Skip to content

proto: Make sure that auth tags are truncated to 20 bytes

Nick Mathewson requested to merge nickm/arti:20_byte_sendme_digest into main

Onion service hops (pointlessly) use SHA3-256 for their authentication, but they truncate it to 20 bytes (assuming I'm reading the C right.)

See torspec#204 (closed) for clarification here.

This will help us get onion services working, and is a possibly less bodgy version of !1241 (closed).

Merge request reports

Loading