mirror of
https://gitlab.torproject.org/tpo/core/tor.git
synced 2024-11-10 21:23:58 +01:00
Merge branch 'tor-github/pr/908'
This commit is contained in:
commit
7b386f2356
5
changes/ticket29660
Normal file
5
changes/ticket29660
Normal file
@ -0,0 +1,5 @@
|
||||
o Code simplification and refactoring:
|
||||
- Remove redundant return values in crypto_format, and the associated
|
||||
return value checks elsewhere in the code. Make the implementations in
|
||||
crypto_format consistent, and remove redundant code.
|
||||
Resolves ticket 29660.
|
@ -3914,8 +3914,7 @@ dirvote_format_microdesc_vote_line(char *out_buf, size_t out_buf_len,
|
||||
",");
|
||||
tor_assert(microdesc_consensus_methods);
|
||||
|
||||
if (digest256_to_base64(d64, md->digest)<0)
|
||||
goto out;
|
||||
digest256_to_base64(d64, md->digest);
|
||||
|
||||
if (tor_snprintf(out_buf, out_buf_len, "m %s sha256=%s\n",
|
||||
microdesc_consensus_methods, d64)<0)
|
||||
|
@ -165,9 +165,7 @@ purge_hid_serv_request(const ed25519_public_key_t *identity_pk)
|
||||
* some point and we don't care about those anymore. */
|
||||
hs_build_blinded_pubkey(identity_pk, NULL, 0,
|
||||
hs_get_time_period_num(0), &blinded_pk);
|
||||
if (BUG(ed25519_public_to_base64(base64_blinded_pk, &blinded_pk) < 0)) {
|
||||
return;
|
||||
}
|
||||
ed25519_public_to_base64(base64_blinded_pk, &blinded_pk);
|
||||
/* Purge last hidden service request from cache for this blinded key. */
|
||||
hs_purge_hid_serv_from_last_hid_serv_requests(base64_blinded_pk);
|
||||
}
|
||||
@ -354,7 +352,6 @@ directory_launch_v3_desc_fetch(const ed25519_public_key_t *onion_identity_pk,
|
||||
ed25519_public_key_t blinded_pubkey;
|
||||
char base64_blinded_pubkey[ED25519_BASE64_LEN + 1];
|
||||
hs_ident_dir_conn_t hs_conn_dir_ident;
|
||||
int retval;
|
||||
|
||||
tor_assert(hsdir);
|
||||
tor_assert(onion_identity_pk);
|
||||
@ -363,10 +360,7 @@ directory_launch_v3_desc_fetch(const ed25519_public_key_t *onion_identity_pk,
|
||||
hs_build_blinded_pubkey(onion_identity_pk, NULL, 0,
|
||||
current_time_period, &blinded_pubkey);
|
||||
/* ...and base64 it. */
|
||||
retval = ed25519_public_to_base64(base64_blinded_pubkey, &blinded_pubkey);
|
||||
if (BUG(retval < 0)) {
|
||||
return HS_CLIENT_FETCH_ERROR;
|
||||
}
|
||||
ed25519_public_to_base64(base64_blinded_pubkey, &blinded_pubkey);
|
||||
|
||||
/* Copy onion pk to a dir_ident so that we attach it to the dir conn */
|
||||
hs_ident_dir_conn_init(onion_identity_pk, &blinded_pubkey,
|
||||
@ -405,7 +399,6 @@ directory_launch_v3_desc_fetch(const ed25519_public_key_t *onion_identity_pk,
|
||||
STATIC routerstatus_t *
|
||||
pick_hsdir_v3(const ed25519_public_key_t *onion_identity_pk)
|
||||
{
|
||||
int retval;
|
||||
char base64_blinded_pubkey[ED25519_BASE64_LEN + 1];
|
||||
uint64_t current_time_period = hs_get_time_period_num(0);
|
||||
smartlist_t *responsible_hsdirs = NULL;
|
||||
@ -418,10 +411,7 @@ pick_hsdir_v3(const ed25519_public_key_t *onion_identity_pk)
|
||||
hs_build_blinded_pubkey(onion_identity_pk, NULL, 0,
|
||||
current_time_period, &blinded_pubkey);
|
||||
/* ...and base64 it. */
|
||||
retval = ed25519_public_to_base64(base64_blinded_pubkey, &blinded_pubkey);
|
||||
if (BUG(retval < 0)) {
|
||||
return NULL;
|
||||
}
|
||||
ed25519_public_to_base64(base64_blinded_pubkey, &blinded_pubkey);
|
||||
|
||||
/* Get responsible hsdirs of service for this time period */
|
||||
responsible_hsdirs = smartlist_new();
|
||||
|
@ -74,10 +74,7 @@ hs_control_desc_event_failed(const hs_ident_dir_conn_t *ident,
|
||||
tor_assert(reason);
|
||||
|
||||
/* Build onion address and encoded blinded key. */
|
||||
IF_BUG_ONCE(ed25519_public_to_base64(base64_blinded_pk,
|
||||
&ident->blinded_pk) < 0) {
|
||||
return;
|
||||
}
|
||||
ed25519_public_to_base64(base64_blinded_pk, &ident->blinded_pk);
|
||||
hs_build_address(&ident->identity_pk, HS_VERSION_THREE, onion_address);
|
||||
|
||||
control_event_hsv3_descriptor_failed(onion_address, base64_blinded_pk,
|
||||
@ -99,10 +96,7 @@ hs_control_desc_event_received(const hs_ident_dir_conn_t *ident,
|
||||
tor_assert(hsdir_id_digest);
|
||||
|
||||
/* Build onion address and encoded blinded key. */
|
||||
IF_BUG_ONCE(ed25519_public_to_base64(base64_blinded_pk,
|
||||
&ident->blinded_pk) < 0) {
|
||||
return;
|
||||
}
|
||||
ed25519_public_to_base64(base64_blinded_pk, &ident->blinded_pk);
|
||||
hs_build_address(&ident->identity_pk, HS_VERSION_THREE, onion_address);
|
||||
|
||||
control_event_hsv3_descriptor_received(onion_address, base64_blinded_pk,
|
||||
@ -123,9 +117,7 @@ hs_control_desc_event_created(const char *onion_address,
|
||||
tor_assert(blinded_pk);
|
||||
|
||||
/* Build base64 encoded blinded key. */
|
||||
IF_BUG_ONCE(ed25519_public_to_base64(base64_blinded_pk, blinded_pk) < 0) {
|
||||
return;
|
||||
}
|
||||
ed25519_public_to_base64(base64_blinded_pk, blinded_pk);
|
||||
|
||||
/* Version 3 doesn't use the replica number in its descriptor ID computation
|
||||
* so we pass negative value so the control port subsystem can ignore it. */
|
||||
@ -151,9 +143,7 @@ hs_control_desc_event_upload(const char *onion_address,
|
||||
tor_assert(hsdir_index);
|
||||
|
||||
/* Build base64 encoded blinded key. */
|
||||
IF_BUG_ONCE(ed25519_public_to_base64(base64_blinded_pk, blinded_pk) < 0) {
|
||||
return;
|
||||
}
|
||||
ed25519_public_to_base64(base64_blinded_pk, blinded_pk);
|
||||
|
||||
control_event_hs_descriptor_upload(onion_address, hsdir_id_digest,
|
||||
base64_blinded_pk,
|
||||
@ -196,10 +186,7 @@ hs_control_desc_event_content(const hs_ident_dir_conn_t *ident,
|
||||
tor_assert(hsdir_id_digest);
|
||||
|
||||
/* Build onion address and encoded blinded key. */
|
||||
IF_BUG_ONCE(ed25519_public_to_base64(base64_blinded_pk,
|
||||
&ident->blinded_pk) < 0) {
|
||||
return;
|
||||
}
|
||||
ed25519_public_to_base64(base64_blinded_pk, &ident->blinded_pk);
|
||||
hs_build_address(&ident->identity_pk, HS_VERSION_THREE, onion_address);
