[tor-bugs] #16943 [Tor]: Implement prop250 (Random Number Generation During Tor Voting)

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jan 11 15:10:22 UTC 2016


#16943: Implement prop250 (Random Number Generation During Tor Voting)
-------------------------+------------------------------------
 Reporter:  asn          |          Owner:
     Type:  enhancement  |         Status:  needs_review
 Priority:  High         |      Milestone:  Tor: 0.2.8.x-final
Component:  Tor          |        Version:
 Severity:  Normal       |     Resolution:
 Keywords:  tor-hs       |  Actual Points:
Parent ID:  #8244        |         Points:  large
  Sponsor:  SponsorR     |
-------------------------+------------------------------------
Changes (by dgoulet):

 * priority:  Medium => High
 * status:  new => needs_review
 * type:  defect => enhancement
 * severity:  Blocker => Normal


Comment:

 Hello! asn and I are very happy to present to you wonderful reviewers the
 implementation for proposal 250 along with the final specification:

 Both branch in tor.git and torspec.git: `dgoulet/prop250_final_v1`

 Some notes. We've separated this in 7 commits prefixed with `prop250:`
 except first one that adds a needed `tor_htonll/ntohll` function to tor
 utils. This code is mostly contained in two *new* files (with their
 headers) that are `shared-random.{c|h}` and `shared-random-state.{c|h}`.

 Our unit test code coverage:
 {{{
     shared-random-state.c   92.8 %      376 / 405      65.3 %      109 /
 167
     shared-random.c         85.1 %      326 / 383      66.9 %      101 /
 151
 }}}

 Also, there are attacks to this protocol that we are well aware of but all
 are easily detectable so for this reason we've wrote a DocTor
 specification that atagar will help use deploy once this is merged.

 https://storm.torproject.org/shared/kXO7N2oatC9RzRcZvfLNVaA1yNkZ6m5rODGUYEt08H6

 Finally, we expect this code to run for a long time before the shared
 random values generated by the authorities are used thus for now you will
 NOT find anything using them.

 Please ask questions! This won't be that trivial to review :).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/16943#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list