Reduce lifetime of DH public key replay-detection cache elements

This commit is contained in:
Robert Ransom
2011-10-30 04:41:16 -07:00
parent 272dd90b5c
commit 60ed98e184
2 changed files with 10 additions and 1 deletions
@@ -0,0 +1,9 @@
o Minor features:
- Reduce the lifetime of elements of hidden services'
Diffie-Hellman public key replay-detection cache from 60 minutes
to 5 minutes. This replay-detection cache is now used only to
detect multiple INTRODUCE2 cells specifying the same rendezvous
point, so we don't launch multiple simultaneous attempts to
connect to it.
+1 -1
View File
@@ -759,7 +759,7 @@ typedef struct rend_data_t {
/** Time interval for tracking replays of DH public keys received in
* INTRODUCE2 cells. Used only to avoid launching multiple
* simultaneous attempts to connect to the same rendezvous point. */
#define REND_REPLAY_TIME_INTERVAL (60 * 60)
#define REND_REPLAY_TIME_INTERVAL (5 * 60)
/** Used to indicate which way a cell is going on a circuit. */
typedef enum {