- tor-commits - lists.torproject.org

[torspec/main] ext-orport-spec: Add 'Table of contents'
by dgoulet＠torproject.org 27 Sep '21

27 Sep '21

commit e1412094ee00cefcaa9650ee74ddc26f2ea356ce Author: Oleh Franchuk <0x00.gear(a)gmail.com> Date: Wed Aug 25 16:57:38 2021 +0300 ext-orport-spec: Add 'Table of contents' --- ext-orport-spec.txt | 14 ++++++++++++++ 1 file changed, 14 insertions(+) diff --git a/ext-orport-spec.txt b/ext-orport-spec.txt index 8008c4f..ec88244 100644 --- a/ext-orport-spec.txt +++ b/ext-orport-spec.txt @@ -1,6 +1,20 @@ Extended ORPort for pluggable transports George Kadianakis, Nick Mathewson +Table of Contents + + 1. Overview + 2. Establishing a connection and authenticating. + 2.1. Authentication type: SAFE_COOKIE + 2.1.2. Cookie-file format + 2.1.3. SAFE_COOKIE Protocol specification + 3. The extended ORPort protocol + 3.1. Protocol + 3.2. Command descriptions + 3.2.1. USERADDR + 3.2.2. TRANSPORT + 4. Security Considerations + 1. Overview This document describes the "Extended ORPort" protocol, a wrapper

1 0

[torspec/main] glossary: Add 'Table of contents'
by dgoulet＠torproject.org 27 Sep '21

27 Sep '21

commit cd7b43ae4fe6f9dbf865da829aa80ebb2c77e53e Author: Oleh Franchuk <0x00.gear(a)gmail.com> Date: Wed Sep 22 14:56:40 2021 +0300 glossary: Add 'Table of contents' --- glossary.txt | 21 +++++++++++++++++++++ 1 file changed, 21 insertions(+) diff --git a/glossary.txt b/glossary.txt index 6debe20..68de376 100644 --- a/glossary.txt +++ b/glossary.txt @@ -11,6 +11,27 @@ This glossary is not a design document; it is only a reference. This glossary is a work-in-progress; double-check its definitions before citing them authoritatively. ;) +Table of Contents + + 0. Preliminaries + 1.0. Commonly used Tor configuration terms + 2.0. Tor network components + 2.1. Relays, aka OR (onion router) + 2.1.1. Specific roles + 2.2. Client, aka OP (onion proxy) + 2.3. Authorities + 2.4. Hidden Service + 2.5. Circuit + 2.6. Edge connection + 2.7. Consensus + 2.8. Descriptor + 3.0. Tor network protocols + 3.1. Link handshake + 3.2. Circuit handshake + 3.3. Hidden Service Protocol + 3.4. Directory Protocol + 4.0. General network definitions + 0. Preliminaries The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL

1 0

[torspec/main] dir-list-spec: Add 'Table of contents'
by dgoulet＠torproject.org 27 Sep '21

27 Sep '21

commit da38430e3da87dda9e8e13ee66d96885ffa40812 Author: Oleh Franchuk <0x00.gear(a)gmail.com> Date: Wed Aug 25 16:41:52 2021 +0300 dir-list-spec: Add 'Table of contents' --- dir-list-spec.txt | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) diff --git a/dir-list-spec.txt b/dir-list-spec.txt index 3557721..c2d83f4 100644 --- a/dir-list-spec.txt +++ b/dir-list-spec.txt @@ -2,6 +2,30 @@ Tor Directory List Format Tim Wilson-Brown (teor) +Table of Contents + + 1. Scope and Preliminaries + 1.1. Format Overview + 1.2. Acknowledgements + 1.3. Format Versions + 1.4. Future Plans + 2. Format Details + 2.1. Nonterminals + 2.2. List Header + 2.2.1. List Header Format + 2.3. List Generation + 2.3.1. List Generation Format + 2.4. Directory Entry + 2.4.1. Directory Entry Format + 3. Usage Considerations + 3.1. Caching + 3.2. Retrieving Directory Information + 3.3. Fallback Reliability + A.1. Sample Data + A.1.1. Sample Fallback List Header + A.1.2. Sample Fallback List Generation + A.1.3. Sample Fallback Entries + 1. Scope and Preliminaries This document describes the format of Tor's directory lists, which are

1 0

[torspec/main] gettor-spec: Add 'Table of contents'
by dgoulet＠torproject.org 27 Sep '21

