[Bug 1497356] New: Review Request: obfs4 - The obfourscator, a pluggable transport for Tor

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



https://bugzilla.redhat.com/show_bug.cgi?id=1497356

            Bug ID: 1497356
           Summary: Review Request: obfs4 - The obfourscator, a pluggable
                    transport for Tor
           Product: Fedora
           Version: rawhide
         Component: Package Review
          Severity: medium
          Priority: medium
          Assignee: nobody@xxxxxxxxxxxxxxxxx
          Reporter: hedayatv@xxxxxxxxx
        QA Contact: extras-qa@xxxxxxxxxxxxxxxxx
                CC: package-review@xxxxxxxxxxxxxxxxxxxxxxx



Spec URL: https://hedayat.fedorapeople.org/reviews/obfs4/obfs4.spec
SRPM URL:
https://hedayat.fedorapeople.org/reviews/obfs4/obfs4-0.0.7-1.fc26.src.rpm
Description: This is a look-like nothing obfuscation protocol that incorporates
ideas and
concepts from Philipp Winter's ScrambleSuit protocol.  The obfs naming was
chosen primarily because it was shorter, in terms of protocol ancestry obfs4
is much closer to ScrambleSuit than obfs2/obfs3.

The notable differences between ScrambleSuit and obfs4:

 * The handshake always does a full key exchange (no such thing as a Session
   Ticket Handshake).
 * The handshake uses the Tor Project's ntor handshake with public keys
   obfuscated via the Elligator 2 mapping.
 * The link layer encryption uses NaCl secret boxes (Poly1305/XSalsa20).

As an added bonus, obfs4proxy also supports acting as an obfs2/3 client and
bridge to ease the transition to the new protocol.

Fedora Account System Username: hedayat

Koji scratch build:
https://koji.fedoraproject.org/koji/taskinfo?taskID=22150998


% rpmlint obfs4.spec ~/rpmbuild/SRPMS/obfs4-0.0.7-1.fc26.src.rpm
~/rpmbuild/RPMS/x86_64/obfs4-0.0.7-1.fc26.x86_64.rpm
~/rpmbuild/RPMS/x86_64/obfs4-debuginfo-0.0.7-1.fc26.x86_64.rpm 
obfs4.spec: W: invalid-url Source0: obfs4-0.0.7.tar.xz
obfs4.src: W: spelling-error Summary(en_US) obfourscator -> obfuscation
obfs4.src: W: spelling-error Summary(en_US) pluggable -> plug gable,
plug-gable, plugged
obfs4.src: W: spelling-error %description -l en_US obfs -> obs, fobs, obis
obfs4.src: W: spelling-error %description -l en_US ntor -> nor, tor, torn
obfs4.src: W: invalid-url Source0: obfs4-0.0.7.tar.xz
obfs4.x86_64: W: spelling-error Summary(en_US) obfourscator -> obfuscation
obfs4.x86_64: W: spelling-error Summary(en_US) pluggable -> plug gable,
plug-gable, plugged
obfs4.x86_64: W: spelling-error %description -l en_US obfs -> obs, fobs, obis
obfs4.x86_64: W: spelling-error %description -l en_US ntor -> nor, tor, torn
3 packages and 1 specfiles checked; 0 errors, 10 warnings.

Note: 'obfourscator' is how the developer have named it.
Tor calls these 'pluggable' transports.
"ntor handshake": type of handshake!

(The description is actually copied from the README file)

To properly work with SELinux enabled, bug #1496274 should be also fixed.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component
_______________________________________________
package-review mailing list -- package-review@xxxxxxxxxxxxxxxxxxxxxxx
To unsubscribe send an email to package-review-leave@xxxxxxxxxxxxxxxxxxxxxxx




[Index of Archives]     [Fedora Users]     [Fedora Desktop]     [Fedora SELinux]     [Yosemite Conditions]     [KDE Users]

  Powered by Linux