[tor-bugs] #19163 [Core Tor/Tor]: Maybe RSOS single-hop circuits should always have ntor

[Tor Bug Tracker & Wiki]

#19163: Maybe RSOS single-hop circuits should always have ntor
------------------------------+--------------------------
     Reporter:  teor          |      Owner:  teor
         Type:  defect        |     Status:  new
     Priority:  Medium        |  Milestone:  Tor: 0.2.???
    Component:  Core Tor/Tor  |    Version:
     Severity:  Normal        |   Keywords:  rsos
Actual Points:                |  Parent ID:  #17178
       Points:  0.5           |   Reviewer:
      Sponsor:                |
------------------------------+--------------------------
 isis asks in #1744:
 {{{
  // XXXprop#188 Why do we not care if it's ntor if it's only one hop?
 }}}

 I think it's because one-hop circuits were originally used only for
 directory fetches, which are authenticated by signature (and not private).

 But with RSOS, maybe we should require all one-hop paths to have ntor. I
 need to talk to a cryptographer about this.

 See the `populate_cpath` function for details.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/19163>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online