Delivery-Date: Thu, 30 Oct 2014 19:40:41 -0400
Return-Path: <tor-talk-bounces@lists.torproject.org>
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on moria.seul.org
X-Spam-Level: 
X-Spam-Status: No, score=-4.7 required=5.0 tests=BAYES_00,DKIM_SIGNED,
	RCVD_IN_DNSWL_MED,RP_MATCHES_RCVD,T_DKIM_INVALID autolearn=ham version=3.3.1
X-Original-To: archiver@seul.org
Delivered-To: archiver@seul.org
Received: from eugeni.torproject.org (eugeni.torproject.org [38.229.72.13])
	(using TLSv1.2 with cipher ADH-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by khazad-dum.seul.org (Postfix) with ESMTPS id EA64C1E08C6;
	Thu, 30 Oct 2014 19:40:39 -0400 (EDT)
Received: from eugeni.torproject.org (localhost [127.0.0.1])
	by eugeni.torproject.org (Postfix) with ESMTP id AF41031391;
	Thu, 30 Oct 2014 23:40:36 +0000 (UTC)
Received: from localhost (localhost [127.0.0.1])
 by eugeni.torproject.org (Postfix) with ESMTP id 8464031308
 for <tor-talk@lists.torproject.org>; Thu, 30 Oct 2014 23:40:28 +0000 (UTC)
X-Virus-Scanned: Debian amavisd-new at eugeni.torproject.org
Received: from eugeni.torproject.org ([127.0.0.1])
 by localhost (eugeni.torproject.org [127.0.0.1]) (amavisd-new, port 10024)
 with ESMTP id lmEK8jb2UTgQ for <tor-talk@lists.torproject.org>;
 Thu, 30 Oct 2014 23:40:28 +0000 (UTC)
Received: from mail-la0-x236.google.com (mail-la0-x236.google.com
 [IPv6:2a00:1450:4010:c03::236])
 (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (not verified))
 by eugeni.torproject.org (Postfix) with ESMTPS id 23AD7312E5
 for <tor-talk@lists.torproject.org>; Thu, 30 Oct 2014 23:40:28 +0000 (UTC)
Received: by mail-la0-f54.google.com with SMTP id gm9so5206450lab.41
 for <tor-talk@lists.torproject.org>; Thu, 30 Oct 2014 16:40:24 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:sender:in-reply-to:references:date:message-id:subject
 :from:to:content-type;
 bh=xb9FQv84azqcdKxHafgUtJGTqeJFBo6XDPa80Lq8Q9o=;
 b=ax/vRBOUziNYH98YEotmAKOy6eW/QMtcc/4U0yiV887P7EmWnHQBKk7GEvu+umB9qx
 QK3ShUvlEiBQh9V3aKAm4rdijXquzRjod/DRMuwAlWrg1pmjqOvnw6DJ5RsAsN9UZMWh
 NZIyi+4UdWeIIjDz1yk2dzx75h/LH2e3IANCYfcJi5Kz0bMIBAfJl2RBQ/I8n5vkETe4
 ntMu2oRVON/uubPu3MFCSBcGq55bRKnmaZL0cU//AVWohytkHH3n41hxyp53F7KXqqX1
 iVoygy7S+YQr3ho1VQe6Lus2C8N/EAdVgYd42GEFwrZs5RuT31lLj+6cFQgXS/S2sQnQ
 gQrQ==
MIME-Version: 1.0
X-Received: by 10.152.27.67 with SMTP id r3mr22193839lag.19.1414712424754;
 Thu, 30 Oct 2014 16:40:24 -0700 (PDT)
Received: by 10.112.14.10 with HTTP; Thu, 30 Oct 2014 16:40:24 -0700 (PDT)
In-Reply-To: <a06cb37688824cd1b4472ff571155c90.squirrel@bitmailendavkbec.onion>
References: <a06cb37688824cd1b4472ff571155c90.squirrel@bitmailendavkbec.onion>
Date: Thu, 30 Oct 2014 19:40:24 -0400
X-Google-Sender-Auth: bKdKdLdmEO7CVQHc_VoJdmTXfyk
Message-ID: <CAKDKvuz2403uV==DDRFOiv4JCaO17v7BsBpLDW1bY+z4ssAxWg@mail.gmail.com>
From: Nick Mathewson <nickm@alum.mit.edu>
To: "tor-talk@lists.torproject.org" <tor-talk@lists.torproject.org>
Subject: Re: [tor-talk] Questions about crypto used in TAP/Ntor
X-BeenThere: tor-talk@lists.torproject.org
X-Mailman-Version: 2.1.15
Precedence: list
Reply-To: tor-talk@lists.torproject.org
List-Id: "all discussion about theory, design,
 and development of Onion Routing" <tor-talk.lists.torproject.org>
List-Unsubscribe: <https://lists.torproject.org/cgi-bin/mailman/options/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=unsubscribe>
List-Archive: <http://lists.torproject.org/pipermail/tor-talk/>
List-Post: <mailto:tor-talk@lists.torproject.org>
List-Help: <mailto:tor-talk-request@lists.torproject.org?subject=help>
List-Subscribe: <https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk>, 
 <mailto:tor-talk-request@lists.torproject.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: tor-talk-bounces@lists.torproject.org
Sender: "tor-talk" <tor-talk-bounces@lists.torproject.org>

On Thu, Oct 30, 2014 at 2:22 PM,
<BM-2cUqBqHFVDHuY34ZcpL3PNgkpLUEEer8ev@bitmessage.ch> wrote:
> Dear experts,
>
> Want to clarify some things:
>
> 1. The fignerprint of a Tor relay which is advertised in the direcotry
> data is a SHA1 sum of which key? Sice now a relay has a secret onion key
> and a secret key for Ntor.

Neither one; it's a fingerprint of the identity key. (That's the one
called "signing-key" in the descriptors.)  See section 1.1 of
tor-spec.txt for a list of keys.

> 2. The fingerprint (since it's a hash sum of the key) is what strengths
> encryption between relays or clients and relays, kind of like a CA in SSL?
> That is why the directory authorities sign the list of fingereprints - is
> this correct?

These identity key fingerprints are used to authenticate link
encryption, to know you've done a TLS connection to the right node.
They're used to sign all the other keys.

> 3. How strong is Ntor compared to TAP? As I can see in latest Tor version
> now clients prefer Ntor by default - are there any plans to deprecate TAP
> in teh future?

ntor is probably as strong as curve25519; TAP is probably as strong as
dh1024. (So, ntor is probably far far stronger than TAP.)

I'd like to deprecate TAP.  Some time in the next 2-8 months, for
instance, I'd like to make authorities reject relays that don't
support ntor.  That should be sufficient to stop clients running 0.2.4
and later from having to use TAP.

> 4. The fingerprint is a SHA1 hash, as described in the papers. Any plans
> to move in the immediate future to a stronger hash algorithm, like SHA256?

I'm working on implementing proposal #220 right now, which migrates
relay identities to (unhashed) Ed25519 keys.

[tor-spec.txt] https://gitweb.torproject.org/torspec.git/blob_plain/HEAD:/tor-spec.txt
[proposal 220] https://gitweb.torproject.org/torspec.git/blob/HEAD:/proposals/220-ecc-id-keys.txt
[implementation in progress]
https://trac.torproject.org/projects/tor/ticket/12498
-- 
Nick
-- 
tor-talk mailing list - tor-talk@lists.torproject.org
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk

