Opened 2 weeks ago

Closed 2 weeks ago

#33139 closed defect (fixed)

New Identity should remove v3 client auth ephemeral keys

Reported by: mcs Owned by:
Priority: Medium Milestone: Tor: 0.4.3.x-final
Component: Core Tor/Tor Version:
Severity: Normal Keywords: security 043-should
Cc: brade Actual Points: 0.1
Parent ID: #30000 Points: 0.1
Reviewer: asn Sponsor: Sponsor27-must

Description

As discussed in ticket:19757#comment:31 through comment 34, tor should remove all of the ephemeral v3 client authorization keys when a NEWNYM signal is received (new identity).

Child Tickets

Change History (5)

comment:1 Changed 2 weeks ago by mcs

Sponsor: Sponsor27-must

comment:2 Changed 2 weeks ago by nickm

Keywords: security 043-should 042-backport added
Milestone: Tor: 0.4.3.x-final

comment:3 Changed 2 weeks ago by dgoulet

Keywords: 042-backport removed

No backport needed. Ephemeral client authorization was introduced in 043 alpha.

comment:4 Changed 2 weeks ago by dgoulet

Actual Points: 0.1
Points: 0.1
Reviewer: asn
Status: newneeds_review

Branch: ticket33139_043_01
PR: https://github.com/torproject/tor/pull/1704

comment:5 Changed 2 weeks ago by asn

Resolution: fixed
Status: needs_reviewclosed

Looking real good! Merged!

Note: See TracTickets for help on using tickets.