[tor-bugs] #8106 [Tor]: Make .onion addresses harder to harvest by directory servers

[Tor Bug Tracker & Wiki]

#8106: Make .onion addresses harder to harvest by directory servers
-----------------------------+----------------------------------------------
 Reporter:  asn              |          Owner:                    
     Type:  defect           |         Status:  new               
 Priority:  major            |      Milestone:  Tor: 0.2.5.x-final
Component:  Tor              |        Version:                    
 Keywords:  SponsorZ tor-hs  |         Parent:                    
   Points:                   |   Actualpoints:                    
-----------------------------+----------------------------------------------

Comment(by rransom):

 Replying to [comment:12 asn]:
 > I called it extra because the hash in the vanilla verification equation
 is `H(R,A,M)` while yours has 4 parameters: `H(R, HB(nonce, B, A)*B,
 HB(nonce, B, A)*A, M)`

 In Ed25519, the public key is `A`.  In my blinded-public-key variant of
 Ed25519, the blinded public key is `(HB(nonce, B, A)*B, HB(nonce, B,
 A)*A)`.  Since Ed25519 uses `H(R, (public key), M)` as its message hash,
 the obvious message hash to use for a blinded-public-key version was `H(R,
 (blinded public key), M)`.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8106#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online