[tor-bugs] #10887 [Obfsproxy]: ScrambleSuit should make it easy for bridge admins to learn password

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed May 7 23:11:45 UTC 2014


#10887: ScrambleSuit should make it easy for bridge admins to learn password
-------------------------+-------------------------------------------------
     Reporter:  phw      |      Owner:  phw
         Type:           |     Status:  needs_revision
  enhancement            |  Milestone:
     Priority:  normal   |    Version:
    Component:           |   Keywords:  scramblesuit, password, shared
  Obfsproxy              |  secret
   Resolution:           |  Parent ID:
Actual Points:           |
       Points:           |
-------------------------+-------------------------------------------------

Comment (by asn):

 Also, the assert in `writeServerDescriptor`:
 {{{    assert len(password) == const.SHARED_SECRET_LENGTH }}}
 will trigger if an operator specifies a different sized password in his
 torrc.

 We should probaly not trigger an assert, and instead fail gracefully.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10887#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list