 2019 +Status: Open + + +0. Context + + Although Crypto Tagging Attacks were identified already in the + original Tor design, it was not before the rise of the + Procyonidae in 2012 that their severity was fully realized. In + Proposal 202 (Two improved relay encryption protocols for Tor + cells) Nick Mathewson discussed two approaches to stymie tagging + attacks and generally improve Tor's cryptography. In Proposal 261 + (AEZ for relay cryptography) Mathewson puts forward a concrete + approach which uses the tweakable wide-block cipher AEZ. + + This proposal suggests an alternative approach to Proposal 261 + using the notion of Release (of) Unverified Plaintext (RUP) + security. It describes an improved algorithm for circuit + encryption based on CTR-mode which is already used in Tor, and an + additional component for hashing. + + Incidentally, and similar to Proposal 261, this proposal employs + the ENCODE-then-ENCIPHER approach thus it improves Tor's E2E + integrity by using (sufficient) redundancy. + + For more information about the scheme and a security proof for + its RUP-security see + + Tomer Ashur, Orr Dunkelman, Atul Luykx: Boosting + Authenticated Encryption Robustness with Minimal + Modifications. CRYPTO (3) 2017: 3-33 + + available online at https://eprint.iacr.org/2017/239 . + + For authentication between the OP and the edge node we use + the PIV scheme: https://eprint.iacr.org/2013/835 + +2. Preliminaries + +2.1 Motivation + + For motivation, see proposal 202. + +2.2. Notation + + Symbol Meaning + ------ ------- + M Plaintext + C_I Ciphertext + CTR Counter Mode + N_I A de/encryption nonce (to be used in CTR-mode) + T_I A tweak (to be used to de/encrypt the nonce) + T'_I A running digest + ^ XOR + || Concatenation + (This is more readable than a single | but must be adapted + before integrating the proposal into tor-spec.txt) + +2.3. Security parameters + + HASH_LEN -- The length of the hash function's output, in bytes. + + PAYLOAD_LEN -- The longest allowable cell payload, in bytes. (509) + + DIG_KEY_LEN -- The key length used to digest messages (e.g., + using GHASH). Since GHASH is only defined for 128-bit keys, we + recommend DIG_KEY_LEN = 128. + + ENC_KEY_LEN -- The key length used for encryption (e.g., AES). We + recommend ENC_KEY_LEN = 128. + +2.4. Key derivation (replaces Section 5.2.2) + + For newer KDF needs, Tor uses the key derivation function HKDF + from RFC5869, instantiated with SHA256. The generated key + material is: + + K = K_1 | K_2 | K_3 | ... + + where, if H(x,t) denotes HMAC_SHA256 with value x and key t, + and m_expand denotes an arbitrarily chosen value, + and INT8(i) is an octet with the value "i", then + K_1 = H(m_expand | INT8(1) , KEY_SEED ) + and K_(i+1) = H(K_i | m_expand | INT8(i+1) , KEY_SEED ), + in RFC5869's vocabulary, this is HKDF-SHA256 with info == + m_expand, salt == t_key, and IKM == secret_input. + + When used in the ntor handshake a string of key material is + generated and is used in the following way: + + Length Purpose Notation + ------ ------- -------- + HASH_LEN forward digest IV DF * + HASH_LEN backward digest IV DB * + ENC_KEY_LEN encryption key Kf + ENC_KEY_LEN decryption key Kb + DIG_KEY_LEN forward digest key Khf + DIG_KEY_LEN backward digest key Khb + ENC_KEY_LEN forward tweak key Ktf + ENC_KEY_LEN backward tweak key Ktb + DIGEST_LEN nonce to use in the * + hidden service protocol + + * I am not sure that we need these any longer. + + Excess bytes from K are discarded. + +2.6. Ciphers + + For hashing(*) we use GHASH with a DIG_KEY_LEN-bit key. We write + this as Digest(K,M) where K is the key and M the message to be + hashed. + + We use AES with an ENC_KEY_LEN-bit key. For AES encryption + (resp., decryption) we write E(K,X) (resp., D(K,X)) where K is an + ENC_KEY_LEN-bit key and X the block to be encrypted (resp., + decrypted). + + For a stream cipher, unless otherwise specified, we use + ENC_KEY_LEN-bit AES in counter mode, with a nonce that is + generated as explained below. We write this as Encrypt(K,N,X) + (resp., Decrypt(K,N,X)) where K is the key, N the nonce, and X + the message to be encrypted (resp., decrypted). + + (*) The terms hash and digest are used interchangeably. + +3. Routing relay cells + +3.1. Forward Direction + + The forward direction is the direction that CREATE/CREATE2 cells + are sent. + +3.1.1. Routing from the Origin + + Let n denote the integer representing the destination node. For + I = 1...n+1, T'_{I} is initialized to the 128-bit string consisting + entirely of '0's. When an OP sends a relay cell, they prepare the + cell as follows: + + The OP prepares the authentication part of the message: + + C_{n+1} = M + T_{n+1} = Digest(Khf_n,T'_{n+1}||C_{n+1}) + N_{n+1} = T_{n+1} ^ E(Ktf_n,T_{n+1} ^ 0) + T'_{n+1} = T_{n+1} + + Then, the OP prepares the multi-layered encryption: + + For I=n...1: + C_I = Encrypt(Kf_I,N_{I+1},C_{I+1}) + T_I = Digest(Khf_I,T'_I||C_I) + N_I = T_I ^ E(Ktf_I,T_I ^ N_{I+1}) + T'_I = T_I + + The OP sends C_1 and N_1 to node 1. + +3.1.2. Relaying Forward at Onion Routers + + When a forward relay cell is received by OR I, it decrypts the + payload with the stream cipher, as follows: + + 'Forward' relay cell: + + T_I = Digest(Khf_I,T'_I||C_I) + N_{I+1} = T_I ^ D(Ktf_I,T_I ^ N_I) + C_{I+1} = Decrypt(Kf_I,N_{I+1},C_I) + T'_I = T_I + + The OR then decides whether it recognizes the relay cell as + described below. If the OR recognizes the cell, it processes the + contents of the relay cell. Otherwise, it passes C_{I+1}||N_{I+1} + along the circuit if the circuit continues. + + For more information, see section 4 below. + +3.2. Backward Direction + + The backward direction is the opposite direction from + CREATE/CREATE2 cells. + +3.2.1. Relaying Backward at Onion Routers + + When a backward relay cell is received by OR I, it encrypts the + payload with the stream cipher, as follows: + + 'Backward' relay cell: + + T_I = Digest(Khb_I,T'_I||C_{I+1}) + N_I = T_I ^ E(Ktb_I,T_I ^ N_{I+1}) + C_I = Encrypt(Kb_I,N_I,C_{I+1}) + T'_I = T_I + + with C_{n+1} = M and N_{n+1}=0. Once encrypted, the node passes + C_I and N_I along the circuit towards the OP. + +3.2.2. Routing to the Origin + + When a relay cell arrives at an OP, the OP decrypts the payload + with the stream cipher as follows: + + OP receives relay cell from node 1: + + For I=1...n, where n is the end node on the circuit: + C_{I+1} = Decrypt(Kb_I,N_I,C_I) + T_I = Digest(Khb_I,T'_I||C_{I+1}) + N_{I+1} = T_I ^ D(Ktb_I,T_I ^ N_I) + T'_I = T_I + + If the payload is recognized (see Section 4.1), + then: + + The sending node is I. Stop, process the + payload and authenticate. + +4. Application connections and stream management + +4.1. Relay cells + + Within a circuit, the OP and the end node use the contents of + RELAY packets to tunnel end-to-end commands and TCP connections + ("Streams") across circuits. End-to-end commands can be initiated + by either edge; streams are initiated by the OP. + + The payload of each unencrypted RELAY cell consists of: + + Relay command [1 byte] + 'Recognized' [2 bytes] + StreamID [2 bytes] + Length [2 bytes] + Data [PAYLOAD_LEN-23 bytes] + + The 'recognized' field is used as a simple indication that the + cell is still encrypted. It is an optimization to avoid + calculating expensive digests for every cell. When sending cells, + the unencrypted 'recognized' MUST be set to zero. + + When receiving and decrypting cells the 'recognized' will always + be zero if we're the endpoint that the cell is destined for. For + cells that we should relay, the 'recognized' field will usually + be nonzero, but will accidentally be zero with P=2^-16. + + If the cell is recognized, the node moves to verifying the + authenticity of the message as follows(*): + + forward direction (executed by the end node): + + T_{n+1} = Digest(Khf_n,T'_{n+1}||C_{n+1}) + Tag = T_{n+1} ^ D(Ktf_n,T_{n+1} ^ N_{n+1}) + T'_{n+1} = T_{n+1} + + The message is authenticated (i.e., M = C_{n+1}) if + and only if Tag = 0 + + backward direction (executed by the OP): + + The message is authenticated (i.e., C_{n+1} = M) if + and only if N_{n+1} = 0 + + + The old Digest field is removed since sufficient information for + authentication is now included in the nonce part of the payload. + + (*) we should consider dropping the 'recognized' field + altogether and always try to authenticate. Note that this is + an optimization question and the crypto works just as well + either way. + + The 'Length' field of a relay cell contains the number of bytes + in the relay payload which contain real payload data. The + remainder of the payload is padding bytes. + +4.2. Appending the encrypted nonce and dealing with version-homogenic + and version-heterogenic circuits + + When a cell is prepared to be routed from the origin (see Section + 3.1.1) the encrypted nonce N is appended to the encrypted cell + (occupying the last 