[tor-bugs] #5185 [Tor Client]: Implement ‘safe cookie authentication’ in Tor

[Tor Bug Tracker & Wiki]

#5185: Implement ‘safe cookie authentication’ in Tor
--------------------------+-------------------------------------------------
 Reporter:  rransom       |          Owner:                    
     Type:  enhancement   |         Status:  needs_revision    
 Priority:  critical      |      Milestone:  Tor: 0.2.2.x-final
Component:  Tor Client    |        Version:                    
 Keywords:  security-fix  |         Parent:                    
   Points:                |   Actualpoints:                    
--------------------------+-------------------------------------------------
Changes (by rransom):

  * status:  needs_review => needs_revision


Comment:

 Replying to [ticket:5185 rransom]:

 > See my
 [https://gitweb.torproject.org/rransom/tor.git/shortlog/refs/heads/safecookie-022-v2
 safecookie-022-v2] tor branch (
 `https://git.torproject.org/rransom/tor.git safecookie-022-v2` ) for a
 code-change branch implementing it on maint-0.2.2.

 ... which doesn't compile now that I've backported the patch, because
 `crypto_hmac_sha256` isn't in 0.2.2.x.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5185#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online