|
||||
|
||||
control_event_hs_descriptor_content(onion_address, base64_blinded_pk,
|
||||
|
@ -403,9 +403,7 @@ encode_enc_key(const hs_desc_intro_point_t *ip)
|
||||
tor_assert(ip);
|
||||
|
||||
/* Base64 encode the encryption key for the "enc-key" field. */
|
||||
if (curve25519_public_to_base64(key_b64, &ip->enc_key) < 0) {
|
||||
goto done;
|
||||
}
|
||||
curve25519_public_to_base64(key_b64, &ip->enc_key);
|
||||
if (tor_cert_encode_ed22519(ip->enc_key_cert, &encoded_cert) < 0) {
|
||||
goto done;
|
||||
}
|
||||
@ -421,7 +419,7 @@ encode_enc_key(const hs_desc_intro_point_t *ip)
|
||||
}
|
||||
|
||||
/* Encode an introduction point onion key. Return a newly allocated string
|
||||
* with it. On failure, return NULL. */
|
||||
* with it. Can not fail. */
|
||||
static char *
|
||||
encode_onion_key(const hs_desc_intro_point_t *ip)
|
||||
{
|
||||
@ -431,12 +429,9 @@ encode_onion_key(const hs_desc_intro_point_t *ip)
|
||||
tor_assert(ip);
|
||||
|
||||
/* Base64 encode the encryption key for the "onion-key" field. */
|
||||
if (curve25519_public_to_base64(key_b64, &ip->onion_key) < 0) {
|
||||
goto done;
|
||||
}
|
||||
curve25519_public_to_base64(key_b64, &ip->onion_key);
|
||||
tor_asprintf(&encoded, "%s ntor %s", str_ip_onion_key, key_b64);
|
||||
|
||||
done:
|
||||
return encoded;
|
||||
}
|
||||
|
||||
@ -797,8 +792,8 @@ get_inner_encrypted_layer_plaintext(const hs_descriptor_t *desc)
|
||||
/* Create the middle layer of the descriptor, which includes the client auth
|
||||
* data and the encrypted inner layer (provided as a base64 string at
|
||||
* <b>layer2_b64_ciphertext</b>). Return a newly-allocated string with the
|
||||
* layer plaintext, or NULL if an error occurred. It's the responsibility of
|
||||
* the caller to free the returned string. */
|
||||
* layer plaintext. It's the responsibility of the caller to free the returned
|
||||
* string. Can not fail. */
|
||||
static char *
|
||||
get_outer_encrypted_layer_plaintext(const hs_descriptor_t *desc,
|
||||
const char *layer2_b64_ciphertext)
|
||||
@ -817,10 +812,7 @@ get_outer_encrypted_layer_plaintext(const hs_descriptor_t *desc,
|
||||
tor_assert(!tor_mem_is_zero((char *) ephemeral_pubkey->public_key,
|
||||
CURVE25519_PUBKEY_LEN));
|
||||
|
||||
if (curve25519_public_to_base64(ephemeral_key_base64,
|
||||
ephemeral_pubkey) < 0) {
|
||||
goto done;
|
||||
}
|
||||
curve25519_public_to_base64(ephemeral_key_base64, ephemeral_pubkey);
|
||||
smartlist_add_asprintf(lines, "%s %s\n",
|
||||
str_desc_auth_key, ephemeral_key_base64);
|
||||
|
||||
@ -845,7 +837,6 @@ get_outer_encrypted_layer_plaintext(const hs_descriptor_t *desc,
|
||||
|
||||
layer1_str = smartlist_join_strings(lines, "", 0, NULL);
|
||||
|
||||
done:
|
||||
/* We need to memwipe all lines because it contains the ephemeral key */
|
||||
SMARTLIST_FOREACH(lines, char *, a, memwipe(a, 0, strlen(a)));
|
||||
SMARTLIST_FOREACH(lines, char *, a, tor_free(a));
