nihilist/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-09-21 13:34:59 +02:00
Code Issues Packages Projects Releases Wiki Activity

changes file for bug11743

Browse Source
This commit is contained in:
Nick Mathewson 2014-05-06 16:28:34 -04:00
parent 4a621a50f5
commit ea570fa13c
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
changes/bug11743 Normal file
View File

@ -0,0 +1,15 @@
o Major security fixes (directory authorities):
- Directory authorities now include a digest of each relay's
identity key as a part of its microdescriptor.
This is a workaround for bug #11743, where Tor clients do not
support receiving multiple microdescriptors with the same SHA256
digest in the same consensus. When clients receive a consensus
like this, they only use one of the relays. Without this fix, a
hostile relay could selectively disable client use of target
relays by constucting a router descriptor with a different
identity and the same microdescriptor parameters and getting the
authorities to list it in a microdescriptor consensus. This fix
prevents an attacker from causing a microdescriptor collision,
because the router's identity is not forgeable.