16 bytes of the cell). If the cell is + prepared to be sent to a node supporting the new protocol, S is + combined with other sources to generate the layer's + nonce. Otherwise, if the node only supports the old protocol, n + is still appended to the encrypted cell (so that following nodes + can still recover their nonce), but a synchronized nonce (as per + the old protocol) is used in CTR-mode. + + When a cell is sent along the circuit in the 'backward' + direction, nodes supporting the new protocol always assume that + the last 16 bytes of the input are the nonce used by the previous + node, which they process as per Section 3.2.1. If the previous + node also supports the new protocol, these cells are indeed the + nonce. If the previous node only supports the old protocol, these + bytes are either encrypted padding bytes or encrypted data. + +5. Security + +5.1. Resistance to crypto-tagging attacks + + A crypto-tagging attack involves a circuit with two colluding + nodes and at least one honest node between them. The attack works + when one node makes a change to the cell (tagging) in a way that + can be undone by the other colluding party. In between, the + tagged cell is processed by honest nodes which do not detect the + change. The attack is possible due to the malleability property + of CTR-mode: a change to a ciphertext bit effects only the + respective plaintext bit in a predicatble way. This proposal + frustrates the crypto-tagging attack by linking the nonce to the + encrypted message such that any change to the ciphertext results + in a random nonce and hence, random plaintext. + + Let us consider the following 3-hop scenario: the entry and end + nodes are malicious and colluding and the middle node is honest. + +5.1.1. forward direction + + Suppose that node I tags the ciphertext part of the message + (C'_{I+1} != C_{I+1}) then forwards it to the next node (I+1). As + per Section 3.1.2. Node I+1 digests C'_{I+1} to generate T_{I+1} + and N_{I+2}. Since C'_{I+2} is different than it should be, so + are the resulting T_{I+1} and N_{I+2}. Hence, decrypting C'_{I+2} + using these values results in a random string for C_{I+2}. Since + C_{I+2} is now just a random string, it is decrypted into a + random string and cannot be 'recognized' nor + authenticated. Furthermore, since C'_{I+1} is different than what + it should be, T'_{I+1} (i.e., the running digest of the middle + node) is now out of sync with that of the OP, which means that + all future cells sent through this node will decrypt into garbage + (random strings). + + Likewise, suppose that instead of tagging the ciphertext, Node I + node tags the encrypted nonce N'_{I+1} != N_{I+1}. Now, when Node + I+1 digests the payload the tweak T_{I+1} is find, but using it + to decrypt N'_{I+1} again results in a random nonce for + N_{I+2}. This random nonce is used to decrypt C_{I+1} into a + random C'_{I+2} which is not recognized by the end node. Since + C_{I+2} is now a random string, the running digest of the end + node is now out of sync, which prevents the end node from + decrypting further cells. + +5.1.2. Backward direction + + In the backward direction the tagging is done by Node I+2 + untagging by the Node I. Suppose first that Node I+2 tags the + ciphertext C_{I+2} and sends it to Node I+1. As per Section + 3.2.1, Node I+1 first digests C_{I+2} and uses the resulting + T_{I+1} to generate a nonce N_{I+1}. From this it is clear that + any change introduced by Node I+2 influences the entire payload + and cannot be removed by Node I. + + Unlike in Section 5.1.1., the cell is blindly delivered by Node I + to the OP which decrypts it. However, since the payload leaving + the end node was modified, the message cannot be authenticated by + the OP which can be trusted to tear down the circuit. + + Suppose now that tagging is done by Node I+2 to the nonce part of + the payload, i.e., N_{I+2}. Since this value is encrypted by Node + I+1 to generate its own nonce N_{I+1}, again, a random nonce is + used which affects the entire keystream of CTR-mode. The cell + again cannot be authenticated by the OP and the circuit is torn + down. + + We note that the end node can modify the plain message before + ever encrypting it and this cannot be discovered by the Tor + protocol. This vulnerability is outside the scope of this + proposal and users should always use TLS to make sure that their + application data is encrypted before