|
||||
@ -1091,11 +1082,7 @@ desc_encode_v3(const hs_descriptor_t *desc,
|
||||
tor_free(encoded_str);
|
||||
goto err;
|
||||
}
|
||||
if (ed25519_signature_to_base64(ed_sig_b64, &sig) < 0) {
|
||||
log_warn(LD_BUG, "Can't base64 encode descriptor signature!");
|
||||
tor_free(encoded_str);
|
||||
goto err;
|
||||
}
|
||||
ed25519_signature_to_base64(ed_sig_b64, &sig);
|
||||
/* Create the signature line. */
|
||||
smartlist_add_asprintf(lines, "%s %s", str_signature, ed_sig_b64);
|
||||
}
|
||||
|
@ -2728,11 +2728,8 @@ router_dump_router_to_string(routerinfo_t *router,
|
||||
log_err(LD_BUG,"Couldn't base64-encode signing key certificate!");
|
||||
goto err;
|
||||
}
|
||||
if (ed25519_public_to_base64(ed_fp_base64,
|
||||
&router->cache_info.signing_key_cert->signing_key)<0) {
|
||||
log_err(LD_BUG,"Couldn't base64-encode identity key\n");
|
||||
goto err;
|
||||
}
|
||||
ed25519_public_to_base64(ed_fp_base64,
|
||||
&router->cache_info.signing_key_cert->signing_key);
|
||||
tor_asprintf(&ed_cert_line, "identity-ed25519\n"
|
||||
"-----BEGIN ED25519 CERT-----\n"
|
||||
"%s"
|
||||
@ -2977,8 +2974,7 @@ router_dump_router_to_string(routerinfo_t *router,
|
||||
if (ed25519_sign(&sig, (const uint8_t*)digest, DIGEST256_LEN,
|
||||
signing_keypair) < 0)
|
||||
goto err;
|
||||
if (ed25519_signature_to_base64(buf, &sig) < 0)
|
||||
goto err;
|
||||
ed25519_signature_to_base64(buf, &sig);
|
||||
|
||||
smartlist_add_asprintf(chunks, "%s\n", buf);
|
||||
}
|
||||
@ -3252,8 +3248,7 @@ extrainfo_dump_to_string(char **s_out, extrainfo_t *extrainfo,
|
||||
if (ed25519_sign(&ed_sig, (const uint8_t*)sha256_digest, DIGEST256_LEN,
|
||||
signing_keypair) < 0)
|
||||
goto err;
|
||||
if (ed25519_signature_to_base64(buf, &ed_sig) < 0)
|
||||
goto err;
|
||||
ed25519_signature_to_base64(buf, &ed_sig);
|
||||
|
||||
smartlist_add_asprintf(chunks, "%s\n", buf);
|
||||
}
|
||||
|
@ -76,7 +76,7 @@ STATIC int curve25519_basepoint_impl(uint8_t *output, const uint8_t *secret);
|
||||
|
||||
int curve25519_public_from_base64(curve25519_public_key_t *pkey,
|
||||
const char *input);
|
||||
int curve25519_public_to_base64(char *output,
|
||||
void curve25519_public_to_base64(char *output,
|
||||
const curve25519_public_key_t *pkey);
|
||||
|
||||
void curve25519_set_impl_params(int use_ed);
|
||||
|
@ -131,20 +131,27 @@ crypto_read_tagged_contents_from_file(const char *fname,
|
||||
return r;
|
||||
}
|
||||
|
||||
/** Encode <b>pkey</b> as a base64-encoded string, without trailing "="
|
||||
/** Encode <b>pkey</b> as a base64-encoded string, including trailing "="
|
||||
* characters, in the buffer <b>output</b>, which must have at least
|
||||
* CURVE25519_BASE64_PADDED_LEN+1 bytes available. Return 0 on success, -1 on
|
||||
* failure. */
|
||||
int
|
||||
* CURVE25519_BASE64_PADDED_LEN+1 bytes available.
|
||||
* Can not fail.
|
||||
*
|
||||
* Careful! CURVE25519_BASE64_PADDED_LEN is one byte longer than
|
||||
* ED25519_BASE64_LEN.