27 Sep '21

commit 089d8e7a8dfd06b66a79591509e3711a245f6fd2 Author: Oleh Franchuk <0x00.gear(a)gmail.com> Date: Wed Aug 25 17:22:22 2021 +0300 gettor-spec: Add 'Table of contents' --- gettor-spec.txt | 12 ++++++++++++ 1 file changed, 12 insertions(+) diff --git a/gettor-spec.txt b/gettor-spec.txt index f40b298..a4959b4 100644 --- a/gettor-spec.txt +++ b/gettor-spec.txt @@ -2,6 +2,18 @@ GetTor specification Jacob Appelbaum +Table of Contents + + 0. Preface + 1. Overview + 2. Implementation + 2.1. Reference implementation + 3. SMTP transport + 3.1. SMTP transport security considerations + 3.2. SMTP transport privacy considerations + 4. Other transports + 5. Implementation suggestions + 0. Preface This document describes GetTor and how to properly implementation GetTor.

1 0

[torspec/main] padding-spec: Add 'Table of contents'
by dgoulet＠torproject.org 27 Sep '21

27 Sep '21

commit d523f2e8678356625a7b5221de3d0d9d25ad1504 Author: Oleh Franchuk <0x00.gear(a)gmail.com> Date: Wed Sep 22 16:01:16 2021 +0300 padding-spec: Add 'Table of contents' --- padding-spec.txt | 20 ++++++++++++++++++++ 1 file changed, 20 insertions(+) diff --git a/padding-spec.txt b/padding-spec.txt index f6356ed..825f1d7 100644 --- a/padding-spec.txt +++ b/padding-spec.txt @@ -16,6 +16,26 @@ the anonymity and load-balancing implications of their choices. "OPTIONAL" in this document are to be interpreted as described in RFC 2119. +Table of Contents + + 1. Overview + 2. Connection-level padding + 2.1. Background + 2.2. Implementation + 2.3. Padding Cell Timeout Distribution Statistics + 2.4. Maximum overhead bounds + 2.5. Reducing or Disabling Padding via Negotiation + 2.6. Consensus Parameters Governing Behavior + 3. Circuit-level padding + 3.1. Circuit Padding Negotiation + 3.2. Circuit Padding Machine Message Management + 3.3. Obfuscating client-side onion service circuit setup + 3.3.1. Common general circuit construction sequences + 3.3.2. Client-side onion service introduction circuit obfuscation + 3.3.3. Client-side rendezvous circuit hiding + 3.3.4. Circuit setup machine overhead + 3.4. Circuit padding consensus parameters + A. Acknowledgments 1. Overview

1 0

[torspec/main] param-spec: Add 'Table of contents'
by dgoulet＠torproject.org 27 Sep '21

27 Sep '21

commit c830fbfec60b0f5fb787c272cd847c05cc0eacc5 Author: Oleh Franchuk <0x00.gear(a)gmail.com> Date: Wed Sep 22 16:06:26 2021 +0300 param-spec: Add 'Table of contents' --- param-spec.txt | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/param-spec.txt b/param-spec.txt index 4da8ee1..b2882a6 100644 --- a/param-spec.txt +++ b/param-spec.txt @@ -4,6 +4,22 @@ This file lists the recognized parameters that can appear on the "params" line of a directory consensus. +Table of Contents + + 1. Network protocol parameters + 2. Performance-tuning parameters + 3. Voting-related parameters + 4. Circuit-build-timeout parameters + 5. Directory-related parameters + 6. Pathbias parameters + 7. Relay behavior + 8. V3 onion service parameters + 9. Denial-of-service parameters + 10. Padding-related parameters + 11. Guard-related parameters + 12. Relay behavior + X. Obsolete parameters + 1. Network protocol parameters "circwindow" -- the default package window that circuits should be

1 0

[torspec/main] guard-spec: Add 'Table of contents'
by dgoulet＠torproject.org 27 Sep '21