it enters the Tor network. + +5.2. End-to-end authentication + + Similar to the old protocol, this proposal only offers end-to-end + authentication rather than per-hop authentication. However, + unlike the old protocol, the ADL-construction is non-malleable + and hence, once a non-authentic message was processed by an + honest node supporting the new protocol, it is effectively + destroyed for all nodes further down the circuit. This is because + the nonce used to de/encrypt all messages is linked to (a digest + of) the payload data. + + As a result, while honest nodes cannot detect non-authentic + messages, such nodes still destroy the message thus invalidating + its authentication tag when it is checked by edge nodes. As a + result, security against crypto-tagging attacks is ensured as + long as an honest node supporting the new protocol processes the + message between two dishonest ones. + +5.3 The Running Digest + + Unlike the old protocol, the running digest is now computed as + the output of a GHASH call instead of a hash function call + (SHA256). Since GHASH does not provide the same type of security + guarantees as SHA256, it is worth discussing why security is not + lost from computing the running digest differently. + + The running digets is used to ensure that if the same payload is + encrypted twice, then the resulting ciphertext does not remain + the same. Therefore, all that is needed is that the digest should + repeat with low probability. GHASH is a universal hash function, + hence it gives such a guarantee assuming its key is chosen + uniformly at random. diff --git a/proposals/295-relay-crypto-with-atl.txt b/proposals/295-relay-crypto-with-atl.txt deleted file mode 100644 index d2a24db..0000000 --- a/proposals/295-relay-crypto-with-atl.txt +++ /dev/null @@ -1,263 +0,0 @@ -Filename: 295-relay-crypto-with-atl.txt -Title: Using ADL-GCM for relay cryptography (solving the crypto-tagging attack) -Author: Tomer Ashur, Orr Dunkelman, Atul Lyukx -Created: 09 Apr 2018 -Status: Open - -0. Context - - Although Crypto Tagging Attacks were identified already in the - original Tor design, it was not before the rise of the Procyonidae in - 2012 that their severity was fully realized. In Proposal 202 (Two - improved relay encryption protocols for Tor cells) Nick Mathewson - discussed two approaches to stymie tagging attacks and generally - improve Tor's cryptography. In Proposal 261 (AEZ for relay - cryptography) Mathewson puts forward a concrete approach which uses - the tweakable wide-block cipher AEZ. - -1. Motivation - - For motivations, see proposal 202. - -2. Summary and preliminaries - - This proposal suggests an alternative approach to Proposal 261 using - the notion of Release (of) Unverified Plaintexts (RUP-security). It - describes an improved algorithm for circuit encryption based on - CTR-mode which is already used in Tor, and an additional component - for hashing. When this additional component is GHash, a GCM-based - solution can be used from the OpenSSL library. - - Incidentally, and similar to Proposal 261, this proposal employs the - ENCODE-then-ENCIPHER approach thus it improves Tor's E2E integrity by - using (sufficiently enough) redundancy. - - For more information about the scheme and a security proof for its - RUP-security see - - Tomer Ashur, Orr Dunkelman, Atul Luykx: Boosting Authenticated - Encryption Robustness with Minimal Modifications. CRYPTO (3) - 2017: 3-33 available online at https://eprint.iacr.org/2017/239 . - -2.1. Cryptographic algorithms - - As an encryption primitive we use AES. We denote one call to the - primitive by E(·), e.g., - - Z = E_k(X) - - where k is a K-bit key, X is the input to AES and Z is the output. We - omit k where it is irrelevant or is clear from context. While we - propose to set K=256 to ensure long-term post-quantum resistance, we - stress that the solution also works for other key lengths. - - To encrypt, we use AES is counter mode and a nonce N to produce a - random bit stream, e.g., - - CTR(N) = E(N)||E(N+1)||...||E(N+l) = z_1||z_2||...||Z_{n+1} = Z - - and XOR Z with the message M to produce the ciphertext C, e.g., - - C = Z ^ M - - For authentication, we use the universal hash function GHASH and a - key k, e.g., - - T = H(K||X) = H_k(X) - - where K is a 256-bit key, X an arbitrary length string, and T a - unique authentication tag for X. While we propose to set K=256 to - ensure long-term post-quantum resistance, we stress that the solution - works for any universal hash function as well as for keys of length - K!