|
||||
*/
|
||||
void
|
||||
curve25519_public_to_base64(char *output,
|
||||
const curve25519_public_key_t *pkey)
|
||||
{
|
||||
char buf[128];
|
||||
base64_encode(buf, sizeof(buf),
|
||||
(const char*)pkey->public_key, CURVE25519_PUBKEY_LEN, 0);
|
||||
buf[CURVE25519_BASE64_PADDED_LEN] = '\0';
|
||||
int n = base64_encode(buf, sizeof(buf),
|
||||
(const char*)pkey->public_key,
|
||||
CURVE25519_PUBKEY_LEN, 0);
|
||||
/* These asserts should always succeed, unless there is a bug in
|
||||
* base64_encode(). */
|
||||
tor_assert(n == CURVE25519_BASE64_PADDED_LEN);
|
||||
tor_assert(buf[CURVE25519_BASE64_PADDED_LEN] == '\0');
|
||||
memcpy(output, buf, CURVE25519_BASE64_PADDED_LEN+1);
|
||||
return 0;
|
||||
}
|
||||
|
||||
/** Try to decode a base64-encoded curve25519 public key from <b>input</b>
|
||||
@ -181,8 +188,7 @@ ed25519_fmt(const ed25519_public_key_t *pkey)
|
||||
if (ed25519_public_key_is_zero(pkey)) {
|
||||
strlcpy(formatted, "<unset>", sizeof(formatted));
|
||||
} else {
|
||||
int r = ed25519_public_to_base64(formatted, pkey);
|
||||
tor_assert(!r);
|
||||
ed25519_public_to_base64(formatted, pkey);
|
||||
}
|
||||
} else {
|
||||
strlcpy(formatted, "<null>", sizeof(formatted));
|
||||
@ -202,28 +208,35 @@ ed25519_public_from_base64(ed25519_public_key_t *pkey,
|
||||
|
||||
/** Encode the public key <b>pkey</b> into the buffer at <b>output</b>,
|
||||
* which must have space for ED25519_BASE64_LEN bytes of encoded key,
|
||||
* plus one byte for a terminating NUL. Return 0 on success, -1 on failure.
|
||||
* plus one byte for a terminating NUL.
|
||||
* Can not fail.
|
||||
*
|
||||
* Careful! ED25519_BASE64_LEN is one byte shorter than
|
||||
* CURVE25519_BASE64_PADDED_LEN.
|
||||
*/
|
||||
int
|
||||
void
|
||||
ed25519_public_to_base64(char *output,
|
||||
const ed25519_public_key_t *pkey)
|
||||
{
|
||||
return digest256_to_base64(output, (const char *)pkey->pubkey);
|
||||
digest256_to_base64(output, (const char *)pkey->pubkey);
|
||||
}
|
||||
|
||||
/** Encode the signature <b>sig</b> into the buffer at <b>output</b>,
|
||||
* which must have space for ED25519_SIG_BASE64_LEN bytes of encoded signature,
|
||||
* plus one byte for a terminating NUL. Return 0 on success, -1 on failure.
|
||||
* plus one byte for a terminating NUL.
|
||||
* Can not fail.