27 Sep '21

commit ca689579b451358f945627af846e6937763c6df6 Author: Oleh Franchuk <0x00.gear(a)gmail.com> Date: Wed Sep 22 15:15:08 2021 +0300 guard-spec: Add 'Table of contents' --- guard-spec.txt | 35 +++++++++++++++++++++++++++++++++-- 1 file changed, 33 insertions(+), 2 deletions(-) diff --git a/guard-spec.txt b/guard-spec.txt index 4f021b7..883c2bf 100644 --- a/guard-spec.txt +++ b/guard-spec.txt @@ -6,6 +6,37 @@ Ola Bini Nick Mathewson +Table of Contents + + 1. Introduction and motivation + 2. State instances + 3. Circuit Creation, Entry Guard Selection (1000 foot view) + 3.1 Path selection + 3.1.1 Managing entry guards + 3.1.2 Middle and exit node selection + 3.2 Circuit Building + 4. The algorithm. + 4.0. The guards listed in the current consensus. [Section:GUARDS] + 4.1. The Sampled Guard Set. [Section:SAMPLED] + 4.2. The Usable Sample [Section:FILTERED] + 4.3. The confirmed-guard list. [Section:CONFIRMED] + 4.4. The Primary guards [Section:PRIMARY] + 4.5. Retrying guards. [Section:RETRYING] + 4.6. Selecting guards for circuits. [Section:SELECTING] + 4.7. When a circuit fails. [Section:ON_FAIL] + 4.8. When a circuit succeeds [Section:ON_SUCCESS] + 4.9. Updating the list of waiting circuits [Section:UPDATE_WAITING] + 4.10. Whenever we get a new consensus. [Section:ON_CONSENSUS] + 4.11. Deciding whether to generate a new circuit. + 4.12. When we are missing descriptors. + A. Appendices + A.0. Acknowledgements + A.1. Parameters with suggested values. [Section:PARAM_VALS] + A.2. Random values [Section:RANDOM] + A.3. Why not a sliding scale of primaryness? [Section:CVP] + A.4. Controller changes + A.5. Persistent state format + 1. Introduction and motivation Tor uses entry guards to prevent an attacker who controls some @@ -771,7 +802,7 @@ A.3. Why not a sliding scale of primaryness? [Section:CVP] simple to make to the code after we implement the simpler version of the algorithm described above. -A.3. Controller changes +A.4. Controller changes We will add to control-spec.txt a new possible circuit state, GUARD_WAIT, that can be given as part of circuit events and GETINFO responses about @@ -779,7 +810,7 @@ A.3. Controller changes but we will not use it because a circuit with a better guard might become built too. -A.4. Persistent state format +A.5. Persistent state format The persistent state format doesn't need to be part of this specification, since different implementations can do it

1 0

[chutney/main] update support for arti
by nickm＠torproject.org 27 Sep '21

27 Sep '21

commit 043c3b1ec545715cfb9a1bfef9aaf21daa4fe33f Author: Trinity Pointard <trinity.pointard(a)gmail.com> Date: Sun Sep 26 15:24:32 2021 +0200 update support for arti --- lib/chutney/TorNet.py | 47 +++++++++++++++++++++++++++++------------------ 1 file changed, 29 insertions(+), 18 deletions(-) diff --git a/lib/chutney/TorNet.py b/lib/chutney/TorNet.py index 950806e..873681d 100644 --- a/lib/chutney/TorNet.py +++ b/lib/chutney/TorNet.py @@ -795,7 +795,7 @@ class LocalNodeBuilder(NodeBuilder): and AlternateBridgeAuthority lines for this Node, appropriately. Non-authorities return "".""" if not self._env['authority']: - return ("","") + return ("",("", "")) datadir = self._env['dir'] certfile = Path(datadir, 'keys', "authority_certificate") @@ -841,7 +841,7 @@ class LocalNodeBuilder(NodeBuilder): self._env['dirport'], self._env['fingerprint']) # generate arti configuartion if supported - arti_lines = "" + arti_lines = ("","") if arti: addrs = '"%s:%s"' % (self._env['ip'], self._env['orport']) if self._env['ipv6_addr'] is not None: @@ -852,18 +852,10 @@ class LocalNodeBuilder(NodeBuilder): "orports": addrs, "nick": self._env['nick'], "v3id": v3id } - arti_lines = """ -[[network.fallback_cache]] -rsa_identity = "{fp}" -ed_identity = "{ed_fp}" -orports = [ {orports} ] - -[[network.authority]] -name = "{nick}" -v3ident = "{v3id}" - -""".format(**elts) - + arti_lines = ( + """ {{rsa_identity = "{fp}", ed_identity = "{ed_fp}", orports = [{orports}]}},\n""".format(**elts), + """ {{name = "{nick}", v3ident = "{v3id}"}},\n""".format(**elts), + ) return (authlines, arti_lines) def _getBridgeLines(self): @@ -2233,6 +2225,7 @@ class Network(object): self._requirements = [] self._dfltEnv = defaultEnviron self._nextnodenum = 0 + self.dir = "" def _addNode(self, n): n.setNodenum(self._nextnodenum) @@ -2301,6 +2294,7 @@ class Network(object): else: raise nodeslink.symlink_to(newnodesdir) + self.dir = newnodesdir def _checkConfig(self): for n in self._nodes: @@ -2332,7 +2326,8 @@ class Network(object): network = self altauthlines = [] bridgelines = [] - artilines = [] + arti_fallback_lines = [] + arti_auth_lines = [] all_builders = [ n.getBuilder() for n in self._nodes ] builders = [ b for b in all_builders if b._env['config_phase'] == phase ] @@ -2343,10 +2338,11 @@ class Network(object): for b in all_builders: b.preConfig(network) - tor_auth_line, arti_auth = b._getAltAuthLines( + tor_auth_line, (arti_fallback, arti_auth) = b._getAltAuthLines( self._dfltEnv['hasbridgeauth']) altauthlines.append(tor_auth_line) - artilines.append(arti_auth) + arti_fallback_lines.append(arti_fallback) + arti_auth_lines.append(arti_auth) bridgelines.append(b._getBridgeLines()) self._dfltEnv['authorities'] = "".join(altauthlines) @@ -2356,7 +2352,22 @@ class Network(object): b.config(network) with open(os.path.join(get_absolute_nodes_path(),"arti.toml"), 'w') as f: - f.write("".join(artilines)) + f.write("""[storage] +cache_dir = "{path}/arti/cache" +state_dir = "{path}/arti/state" + +[path_rules] +enforce_distance = {{ "subnets_family_v4" = 33, "subnets_family_v6" = 129 }} + +""".format(path=self.dir)) + f.write("""[network] +fallback_caches = [ +""") + f.write("".join(arti_fallback_lines)) + f.write("]\n") + f.write("authorities = [\n") + f.write("".join(arti_auth_lines)) + f.write("]") for b in builders: b.postConfig(network)

