[tor-bugs] #18221 [Tor]: Validate our DH parameters to prevent socat-type fails.

[Tor Bug Tracker & Wiki]

#18221: Validate our DH parameters to prevent socat-type fails.
-----------------------------+------------------------------------
 Reporter:  yawning          |          Owner:
     Type:  enhancement      |         Status:  needs_review
 Priority:  Medium           |      Milestone:  Tor: 0.2.8.x-final
Component:  Tor              |        Version:  Tor: unspecified
 Severity:  Normal           |     Resolution:
 Keywords:  tor-core crypto  |  Actual Points:
Parent ID:                   |         Points:
  Sponsor:                   |
-----------------------------+------------------------------------

Comment (by nickm):

 Merged.   Thanks, Yawning!

 > Why do we use hardcoded primes at all? Generating a new prime seems like
 a better solution, it is not so expensive not to do it.

 (It's too expensive to generate a safe prime on a smartphone every time we
 start.  "prime" and "safe prime" aren't really the same thing.)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18221#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online