mirrors/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2025-02-26 15:42:34 +01:00
Code Issues Projects Releases Wiki Activity
tor/src/trunnel/include.am

59 lines
1.6 KiB
Text
Raw Normal View History

Use trunnel for crypto_pwbox encoding/decoding. This reduces the likelihood that I have made any exploitable errors in the encoding/decoding. This commit also imports the trunnel runtime source into Tor.
2014-09-24 10:51:39 -04:00
noinst_LIBRARIES += \
src/trunnel/libor-trunnel.a
if UNITTESTS_ENABLED
noinst_LIBRARIES += \
src/trunnel/libor-trunnel-testing.a
endif
prop220: Implement certificates and key storage/creation For prop220, we have a new ed25519 certificate type. This patch implements the code to create, parse, and validate those, along with code for routers to maintain their own sets of certificates and keys. (Some parts of master identity key encryption are done, but the implementation of that isn't finished)
2014-09-30 16:00:17 -04:00
TRUNNELINPUTS = \
src/trunnel/ed25519_cert.trunnel \
Add trunnel-generated items for link handshake code. This includes the link handshake variations for proposal220. We'll use this for testing first, and then use it to extend our current code to support prop220.
2014-10-08 14:43:33 -04:00
src/trunnel/link_handshake.trunnel \
Netflow record collapsing defense. This defense will cause Cisco, Juniper, Fortinet, and other routers operating in the default configuration to collapse netflow records that would normally be split due to the 15 second flow idle timeout. Collapsing these records should greatly reduce the utility of default netflow data for correlation attacks, since all client-side records should become 30 minute chunks of total bytes sent/received, rather than creating multiple separate records for every webpage load/ssh command interaction/XMPP chat/whatever else happens to be inactive for more than 15 seconds. The defense adds consensus parameters to govern the range of timeout values for sending padding packets, as well as for keeping connections open. The defense only sends padding when connections are otherwise inactive, and it does not pad connections used solely for directory traffic at all. By default it also doesn't pad inter-relay connections. Statistics on the total padding in the last 24 hours are exported to the extra-info descriptors.
2016-09-06 11:35:53 -07:00
src/trunnel/pwbox.trunnel \
Generate trunnel impls and include into build
2018-05-13 14:13:15 +02:00
src/trunnel/channelpadding_negotiation.trunnel \
src/trunner/socks5.trunnel
prop220: Implement certificates and key storage/creation For prop220, we have a new ed25519 certificate type. This patch implements the code to create, parse, and validate those, along with code for routers to maintain their own sets of certificates and keys. (Some parts of master identity key encryption are done, but the implementation of that isn't finished)
2014-09-30 16:00:17 -04:00
Use trunnel for crypto_pwbox encoding/decoding. This reduces the likelihood that I have made any exploitable errors in the encoding/decoding. This commit also imports the trunnel runtime source into Tor.
2014-09-24 10:51:39 -04:00
TRUNNELSOURCES = \
prop220: Implement certificates and key storage/creation For prop220, we have a new ed25519 certificate type. This patch implements the code to create, parse, and validate those, along with code for routers to maintain their own sets of certificates and keys. (Some parts of master identity key encryption are done, but the implementation of that isn't finished)
2014-09-30 16:00:17 -04:00
src/ext/trunnel/trunnel.c \
src/trunnel/ed25519_cert.c \
Add trunnel-generated items for link handshake code. This includes the link handshake variations for proposal220. We'll use this for testing first, and then use it to extend our current code to support prop220.
2014-10-08 14:43:33 -04:00
src/trunnel/link_handshake.c \
prop224: Add ESTABLISH_INTRO and INTRO_ESTABLISHED trunnel definition Signed-off-by: David Goulet <dgoulet@torproject.org>
2016-08-29 15:28:58 -04:00
src/trunnel/pwbox.c \
src/trunnel/hs/cell_common.c \
prop224: Add INTRODUCE1 and INTRODUCE_ACK trunnel definition Signed-off-by: David Goulet <dgoulet@torproject.org>
2016-08-29 15:31:38 -04:00
src/trunnel/hs/cell_establish_intro.c \
Netflow record collapsing defense. This defense will cause Cisco, Juniper, Fortinet, and other routers operating in the default configuration to collapse netflow records that would normally be split due to the 15 second flow idle timeout. Collapsing these records should greatly reduce the utility of default netflow data for correlation attacks, since all client-side records should become 30 minute chunks of total bytes sent/received, rather than creating multiple separate records for every webpage load/ssh command interaction/XMPP chat/whatever else happens to be inactive for more than 15 seconds. The defense adds consensus parameters to govern the range of timeout values for sending padding packets, as well as for keeping connections open. The defense only sends padding when connections are otherwise inactive, and it does not pad connections used solely for directory traffic at all. By default it also doesn't pad inter-relay connections. Statistics on the total padding in the last 24 hours are exported to the extra-info descriptors.
2016-09-06 11:35:53 -07:00
src/trunnel/hs/cell_introduce1.c \
trunnel: Add prop224 RENDEZVOUS1 cell definition Signed-off-by: David Goulet <dgoulet@torproject.org>
2017-07-23 12:32:16 -04:00
src/trunnel/hs/cell_rendezvous.c \
Generate trunnel impls and include into build
2018-05-13 14:13:15 +02:00
src/trunnel/channelpadding_negotiation.c \
src/trunnel/socks5.c
Use trunnel for crypto_pwbox encoding/decoding. This reduces the likelihood that I have made any exploitable errors in the encoding/decoding. This commit also imports the trunnel runtime source into Tor.
