[tor-bugs] #18020 [Tor]: RFE: Introduce privsep to secure OS and hidden service keys

[Tor Bug Tracker & Wiki]

#18020: RFE: Introduce privsep to secure OS and hidden service keys
-------------------------+-------------------------------------
 Reporter:  jirib        |          Owner:
     Type:  enhancement  |         Status:  new
 Priority:  Medium       |      Milestone:  Tor: very long term
Component:  Tor          |        Version:  Tor: unspecified
 Severity:  Normal       |     Resolution:
 Keywords:  privsep      |  Actual Points:
Parent ID:               |         Points:
  Sponsor:               |
-------------------------+-------------------------------------
Changes (by yawning):

 * version:   => Tor: unspecified
 * milestone:   => Tor: very long term


Comment:

 Triaging.  It's worth noting that as of 0.2.7.x, HS keys do not need to
 ever be on the filesystem, since HS creation via the control port is
 supported.

 A lot of these things would be good ideas for long lived cryptographic
 material in general, but it's unlikely for the work to happen prior to tor
 being refactored into a more modular design.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18020#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online