|
||||
*/
|
||||
int
|
||||
void
|
||||
ed25519_signature_to_base64(char *output,
|
||||
const ed25519_signature_t *sig)
|
||||
{
|
||||
char buf[256];
|
||||
int n = base64_encode_nopad(buf, sizeof(buf), sig->sig, ED25519_SIG_LEN);
|
||||
/* These asserts should always succeed, unless there is a bug in
|
||||
* base64_encode_nopad(). */
|
||||
tor_assert(n == ED25519_SIG_BASE64_LEN);
|
||||
tor_assert(buf[ED25519_SIG_BASE64_LEN] == '\0');
|
||||
memcpy(output, buf, ED25519_SIG_BASE64_LEN+1);
|
||||
return 0;
|
||||
}
|
||||
|
||||
/** Try to decode the string <b>input</b> into an ed25519 signature. On
|
||||
@ -233,16 +246,11 @@ int
|
||||
ed25519_signature_from_base64(ed25519_signature_t *sig,
|
||||
const char *input)
|
||||
{
|
||||
|
||||
if (strlen(input) != ED25519_SIG_BASE64_LEN)
|
||||
return -1;
|
||||
char buf[ED25519_SIG_BASE64_LEN+3];
|
||||
memcpy(buf, input, ED25519_SIG_BASE64_LEN);
|
||||
buf[ED25519_SIG_BASE64_LEN+0] = '=';
|
||||
buf[ED25519_SIG_BASE64_LEN+1] = '=';
|
||||
buf[ED25519_SIG_BASE64_LEN+2] = 0;
|
||||
char decoded[128];
|
||||
int n = base64_decode(decoded, sizeof(decoded), buf, strlen(buf));
|
||||
int n = base64_decode(decoded, sizeof(decoded), input,
|
||||
ED25519_SIG_BASE64_LEN);
|
||||
if (n < 0 || n != ED25519_SIG_LEN)
|
||||
return -1;
|
||||
memcpy(sig->sig, decoded, ED25519_SIG_LEN);
|
||||
@ -250,24 +258,26 @@ ed25519_signature_from_base64(ed25519_signature_t *sig,
|
||||
return 0;
|
||||
}
|
||||
|
||||
/** Base64 encode DIGEST_LINE bytes from <b>digest</b>, remove the trailing =
|
||||
/** Base64 encode DIGEST_LEN bytes from <b>digest</b>, remove the trailing =
|
||||
* characters, and store the nul-terminated result in the first
|
||||
* BASE64_DIGEST_LEN+1 bytes of <b>d64</b>. */
|
||||
/* XXXX unify with crypto_format.c code */
|
||||
int
|
||||
* BASE64_DIGEST_LEN+1 bytes of <b>d64</b>.
|
||||
* Can not fail. */
|
||||
void
|
||||
digest_to_base64(char *d64, const char *digest)
|
||||
{
|
||||
char buf[256];
|
||||
base64_encode(buf, sizeof(buf), digest, DIGEST_LEN, 0);
|
||||
buf[BASE64_DIGEST_LEN] = '\0';
|
||||
int n = base64_encode_nopad(buf, sizeof(buf),
|
||||
(const uint8_t *)digest, DIGEST_LEN);
|
||||
/* These asserts should always succeed, unless there is a bug in
|
||||
* base64_encode_nopad(). */
|
||||
tor_assert(n == BASE64_DIGEST_LEN);
|
||||
tor_assert(buf[BASE64_DIGEST_LEN] == '\0');
|
||||
memcpy(d64, buf, BASE64_DIGEST_LEN+1);
|
||||
return 0;
|
||||
}
|
||||
|
||||
/** Given a base64 encoded, nul-terminated digest in <b>d64</b> (without
|
||||
* trailing newline or = characters), decode it and store the result in the
|
||||
* first DIGEST_LEN bytes at <b>digest</b>. */
|
||||
/* XXXX unify with crypto_format.c code */
|
||||
int
|
||||
digest_from_base64(char *digest, const char *d64)
|
||||
{
|
||||
@ -279,22 +289,24 @@ digest_from_base64(char *digest, const char *d64)
|
||||
|
||||
/** Base64 encode DIGEST256_LINE bytes from <b>digest</b>, remove the
|
||||
* trailing = characters, and store the nul-terminated result in the first
|
||||
* BASE64_DIGEST256_LEN+1 bytes of <b>d64</b>. */
|
||||
/* XXXX unify with crypto_format.c code */
|
||||
int
|
||||
* BASE64_DIGEST256_LEN+1 bytes of <b>d64</b>.
