[tor-bugs] #10893 [Pluggable transport]: ScrambleSuit spec improvements

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Mar 8 18:55:59 UTC 2014


#10893: ScrambleSuit spec improvements
-------------------------------------+-------------------------------
     Reporter:  yawning              |      Owner:  phw
         Type:  defect               |     Status:  needs_information
     Priority:  normal               |  Milestone:
    Component:  Pluggable transport  |    Version:
   Resolution:                       |   Keywords:  scramblesuit spec
Actual Points:                       |  Parent ID:
       Points:                       |
-------------------------------------+-------------------------------

Comment (by yawning):

 I think 4 (keep it vague) with a provision stating that "implementations
 SHOULD use a CSPRNG" would be the best out of of the options that you
 presented.  I agree that flow signatures being different between
 implementations is not necessarily a bad thing.

 I could write a CTR_DRBG based on the AES code in obfsproxy if needed as
 well (I had to do that for obfsclient since there isn't a easy way to get
 separate CSPRNG instances out of OpenSSL).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10893#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list