=256. - -3. The proposed solution - -3.1 An overview of the proposed solution - - Noting that in CTR-mode the nonce is essential for the - encryption/decryption operations, the proposed solution is based on - linking the nonce and the transmitted data in such a way that any - change to the data (e.g., through a tagging attack) randomizes the - nonce and results in a random value Z' != Z for CTR(N' != N). - -3.1.1. 'Forward' direction (same direction as CREATE): - - When preparing a message to be sent in the forward direction, the - client is responsible for encrypting all layers. The client starts by - digesting the message to create a synthetic tweak T_0 = H_{k_fM}(M) - and uses this tweak to encrypt an all-zero string to create a - synthetic IV: S_0 = T_0 ^ E_{k_fE}(0 ^ T_0). - - The message and the synthetic IV (i.e., M||S_0) are passed as input - to the first encryption layer which uses S_0 to produce the random - stream Z = CTR_k1(S_0) and the ciphertext C = Z ^ M. Then, a tweak T - = H_k2(C) is generated by digesting the ciphertext of this - layer. Finally, S_0 is encrypted using AES and the tweak T to produce - an encrypted nonce S = T ^ E_k3(N ^ T) which is appended to the the - ciphertext and is used as the nonce for the next encryption layer. - - After encrypting 3 times, the client sends C||S to the guard. Whereas - the protocol previously required that the nonce be kept in sync - between each node and the client, this is no longer required as it - can now be recovered from C||S. To decrypt, the node first computes T - = H_k2(C) then uses it to obtain S = D_k3(S ^ T) ^ T. Finally, CTR(S) - is used to decrypt C into M. The once-decrypted nonce is appended to - the data and M||S is sent to the next node which repeats this - process. - - The exit verifies the integrity of the message by digesting it and - using the resulting T to decrypt S_0 into N. If N=0, the message is - authenticated. Otherwise, if the message has been changed by an - adversary, N!=0 and the circuit is destroyed. - -3.1.2 'Back' direction (opposite direction from CREATE): - - When sending back a message from the exit to the client, each node - adds an additional layer of encryption. The exit starts by digesting - the message to create a synthetic tweak T_0 = H_{k_bM}(M) and uses - this tweak to encrypt an all-zero string to create a synthetic IV: - S_0 = T_0 ^ E_{k_bE}(0 ^ T_0). The synthetic IV is then used to - produce the random stream Z = CTR_k1(S_0) and uses that to encrypt - the plaintext through C = Z ^ M. The nonce is appended to the - ciphertext and C||S_0 is sent to the next node. - - Receiving a message from the exit, the middle starts by producing a - tweak T = H_k2(C). The tweak is then used to encrypt the nonce - through S = T ^ E_k3(N ^ T) which is then used to produce the random - stream Z' = CTR_k1(S). Finally, the message is encrypted via C' = Z' - ^ C and the encrypted nonce is appended to C'. The message C'||S is - sent to the next node which repeats this procedure. - - When the message arrives at the client, the client peels each layer - using the nonce that is appended at the end of the message. The - decrypted layer is used to compute the tweak T = H_k2(P), which is - used to decrypt this layer's nonce into the next layer's nonce. - - The client verifies the integrity of the message by digesting it and using - the resulting T to decrypt S_0 into N. If N=0, the message is - authenticated. Otherwise, if the message has been changed by an adversary, - N!=0 and the circuit is destroyed. - -3.2 Circuit management - -3.2.1 Creating circuits - - The general process of creating a circuit remains the same (see - tor-spec.txt), except for step 5 where instead of creating a pair of - keys (kf_1,kb_1) for forward and backward communication, - respectively, 2 triplets of keys (kf_1,kf_2,kf_3) and - (kb_1,kb_2,kb_3) are created for communication in the forward and - backward directions, respectively. Two additional pairs of - "authentication keys" (k_fM,k_fE) and (k_bM,k_bE) are created between - the client and the exit in the forward and backward directions, - respectively. - - note: the keys can be created by running KDF-RFC5869 3 times in each - direction, or by running it once in each direction to create a - master-key and derive the rest as subkeys from this master