tor/changes/trove-2017-009

  o Major bugfixes (security):
    - When checking for replays in the INTRODUCE1 cell data for a (legacy)
      hiddden service, correctly detect replays in the RSA-encrypted part of
      the cell. We were previously checking for replays on the entire cell,
      but those can be circumvented due to the malleability of Tor's legacy
      hybrid encryption. This fix helps prevent a traffic confirmation
      attack. Fixes bug 24244; bugfix on 0.2.4.1-alpha. This issue is also
      tracked as TROVE-2017-009 and CVE-2017-8819.
Fix changes file 2017-11-30 11:52:40 -05:00			`o Major bugfixes (security):`
Fix length of replaycache-checked data. This is a regression; we should have been checking only the public-key encrypted portion. Fixes bug 24244, TROVE-2017-009, and CVE-2017-8819. 2017-11-11 13:40:21 -05:00			`- When checking for replays in the INTRODUCE1 cell data for a (legacy)`
			`hiddden service, correctly detect replays in the RSA-encrypted part of`
			`the cell. We were previously checking for replays on the entire cell,`
			`but those can be circumvented due to the malleability of Tor's legacy`
			`hybrid encryption. This fix helps prevent a traffic confirmation`
			`attack. Fixes bug 24244; bugfix on 0.2.4.1-alpha. This issue is also`
			`tracked as TROVE-2017-009 and CVE-2017-8819.`