torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Prohibit the use of one entry node with an HS

Browse Source 
In a nutshell, since a circuit can not exit at its entry point, it's very
easy for an attacker to find the hidden service guard if only one EntryNodes
is specified since for that guard, the HS will refuse to build a rendezvous
circuit to it.

For now, the best solution is to stop tor to allow a single EntryNodes for
an hidden service.

Fixes #14917

Signed-off-by: David Goulet <dgoulet@ev0ke.net>
This commit is contained in:
David Goulet
2015-09-02 14:53:39 +02:00
committed by Nick Mathewson
parent f6bd8fbb80
commit 07b3028db7
4 changed files with 31 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/bug14917
+5
View File
@@ -0,0 +1,5 @@
o Major bugfix
- For an hidden service, it is now prohibited to use one single
EntryNodes to avoid a very easy guard discovery attack. For more
details, see the ticket description here:
https://trac.torproject.org/projects/tor/ticket/14917. Fixes #14917.