key - -3.2.2 Routing relay cells - - When an OR receives a RELAY or RELAY_EARLY cell, it checks the cell's - circID and determines whether it has a corresponding circuit along - that connection. If not, the OR drops the cell. - - Otherwise, if the OR is not at the OP edge of the circuit (that is, - either an 'exit node' or a non-edge node), it de/encrypts the payload - with the stream cipher, as follows (the message structure is C||S): - - 'Forward' relay cell (same direction as CREATE) - (input structure is: C||S): - - 1. T = H_{kf_2}(T'||C); digest ciphertext (T' is a running digest - of all previous cells, i.e., last round's T) - - 2. N = T ^ D_{kf_3}(S ^ T); decrypt nonce - - 3. M = CTR_{kf_1}(N) ^ C; decrypt message - (output structure is M||N) - - 'Back' relay cell (opposite direction from CREATE) - (input structure is: M||N): - - 1. T = H_{kb_2}(T'||M); digest ciphertext (T' is a running digest - of all previous cells, i.e., last round's T) - - 2. S = T ^ E_{kb_3}(N ^ T); encrypt nonce - - 3. C = CTR_{kb_1}(S) ^ M; encrypt message - (output structure is C||S) - - Note that in counter mode, decrypt (D) and encrypt (E) are the same - operation. - - The OR then decides whether it recognizes the relay cell, by - inspecting the payload as described in Section 4.1 below. If the OR - recognizes the cell, it processes the contents of the relay cell. - Otherwise, it passes the decrypted relay cell along the circuit if - the circuit continues. If the OR at the end of the circuit - encounters an unrecognized relay cell, an error has occurred: the OR - sends a DESTROY cell to tear down the circuit. - -4. Application connections and stream management - -4.1 Relay cells - - Within a circuit, the OP and the exit node use the contents of RELAY - packets to tunnel end-to-end commands and TCP connections ("Streams") - across circuits. End-to-end commands can be initiated by either - edge; streams are initiated by the OP. - - The payload of each unencrypted RELAY cell consists of: - Relay command [1 byte] - 'Recognized' [2 bytes] - StreamID [2 bytes] - Length [2 bytes] - Data [PAYLOAD_LEN-23 bytes] - - The 'recognized' field is used for a simple indication if the cell - still encrypted or not. When sending cells, the unencrypted - 'recognized' MUST be set to zero. - - When receiving and decrypting cells the 'recognized' will always be - zero if we're the endpoint that the cell is destined for. For cells - that we should relay, the 'recognized' field will usually be nonzero, - but will accidentally be zero with P=2^-32. - - The old Digest field is removed, since sufficient information for - authentication is now included in the all-zero string used to create the - nonce for the first encryption layer. - - The 'Length' field of a relay cell contains the number of bytes in - the relay payload which contain real payload data. The remainder of - the payload is padded with NUL bytes. - -4.2 Appending the encrypted nonce - - When a cell is prepared by the client to be sent in the 'forward' - direction, as explained in Section 3.2.2, the encrypted nonce S is - appended to the encrypted cell (occupying the last 16 bytes of the - cell). If the cell is prepared to be sent to a node supporting the - new protocol, S is used as the nonce for the next round's - encryption. Otherwise, if the next node only supports the old - protocol, S is still appended to the encrypted cell, but a - synchronized nonce (as per the old protocol) is used for encryption. - - When a cell is sent along the circuit in the 'backward' direction, - nodes supporting the new protocol always assume that the last 16 - bytes of the input are the nonce used by the previous node, which - they process as per Section 3.2.2. If the previous node also supports - the new protocol, these cells are indeed the nonce. If the previous - node only supports the old protocol, these bytes are either encrypted - NUL bytes or encrypted data. - -4.3 Authenticating the message - - End-to-end authentication is performed in both directions in the same - way. Once the final layer of encryption is removed, the - message-to-be-authenticated is digested and this digest is used to - decrypt the nonce used in this layer. If the decrypted nonce is - all-zero, the message is authentic. Otherwise, if a change was made - to the ciphertext or the encrypted nonce somewhere along the circuit, - the nonce decrypts into a random value and the circuit is destroyed.

