4 commits

Author	SHA1	Message	Date
Nick Mathewson	0b819a2a7c	Enforce more correspondence between ri and ei ... In particular, they have to list the same ed25519 certificate, and the SHA256 digest of the ei needs to match.	2015-05-28 10:42:29 -04:00
Nick Mathewson	efa21bb941	Implement proposal 228: cross-certification with onion keys ... Routers now use TAP and ntor onion keys to sign their identity keys, and put these signatures in their descriptors. That allows other parties to be confident that the onion keys are indeed controlled by the router that generated the descriptor.	2015-05-28 10:40:57 -04:00
Nick Mathewson	fe5d2477aa	Implement ed25519-signed descriptors ... Now that we have ed25519 keys, we can sign descriptors with them and check those signatures as documented in proposal 220.	2015-05-28 10:40:56 -04:00
Nick Mathewson	818e6f939d	prop220: Implement certificates and key storage/creation ... For prop220, we have a new ed25519 certificate type. This patch implements the code to create, parse, and validate those, along with code for routers to maintain their own sets of certificates and keys. (Some parts of master identity key encryption are done, but the implementation of that isn't finished)	2015-05-28 10:40:56 -04:00