nihilist/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-11-24 12:23:32 +01:00
Code Issues Packages Projects Releases Wiki Activity

a potential fix on the HELLO protocol design

Browse Source 
svn:r6984
This commit is contained in:
Roger Dingledine 2006-08-05 03:08:56 +00:00
parent bc2e040669
commit 1ec5d1c05c
1 changed files with 27 additions and 15 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

42
doc/tor-spec.txt
View File

@ -244,20 +244,27 @@ when do we rotate which keys (tls, link, etc)?
4.1. HELLO cells 4.1. HELLO cells
When a Tor connection is established, both sides must send a HELLO When a Tor connection is established, the client must send a HELLO
cell before sending any other cells. (Except see 4.2. below) cell before sending any other cells. When the server receives a HELLO
cell, it responds with a HELLO cell of its own. See 4.2. below for
details on the protocol negotiation and fallback strategy.
NumVersions [1 byte] NumVersions [1 byte]
Versions [NumVersions bytes] Versions [NumVersions bytes]
[
Probably we break the following into a NETINFO cell type:
Timestamp [4 bytes] Timestamp [4 bytes]
This OR's address [variable] This OR's address [variable]
Other OR's address [variable] Other OR's address [variable]
]
"Versions" is a sequence of NumVersions link connection protocol versions, "Versions" is a sequence of NumVersions link connection protocol versions,
each one byte long. Parties should list all of the versions which they each one byte long. Parties should list all of the versions which they
are able and willing to support. Parties can only communicate if they are able and willing to support. Parties can only communicate if they
have some connection protocol version in common. have some connection protocol version in common.
[
Timestamp is the OR's current Unix time (GMT). Timestamp is the OR's current Unix time (GMT).
Each address contains Type/Length/Value as used in Section 6.4. The first Each address contains Type/Length/Value as used in Section 6.4. The first
@ -270,26 +277,25 @@ when do we rotate which keys (tls, link, etc)?
The second address is the one that the party sending the HELLO cell The second address is the one that the party sending the HELLO cell
believes the other has -- it can be used to learn what your IP address believes the other has -- it can be used to learn what your IP address
is if you have no other hints. is if you have no other hints.
]
4.2. Protocol negotiation' 4.2. Protocol negotiation
Version 0.1.2.1-alpha and earlier don't understand HELLO cells, and Version 0.1.2.1-alpha and earlier don't understand HELLO cells, and
therefore don't support version negotiation. Thus, waiting until therefore don't support version negotiation. Thus, waiting until
the other side has send a HELLO cell won't work for these servers: if they the other side has sent a HELLO cell won't work for these servers: if they
send no cells back, it is impossible to tell whether they have sent a send no cells back, it is impossible to tell whether they have sent a
HELLO cell that has been stalled, or whether they have dropped our own HELLO cell that has been stalled, or whether they have dropped our own
HELLO cell as unrecognized. Thus, immediately after a TLS connection has HELLO cell as unrecognized. Thus, immediately after a TLS connection has
been established, both parties behave as follows: been established, the client (initiating party) behaves as follows:
1. Both parties send a CREATE cell with an appropriate circuit id, 1. Send a CREATE cell with an appropriate circuit id,
containing an "onion skin" of [00] bytes. containing an "onion skin" of [00] bytes.
[XXXX What happens when a client gets a CREATE?] 2. Send a HELLO cell listing all its versions.
2. Both parties send a HELLO cell listing all their versions. 3. If a DESTROY cell is received before a HELLO cell, the server
does not support HELLO cells, and therefore we can
3. If a DESTROY cell is received before a HELLO cell, the other
party does not support HELLO cells, and therefore we can
only use protocol version 0. only use protocol version 0.
4. If a HELLO cell is received, we use the highest numbered version 4. If a HELLO cell is received, we use the highest numbered version
@ -297,9 +303,15 @@ when do we rotate which keys (tls, link, etc)?
As an optimization, implementations SHOULD simply use protocol version As an optimization, implementations SHOULD simply use protocol version
0 when the other side is recognized as a router running version 0 when the other side is recognized as a router running version
0.1.1.??-alpha or earlier. 0.1.2.??-alpha or earlier.
[XXXX This will not work with clients: we will send them HELLO cells;
they'll warn; users will freak out. -NM] If a server finds that it wants to send a cell (for example because a
circuit wants to extend to that client, and the TLS connection
is already established) yet no cell has arrived yet, we can't
distinguish between a version 0 client and a slow network. We can't
assume that the other side approves of version 0, so we can't just
start using version 0. Perhaps the right answer is to then launch a
new TLS connection because you don't have a usable one after all?
5. Circuit management 5. Circuit management