1 0

[translation/support-portal_completed] Update translations for support-portal_completed
by translation＠torproject.org 01 Mar '19

01 Mar '19

commit 300491bd7afe0e45c395d9b958d9007a2988dbaa Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 1 16:50:27 2019 +0000 Update translations for support-portal_completed --- contents+fr.po | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/contents+fr.po b/contents+fr.po index f4ba922f8..2e6910e58 100644 --- a/contents+fr.po +++ b/contents+fr.po @@ -1684,7 +1684,7 @@ msgid "" ")](#internet-service-provider-isp) or other authority is actively blocking " "connections to the [Tor network](#tor-/-tor-network/-core-tor)." msgstr "" -"Ceci peut être utile dans les situations où un [Fournisseur d’Accès Internet" +"Cela peut être utile dans les situations où un [fournisseur d’accès Internet" " (FAI)](#internet-service-provider-isp) ou une autre autorité bloque " "activement les connexions au [réseau Tor](#tor-/-tor-network/-core-tor)." @@ -1913,7 +1913,7 @@ msgid "" "[bridges](#bridge)." msgstr "" "Scramblesuit est similaire à obfs4 mais a un ensemble différent de " -"[bridges](#bridge)." +"[ponts](#bridge)." #: https//support.torproject.org/glossary/ #: (content/glossary/contents+en.lrquestion.description)

1 0

[translation/support-portal] Update translations for support-portal
by translation＠torproject.org 01 Mar '19

01 Mar '19

commit 4961d7410e27e1578705c89fa87043f87d5270d9 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 1 16:50:19 2019 +0000 Update translations for support-portal --- contents+fr.po | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/contents+fr.po b/contents+fr.po index f4ba922f8..2e6910e58 100644 --- a/contents+fr.po +++ b/contents+fr.po @@ -1684,7 +1684,7 @@ msgid "" ")](#internet-service-provider-isp) or other authority is actively blocking " "connections to the [Tor network](#tor-/-tor-network/-core-tor)." msgstr "" -"Ceci peut être utile dans les situations où un [Fournisseur d’Accès Internet" +"Cela peut être utile dans les situations où un [fournisseur d’accès Internet" " (FAI)](#internet-service-provider-isp) ou une autre autorité bloque " "activement les connexions au [réseau Tor](#tor-/-tor-network/-core-tor)." @@ -1913,7 +1913,7 @@ msgid "" "[bridges](#bridge)." msgstr "" "Scramblesuit est similaire à obfs4 mais a un ensemble différent de " -"[bridges](#bridge)." +"[ponts](#bridge)." #: https//support.torproject.org/glossary/ #: (content/glossary/contents+en.lrquestion.description)

1 0

[translation/donatepages-messagespot_completed] Update translations for donatepages-messagespot_completed
by translation＠torproject.org 01 Mar '19

