#22948: Padding, Keepalive and Drop cells should have random payloads --------------------------------+------------------------------------ Reporter: teor | Owner: Type: defect | Status: new Priority: Medium | Milestone: Tor: 0.3.1.x-final Component: Core Tor/Tor | Version: Severity: Normal | Resolution: Keywords: tor-spec, security | Actual Points: Parent ID: #18856 | Points: 0.5 Reviewer: | Sponsor: --------------------------------+------------------------------------ Changes (by teor):
* keywords: tor-spec, security-maybe => tor-spec, security * milestone: Tor: 0.3.2.x-final => Tor: 0.3.1.x-final Comment: I don't know how to classify this security issue. https://trac.torproject.org/projects/tor/wiki/org/teams/NetworkTeam/SecurityPolicy Is it low severity: "A defense-in-depth mechanism provides less defense- in-depth than it should"? Or is it high severity: A potential denial of service attack that affects clients and hidden services? (I split the security policy clarification off into #22962.) Should we fix it in 0.3.1? Should we fill all cells with random bytes? (Split off into #22963.) -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22948#comment:7> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online _______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs