[tbb-bugs] #20189 [Applications/Tor Browser]: MAR files should be signed with a modern signature algorithm.

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Sep 20 21:26:28 UTC 2016


#20189: MAR files should be signed with a modern signature algorithm.
--------------------------------------+----------------------------
 Reporter:  yawning                   |          Owner:  tbb-team
     Type:  enhancement               |         Status:  closed
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:  worksforme
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+----------------------------
Changes (by mcs):

 * status:  new => closed
 * resolution:   => worksforme


Comment:

 Mozilla still has an open bug for this issue
 (https://bugzilla.mozilla.org/show_bug.cgi?id=1105689) but our patched
 implementation uses SHA-512 signatures. See:
 https://gitweb.torproject.org/tor-browser.git/commit/modules/libmar?h=tor-
 browser-45.4.0esr-6.5-1&id=a1484f47c7a269a0d172a1c9e0c248f9792aeb34

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/20189#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list