01 Mar '19

commit 79ad037d17ef0306b60a38a35f9231c5504ad2e2 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 1 16:45:34 2019 +0000 Update translations for donatepages-messagespot_completed --- locale/fr/LC_MESSAGES/messages.po | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/locale/fr/LC_MESSAGES/messages.po b/locale/fr/LC_MESSAGES/messages.po index fbbe3df7c..52e07e7fe 100644 --- a/locale/fr/LC_MESSAGES/messages.po +++ b/locale/fr/LC_MESSAGES/messages.po @@ -1546,7 +1546,7 @@ msgid "" "We are not required to identify donors to any other organization or " "authority, and we do not." msgstr "" -"Nous ne sommes pas tenus de désigner les donateurs auprès d’aucun autre " +"Nous ne sommes tenus de désigner les donateurs auprès d’aucun autre " "organisme ou autorité, et nous ne le faisons pas." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:397 @@ -1554,8 +1554,8 @@ msgid "" "(Also, if you wanted, you could give us $4,999 in late 2018 and $4,999 in " "early 2019.)" msgstr "" -"(Si vous le désirez, vous pourriez nous donner aussi 4 999 $ à la fin de " -"2018 et 4 999 $ au début de 2019)." +"(Aussi, si vous le souhaitiez, vous pourriez nous faire un don de 4 999 $ " +"vers la fin de 2018 et de 4 999 $ au début de 2019.)" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:403 msgid "" @@ -1901,7 +1901,7 @@ msgstr "" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:580 msgid "Can I donate my time?" -msgstr "Puis-je donner de mon temps ?" +msgstr "Puis-je faire don de mon temps ?" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:586 msgid "" @@ -1954,12 +1954,13 @@ msgid "" "If your company sells cloud services, perhaps it could donate these to Tor: " "We use them in some anti-censorship projects." msgstr "" -"Si votre entreprise vend des services cloud, elle pourrait peut-être les " -"donner à Tor : Nous les utilisons dans certains projets anti-censure." +"Si votre entreprise vend des services nuagiques, elle pourrait peut-être en " +"faire don à Tor : nous les utilisons dans le cadre de certains projets " +"anticensures." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:610 msgid "You don't support my preferred way to donate." -msgstr "Vous ne soutenez pas ma façon préférée de donner." +msgstr "Vous ne proposez pas ma façon préférée de faire un don." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:612 msgid "Can I recommend a new donation method to you?"

1 0

[translation/donatepages-messagespot] Update translations for donatepages-messagespot
by translation＠torproject.org 01 Mar '19

01 Mar '19

commit bdfb54775803bd075a40cdc16aaa5bcbdd3dd8a9 Author: Translation commit bot <translation(a)torproject.org> Date: Fri Mar 1 16:45:28 2019 +0000 Update translations for donatepages-messagespot --- locale/fr/LC_MESSAGES/messages.po | 15 ++++++++------- 1 file changed, 8 insertions(+), 7 deletions(-) diff --git a/locale/fr/LC_MESSAGES/messages.po b/locale/fr/LC_MESSAGES/messages.po index fbbe3df7c..52e07e7fe 100644 --- a/locale/fr/LC_MESSAGES/messages.po +++ b/locale/fr/LC_MESSAGES/messages.po @@ -1546,7 +1546,7 @@ msgid "" "We are not required to identify donors to any other organization or " "authority, and we do not." msgstr "" -"Nous ne sommes pas tenus de désigner les donateurs auprès d’aucun autre " +"Nous ne sommes tenus de désigner les donateurs auprès d’aucun autre " "organisme ou autorité, et nous ne le faisons pas." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:397 @@ -1554,8 +1554,8 @@ msgid "" "(Also, if you wanted, you could give us $4,999 in late 2018 and $4,999 in " "early 2019.)" msgstr "" -"(Si vous le désirez, vous pourriez nous donner aussi 4 999 $ à la fin de " -"2018 et 4 999 $ au début de 2019)." +"(Aussi, si vous le souhaitiez, vous pourriez nous faire un don de 4 999 $ " +"vers la fin de 2018 et de 4 999 $ au début de 2019.)" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:403 msgid "" @@ -1901,7 +1901,7 @@ msgstr "" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:580 msgid "Can I donate my time?" -msgstr "Puis-je donner de mon temps ?" +msgstr "Puis-je faire don de mon temps ?" #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:586 msgid "" @@ -1954,12 +1954,13 @@ msgid "" "If your company sells cloud services, perhaps it could donate these to Tor: " "We use them in some anti-censorship projects." msgstr "" -"Si votre entreprise vend des services cloud, elle pourrait peut-être les " -"donner à Tor : Nous les utilisons dans certains projets anti-censure." +"Si votre entreprise vend des services nuagiques, elle pourrait peut-être en " +"faire don à Tor : nous les utilisons dans le cadre de certains projets " +"anticensures." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:610 msgid "You don't support my preferred way to donate." -msgstr "Vous ne soutenez pas ma façon préférée de donner." +msgstr "Vous ne proposez pas ma façon préférée de faire un don." #: tmp/cache_locale/4a/4ab2d928dab25aeb8c96bb2d1c2ad651173d6c029f40a442edf6925bfd038cd2.php:612 msgid "Can I recommend a new donation method to you?"

1 0