1 0

[chutney/main] Document some issues around arti config.
by nickm＠torproject.org 27 Sep '21

27 Sep '21

commit 78f4bd03c3c236bd3932e24a0236ea2fa64387b5 Author: Nick Mathewson <nickm(a)torproject.org> Date: Mon Sep 27 08:49:44 2021 -0400 Document some issues around arti config. --- lib/chutney/TorNet.py | 17 ++++++++++++++--- 1 file changed, 14 insertions(+), 3 deletions(-) diff --git a/lib/chutney/TorNet.py b/lib/chutney/TorNet.py index 873681d..ce3873a 100644 --- a/lib/chutney/TorNet.py +++ b/lib/chutney/TorNet.py @@ -791,9 +791,17 @@ class LocalNodeBuilder(NodeBuilder): self._env['fingerprint_ed25519'] = "" def _getAltAuthLines(self, hasbridgeauth=False): - """Return a combination of AlternateDirAuthority, - and AlternateBridgeAuthority lines for - this Node, appropriately. Non-authorities return "".""" + """Return a set of lines to configure other nodes to use this Node as + an authority. For C tor, this is a combination of + AternateDirAuthority and AlternateBridgeAuthority. For Arti, + this is a pair of lines to use this node as an authority and + as a fallback. (Arti does not automatically use authorities + as fallbacks.) + + The answers are returned as: (tor-auth, (arti-auth, arti-fallback)) + + If this node not an authority, the returned strings are empty. + """ if not self._env['authority']: return ("",("", "")) @@ -2357,6 +2365,9 @@ cache_dir = "{path}/arti/cache" state_dir = "{path}/arti/state" [path_rules] +# These values disable enforce_distance entirely; we can replace them +# with something like Tor's "EnforceDistinceSubnets 0" if Arti ever +# implements it. enforce_distance = {{ "subnets_family_v4" = 33, "subnets_family_v6" = 129 }} """.format(path=self.dir))

1 0

[tpo/master] Add new Tor Browser version 11.0a7
by sysrqb＠torproject.org 27 Sep '21

27 Sep '21

commit 5494707a23208516ce6c489b147c872a5ff13c05 Author: Matthew Finkel <sysrqb(a)torproject.org> Date: Mon Sep 27 03:15:48 2021 +0000 Add new Tor Browser version 11.0a7 --- databags/versions.ini | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/databags/versions.ini b/databags/versions.ini index b1e5e1da..04ce0c88 100644 --- a/databags/versions.ini +++ b/databags/versions.ini @@ -12,13 +12,13 @@ version = 10.5.6 version = 10.5.6 [torbrowser-alpha] -version = 11.0a5 +version = 11.0a7 [torbrowser-android-alpha] -version = 11.0a5 +version = 11.0a7 [torbrowser-win-alpha] -version = 11.0a5 +version = 11.0a7 [tor-stable] version = 0.4.6.7

1 0