|
||||
* Can not fail. */
|
||||
void
|
||||
digest256_to_base64(char *d64, const char *digest)
|
||||
{
|
||||
char buf[256];
|
||||
base64_encode(buf, sizeof(buf), digest, DIGEST256_LEN, 0);
|
||||
buf[BASE64_DIGEST256_LEN] = '\0';
|
||||
int n = base64_encode_nopad(buf, sizeof(buf),
|
||||
(const uint8_t *)digest, DIGEST256_LEN);
|
||||
/* These asserts should always succeed, unless there is a bug in
|
||||
* base64_encode_nopad(). */
|
||||
tor_assert(n == BASE64_DIGEST256_LEN);
|
||||
tor_assert(buf[BASE64_DIGEST256_LEN] == '\0');
|
||||
memcpy(d64, buf, BASE64_DIGEST256_LEN+1);
|
||||
return 0;
|
||||
}
|
||||
|
||||
/** Given a base64 encoded, nul-terminated digest in <b>d64</b> (without
|
||||
* trailing newline or = characters), decode it and store the result in the
|
||||
* first DIGEST256_LEN bytes at <b>digest</b>. */
|
||||
/* XXXX unify with crypto_format.c code */
|
||||
int
|
||||
digest256_from_base64(char *digest, const char *d64)
|
||||
{
|
||||
|
@ -33,18 +33,18 @@ ssize_t crypto_read_tagged_contents_from_file(const char *fname,
|
||||
|
||||
int ed25519_public_from_base64(struct ed25519_public_key_t *pkey,
|
||||
const char *input);
|
||||
int ed25519_public_to_base64(char *output,
|
||||
void ed25519_public_to_base64(char *output,
|
||||
const struct ed25519_public_key_t *pkey);
|
||||
const char *ed25519_fmt(const struct ed25519_public_key_t *pkey);
|
||||
|
||||
int ed25519_signature_from_base64(struct ed25519_signature_t *sig,
|
||||
const char *input);
|
||||
int ed25519_signature_to_base64(char *output,
|
||||
void ed25519_signature_to_base64(char *output,
|
||||
const struct ed25519_signature_t *sig);
|
||||
|
||||
int digest_to_base64(char *d64, const char *digest);
|
||||
void digest_to_base64(char *d64, const char *digest);
|
||||
int digest_from_base64(char *digest, const char *d64);
|
||||
int digest256_to_base64(char *d64, const char *digest);
|
||||
void digest256_to_base64(char *d64, const char *digest);
|
||||
int digest256_from_base64(char *digest, const char *d64);
|
||||
|
||||
#endif /* !defined(TOR_CRYPTO_FORMAT_H) */
|
||||
|
@ -321,8 +321,10 @@ base64_encode(char *dest, size_t destlen, const char *src, size_t srclen,
|
||||
return (int) enclen;
|
||||
}
|
||||
|
||||
/** As base64_encode, but do not add any internal spaces or external padding
|
||||
* to the output stream. */
|
||||
/** As base64_encode, but do not add any internal spaces, and remove external
|
||||
* padding from the output stream.
|
||||
* dest must be at least base64_encode_size(srclen, 0), including space for
|
||||
* the removed external padding. */
|
||||
int
|
||||
base64_encode_nopad(char *dest, size_t destlen,
|
||||
const uint8_t *src, size_t srclen)
|
||||
|
@ -2075,7 +2075,7 @@ test_crypto_curve25519_encode(void *arg)
|
||||
|
||||
curve25519_secret_key_generate(&seckey, 0);
|
||||
curve25519_public_key_generate(&key1, &seckey);
|
||||
tt_int_op(0, OP_EQ, curve25519_public_to_base64(buf, &key1));
|
||||
curve25519_public_to_base64(buf, &key1);
|
||||
