[Cryptech Tech] Tor consensus use case

Joachim Strömbergson joachim at secworks.se
Thu Jan 29 13:28:12 UTC 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Aloha!

Linus Nordberg wrote:
> Tor status votes are signed once per hour using an authority signing
> key [0]. Status votes are verified ~10 times per hour (by directory 
> authorities, which is what we care about for this use case).
> 
> The outcome of the voting, a consensus status ("the consensus"), is 
> signed once per hour as well. Consensus statuses are verified ~10
> times per hour.
> 
> The digest algorithm used is SHA1 or SHA256. The signing algorithm is
> RSA. The key size is 2048-4096.

So the required number of active private keys to be handled (including
storage) by the machine is one?

And from a single machine there would be 2 sign operations/s and 10
verification operations/s.

- From how many nodes generating inbound status messages can a node
receive and thus need to have public keys for? (If I understand the use
case.)

- -- 
Med vänlig hälsning, Yours

Joachim Strömbergson - Alltid i harmonisk svängning.
========================================================================
 Joachim Strömbergson          Secworks AB          joachim at secworks.se
========================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
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=TVgs
-----END PGP SIGNATURE-----


More information about the Tech mailing list