2014-09-24 10:51:39 -04:00
TRUNNELHEADERS = \
prop220: Implement certificates and key storage/creation For prop220, we have a new ed25519 certificate type. This patch implements the code to create, parse, and validate those, along with code for routers to maintain their own sets of certificates and keys. (Some parts of master identity key encryption are done, but the implementation of that isn't finished)
2014-09-30 16:00:17 -04:00
src/ext/trunnel/trunnel.h \
src/ext/trunnel/trunnel-impl.h \
prop224: Add ESTABLISH_INTRO and INTRO_ESTABLISHED trunnel definition Signed-off-by: David Goulet <dgoulet@torproject.org>
2016-08-29 15:28:58 -04:00
src/trunnel/trunnel-local.h \
prop220: Implement certificates and key storage/creation For prop220, we have a new ed25519 certificate type. This patch implements the code to create, parse, and validate those, along with code for routers to maintain their own sets of certificates and keys. (Some parts of master identity key encryption are done, but the implementation of that isn't finished)
2014-09-30 16:00:17 -04:00
src/trunnel/ed25519_cert.h \
prop224: Add ESTABLISH_INTRO and INTRO_ESTABLISHED trunnel definition Signed-off-by: David Goulet <dgoulet@torproject.org>
2016-08-29 15:28:58 -04:00
src/trunnel/link_handshake.h \
src/trunnel/pwbox.h \
src/trunnel/hs/cell_common.h \
prop224: Add INTRODUCE1 and INTRODUCE_ACK trunnel definition Signed-off-by: David Goulet <dgoulet@torproject.org>
2016-08-29 15:31:38 -04:00
src/trunnel/hs/cell_establish_intro.h \
Netflow record collapsing defense. This defense will cause Cisco, Juniper, Fortinet, and other routers operating in the default configuration to collapse netflow records that would normally be split due to the 15 second flow idle timeout. Collapsing these records should greatly reduce the utility of default netflow data for correlation attacks, since all client-side records should become 30 minute chunks of total bytes sent/received, rather than creating multiple separate records for every webpage load/ssh command interaction/XMPP chat/whatever else happens to be inactive for more than 15 seconds. The defense adds consensus parameters to govern the range of timeout values for sending padding packets, as well as for keeping connections open. The defense only sends padding when connections are otherwise inactive, and it does not pad connections used solely for directory traffic at all. By default it also doesn't pad inter-relay connections. Statistics on the total padding in the last 24 hours are exported to the extra-info descriptors.
2016-09-06 11:35:53 -07:00
src/trunnel/hs/cell_introduce1.h \
trunnel: Add prop224 RENDEZVOUS1 cell definition Signed-off-by: David Goulet <dgoulet@torproject.org>
2017-07-23 12:32:16 -04:00
src/trunnel/hs/cell_rendezvous.h \
Generate trunnel impls and include into build
2018-05-13 14:13:15 +02:00
src/trunnel/channelpadding_negotiation.h \
src/trunnel/socks5.h
Use trunnel for crypto_pwbox encoding/decoding. This reduces the likelihood that I have made any exploitable errors in the encoding/decoding. This commit also imports the trunnel runtime source into Tor.
2014-09-24 10:51:39 -04:00
src_trunnel_libor_trunnel_a_SOURCES = $(TRUNNELSOURCES)
Simplify AM_CPPFLAGS include setup We had accumulated a bunch of cruft here. Now let's only include src and src/ext. (exception: src/trunnel is autogenerated code, and need to include src/trunnel.) This commit will break the build hard. The next commit will fix it.
2018-06-20 09:25:50 -04:00
src_trunnel_libor_trunnel_a_CPPFLAGS = \
-DTRUNNEL_LOCAL_H $(AM_CPPFLAGS) -I$(top_srcdir)/src/trunnel
Use trunnel for crypto_pwbox encoding/decoding. This reduces the likelihood that I have made any exploitable errors in the encoding/decoding. This commit also imports the trunnel runtime source into Tor.
2014-09-24 10:51:39 -04:00
Heed --disable-unittests properly
2018-06-02 12:53:04 +03:00
if UNITTESTS_ENABLED
Use trunnel for crypto_pwbox encoding/decoding. This reduces the likelihood that I have made any exploitable errors in the encoding/decoding. This commit also imports the trunnel runtime source into Tor.
2014-09-24 10:51:39 -04:00
src_trunnel_libor_trunnel_testing_a_SOURCES = $(TRUNNELSOURCES)
Heed --disable-unittests properly
2018-06-02 12:53:04 +03:00
else
src_trunnel_libor_trunnel_testing_a_SOURCES =
endif
Disable assertions during coverage builds This removes roughly 5000 branches in my testing. We never want to trigger assertions even during tests, so this is sane. Implements #15400.
2015-03-20 13:12:09 +01:00
src_trunnel_libor_trunnel_testing_a_CPPFLAGS = -DTRUNNEL_LOCAL_H $(AM_CPPFLAGS) $(TEST_CPPFLAGS)
Use trunnel for crypto_pwbox encoding/decoding. This reduces the likelihood that I have made any exploitable errors in the encoding/decoding. This commit also imports the trunnel runtime source into Tor.
2014-09-24 10:51:39 -04:00
src_trunnel_libor_trunnel_testing_a_CFLAGS = $(AM_CFLAGS) $(TEST_CFLAGS)
noinst_HEADERS+= $(TRUNNELHEADERS)
Add a README for the trunnel directory
2015-09-29 13:43:12 +02:00
EXTRA_DIST += \
src/trunnel/README
Reference in a new issue Copy permalink