tt_int_op(CURVE25519_BASE64_PADDED_LEN, OP_EQ, strlen(buf));
|
||||
|
||||
tt_int_op(0, OP_EQ, curve25519_public_from_base64(&key2, buf));
|
||||
@ -2455,13 +2455,13 @@ test_crypto_ed25519_encode(void *arg)
|
||||
|
||||
/* Test roundtrip. */
|
||||
tt_int_op(0, OP_EQ, ed25519_keypair_generate(&kp, 0));
|
||||
tt_int_op(0, OP_EQ, ed25519_public_to_base64(buf, &kp.pubkey));
|
||||
ed25519_public_to_base64(buf, &kp.pubkey);
|
||||
tt_int_op(ED25519_BASE64_LEN, OP_EQ, strlen(buf));
|
||||
tt_int_op(0, OP_EQ, ed25519_public_from_base64(&pk, buf));
|
||||
tt_mem_op(kp.pubkey.pubkey, OP_EQ, pk.pubkey, ED25519_PUBKEY_LEN);
|
||||
|
||||
tt_int_op(0, OP_EQ, ed25519_sign(&sig1, (const uint8_t*)"ABC", 3, &kp));
|
||||
tt_int_op(0, OP_EQ, ed25519_signature_to_base64(buf, &sig1));
|
||||
ed25519_signature_to_base64(buf, &sig1);
|
||||
tt_int_op(0, OP_EQ, ed25519_signature_from_base64(&sig2, buf));
|
||||
tt_mem_op(sig1.sig, OP_EQ, sig2.sig, ED25519_SIG_LEN);
|
||||
|
||||
|
@ -995,9 +995,7 @@ test_dir_formats_rsa_ed25519(void *arg)
|
||||
smartlist_add_strdup(chunks, "master-key-ed25519 ");
|
||||
{
|
||||
char k[ED25519_BASE64_LEN+1];
|
||||
tt_int_op(ed25519_public_to_base64(k,
|
||||
&r2->cache_info.signing_key_cert->signing_key),
|
||||
OP_GE, 0);
|
||||
ed25519_public_to_base64(k, &r2->cache_info.signing_key_cert->signing_key);
|
||||
smartlist_add_strdup(chunks, k);
|
||||
smartlist_add_strdup(chunks, "\n");
|
||||
}
|
||||
|
@ -238,9 +238,7 @@ helper_fetch_desc_from_hsdir(const ed25519_public_key_t *blinded_key)
|
||||
{
|
||||
char hsdir_cache_key[ED25519_BASE64_LEN+1];
|
||||
|
||||
retval = ed25519_public_to_base64(hsdir_cache_key,
|
||||
blinded_key);
|
||||
tt_int_op(retval, OP_EQ, 0);
|
||||
ed25519_public_to_base64(hsdir_cache_key, blinded_key);
|
||||
tor_asprintf(&hsdir_query_str, GET("/tor/hs/3/%s"), hsdir_cache_key);
|
||||
}
|
||||
|
||||
|
@ -107,8 +107,7 @@ test_hs_desc_event(void *arg)
|
||||
memset(&blinded_pk, 'B', sizeof(blinded_pk));
|
||||
memset(&hsdir_rs, 0, sizeof(hsdir_rs));
|
||||
memcpy(hsdir_rs.identity_digest, HSDIR_EXIST_ID, DIGEST_LEN);
|
||||
ret = ed25519_public_to_base64(base64_blinded_pk, &blinded_pk);
|
||||
tt_int_op(ret, OP_EQ, 0);
|
||||
ed25519_public_to_base64(base64_blinded_pk, &blinded_pk);
|
||||
memcpy(&ident.identity_pk, &identity_kp.pubkey,
|
||||
sizeof(ed25519_public_key_t));
|
||||
memcpy(&ident.blinded_pk, &blinded_pk, sizeof(blinded_pk));
|
||||
|
@ -739,8 +739,7 @@ test_desc_signature(void *arg)
|
||||
ret = ed25519_sign_prefixed(&sig, (const uint8_t *) data, strlen(data),
|
||||
"Tor onion service descriptor sig v3", &kp);
|
||||
tt_int_op(ret, OP_EQ, 0);
|
||||
ret = ed25519_signature_to_base64(sig_b64, &sig);
|
||||
tt_int_op(ret, OP_EQ, 0);
|
||||
ed25519_signature_to_base64(sig_b64, &sig);
|
||||
/* Build the descriptor that should be valid. */
|
||||
tor_asprintf(&desc, "%ssignature %s\n", data, sig_b64);
|
||||
ret = desc_sig_is_valid(sig_b64, &kp.pubkey, desc, strlen(desc));
|
||||
|
Loading…
Reference in New Issue
Block a user