[tor-bugs] #22776 [Obfuscation/BridgeDB]: Implement the remaining cryptographic protocols for Hyphae

[Tor Bug Tracker & Wiki]

#22776: Implement the remaining cryptographic protocols for Hyphae
-----------------------------------------+-------------------------------
 Reporter:  isis                         |          Owner:  isis
     Type:  enhancement                  |         Status:  accepted
 Priority:  Medium                       |      Milestone:
Component:  Obfuscation/BridgeDB         |        Version:
 Severity:  Normal                       |     Resolution:
 Keywords:  bridgedb-distributors, rust  |  Actual Points:
Parent ID:  #22775                       |         Points:  3
 Reviewer:                               |        Sponsor:  SponsorM-must
-----------------------------------------+-------------------------------
Changes (by isis):

 * keywords:  bridgedb-distributors, rust, SponsorM => bridgedb-
     distributors, rust
 * status:  new => accepted
 * sponsor:   => SponsorM-must


Comment:

 Replying to [ticket:22776 isis]:
 > We'll need:
 >
 > 1) Back-Maxwell Rangeproofs (requires Borromean Ring Signatures)

 This is in [https://github.com/isislovecruft/dalek-rangeproofs `dalek-
 rangeproofs`].

 > 2) A ZKP compiler

 hdevalence [https://github.com/hdevalence/zkp implemented a Rust DSL using
 macros] for generating NIZK from pseudo-Camenisch-Stadler notation. I've
 cursorily looked at it and given suggestions/ideas as he was making it,
 but I'd need to take a closer look to see if it's already at the point of
 being useful for Hyphae's proofs.

 > 3) Testvectors for Ristretto (a.k.a. Decaf for curve25519)

 We still don't have this, but there's a very long email thread on
 standardising Ristretto so that we're all doing the same thing.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22776#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online