tor/changes/pathsel-BUGGY-a
Robert Ransom 308f6dad20 Mitigate a side-channel leak of which relays Tor chooses for a circuit
Tor's and OpenSSL's current design guarantee that there are other leaks,
but this one is likely to be more easily exploitable, and is easy to fix.
2012-08-03 11:49:51 -04:00

13 lines
573 B
Plaintext

o Security fixes:
- Try to leak less information about what relays a client is
choosing to a side-channel attacker. Previously, a Tor client
would stop iterating through the list of available relays as
soon as it had chosen one, thus leaking information about which
relays it picked for a circuit to a timing attack. (Tor is
likely to still leak information about which relays it has
chosen for a circuit to other processes on the same computer,
through e.g. which cache lines it loads while building the
circuit.)