Re: [tor-dev] Safe Alternative Uses of Onion Service Keys

2020-08-12 Thread Matthew Finkel
On Mon, Aug 10, 2020 at 09:00:32AM -0400, Nick Mathewson wrote: > On Wed, Jul 29, 2020 at 1:15 AM Matthew Finkel wrote: > > > > Hello everyone, > > Hi, Matt! > > There's a part of this that I'm still trying to figure out: > > > The safest usage of the long-term keys for alternative purposes I s

Re: [tor-dev] Safe Alternative Uses of Onion Service Keys

2020-08-10 Thread Nick Mathewson
but it's trivial to verify the certificate if you know what the On Mon, Aug 10, 2020 at 9:00 AM Nick Mathewson wrote: > > On Wed, Jul 29, 2020 at 1:15 AM Matthew Finkel wrote: > > > > Hello everyone, > > Hi, Matt! > > There's a part of this that I'm still trying to figure out: > > > The safest u

Re: [tor-dev] Safe Alternative Uses of Onion Service Keys

2020-08-10 Thread Nick Mathewson
On Wed, Jul 29, 2020 at 1:15 AM Matthew Finkel wrote: > > Hello everyone, Hi, Matt! There's a part of this that I'm still trying to figure out: > The safest usage of the long-term keys for alternative purposes I see > appears to be by deriving a (fixed/deterministic) blinded key pair using > th

Re: [tor-dev] Safe Alternative Uses of Onion Service Keys

2020-07-30 Thread Matthew Finkel
On Thu, Jul 30, 2020 at 01:18:33PM +0300, George Kadianakis wrote: > Matthew Finkel writes: > > > Hello everyone, > > > > Hello hello! > > These are all good questions and they become more and more important as > the onionspace grows and more use cases appear. > > > > > > > For computing the

Re: [tor-dev] Safe Alternative Uses of Onion Service Keys

2020-07-30 Thread George Kadianakis
Matthew Finkel writes: > Hello everyone, > Hello hello! These are all good questions and they become more and more important as the onionspace grows and more use cases appear. > > > For computing the blinded key, the first 32 bytes of the long-term > secret key (LH) are multiplied with a blin

Re: [tor-dev] Safe Alternative Uses of Onion Service Keys

2020-07-29 Thread Alexander Færøy
On 2020/07/29 05:15, Matthew Finkel wrote: > > [ ... snip ... ] > > A signature must include "v0" and the values used in "-MM-DD" and > INT_8(validity_period), such that the client can derive the correct > blinded public key for verification when starting from the long-term > identity key. The

[tor-dev] Safe Alternative Uses of Onion Service Keys

2020-07-28 Thread Matthew Finkel
Hello everyone, Onion service version two (v2) key pairs were used for more purposes than simply facilitating the establishment of rendezvous circuits, in particular third-party applications used this key in numerous ways. Similarly, version three (v3) onion service keys are being re-used in simil