[tor-bugs] #2768 [Metrics]: Write standalone directory document signature verification tools

[Tor Bug Tracker & Wiki]

#2768: Write standalone directory document signature verification tools
-------------------------+--------------------------------------------------
 Reporter:  rransom      |          Owner:  rransom
     Type:  enhancement  |         Status:  new    
 Priority:  major        |      Milestone:         
Component:  Metrics      |        Version:         
 Keywords:               |         Parent:         
   Points:               |   Actualpoints:         
-------------------------+--------------------------------------------------

Comment(by karsten):

 Agreed, we should write code to check the descriptor signatures.  I
 suggest writing the code in Java, because we can create a standalone tool
 from it (as part of metrics-utils) and add it to metrics-db to check
 signatures on the fly.  I should have some Java code around that checks
 descriptor signatures.  Do you want to work on this?  If so, I'll dig out
 the code.

 Verifying extra-info descriptors requires having the server descriptors of
 the same month available.  Fortunately, descriptors are sorted into month
 folders and tarballs by their publication time, so that all relevant
 server descriptors should be in a single tarball.

 We don't collect any microdescriptors yet, and I don't know how to verify
 them.  Perhaps by having the server descriptors, just like with extra-info
 descriptors?  By the way, should we start collecting microdescriptors?  If
 so, we should open a new ticket for that.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2768#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online