micah authored Sep 28, 2023 and meskio committed Oct 05, 2023

When renovate attempts to process the dependencies for lyrebird, it attempts to
go to: https://gitlab.com/yawning/edwards25519-extra.git?go-get=1. For some
reason, that produces a redirect loop in gitlab, and it causes the renovate run
to fail after a redirect limit is reached. You can see the redirect yourself by
visiting that URL in your browser.

With this change, by simply removing the .git at the end, renovate would visit
https://gitlab.com/yawning/edwards25519-extra?go-get=1 and that does not produce
a redirect loop.

Also, updated the man page file.

readFull method takes byte slice as param instead of allocating one inside.
Advantage that caller is free to allocate slice or use const size array like:

var addr [net.IPv4len]byte
req.readFull(addr[:])

So renovate doesn't create tons of merge requests.

Related: #40010

uTLS requires go version 1.19 to compile, let's make it explicit in the
go.mod

Related: #40011

Closes: tpo/anti-censorship/team#122

Mostly from f01e92dd.

The Elligator inverse map uses the least significant bits of the private
key, which clamping sets to 0, to choose a random low-order point to add
to the public key, to ensure uniformity of representatives.

The other ways that the private key is used, namely in calls to
curve25519.ScalarMult and curve25519.ScalarBaseMult, do their own
clamping when necessary and are documented to accept a uniformly random
scalar.

See discussion under "Step 2" at https://elligator.org/key-exchange.

While this was a good idea back when I did it:

 * People don't like the fact that it requires a fork of utls to fix
   compatibility issues, and would rather spend 3 years complaining
   about it instead of spending a weekend to fix the issues in
   upstream.

 * Tor over meek is trivially identifiable regardless of utls or not.

 * Malware asshats ruined domain fronting for everybody.