[tor-commits] [torspec] 05/06: Refer to N_hs_desc_enc in description of encrypted-cookie
gitolite role
git at cupani.torproject.org
Wed Feb 8 16:40:22 UTC 2023
This is an automated email from the git hooks/post-receive script.
nickm pushed a commit to branch main
in repository torspec.
commit 78385868959876f08149d7cd0346b2603d327a0f
Author: Nick Mathewson <nickm at torproject.org>
AuthorDate: Wed Feb 8 11:39:37 2023 -0500
Refer to N_hs_desc_enc in description of encrypted-cookie
---
rend-spec-v3.txt | 11 +++--------
1 file changed, 3 insertions(+), 8 deletions(-)
diff --git a/rend-spec-v3.txt b/rend-spec-v3.txt
index 0dc20db..947d82e 100644
--- a/rend-spec-v3.txt
+++ b/rend-spec-v3.txt
@@ -1242,13 +1242,8 @@ Table of contents:
a pre-shared x25519 keypair (`KP_hsc_desc_enc`) which is used to
decrypt the descriptor cookie.
-
- We now describe the descriptor cookie encryption scheme. Here are the
- relevant keys:
-
- descriptor_cookie = descriptor cookie used to encrypt the descriptor
-
- And here is what the hidden service computes:
+ We now describe the descriptor cookie encryption scheme. Here is what
+ the hidden service computes:
SECRET_SEED = x25519(KS_hs_desc_ephem, KP_hsc_desc_enc)
KEYS = KDF(N_hs_subcred | SECRET_SEED, 40)
@@ -1263,7 +1258,7 @@ Table of contents:
- The "encrypted-cookie" field contains the descriptor cookie ciphertext
as follows and is encoded in base64:
- encrypted-cookie = STREAM(iv, COOKIE-KEY) XOR descriptor_cookie
+ encrypted-cookie = STREAM(iv, COOKIE-KEY) XOR N_hs_desc_enc.
See section [FIRST-LAYER-CLIENT-BEHAVIOR] for the client-side logic of
how to decrypt the descriptor cookie.
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
More information about the tor-commits
mailing list