Sort introduction points before encoding?
It might be a good idea to make sure that when we encode introduction points, we do so in a standard order so that we don't leak any information. Right now, introduction points are selected in pick_needed_intro_points()
and encoded in get_inner_encrypted_layer_plaintext()
.
This probably needs a specification change too. See also arti#1039 (closed).