379 lines
27 KiB
Plaintext
379 lines
27 KiB
Plaintext
20:07:05 <hottuna_> Alright, meeting-time?
|
||
20:07:27 <str4d> o/
|
||
20:08:28 <RN-> tjink so
|
||
20:08:41 <hottuna_> eche|on, zzz, dg: ping
|
||
20:09:46 <hottuna_> let's wait until 20:15 and see if dg shows up.
|
||
20:10:21 <RN-> did everyone read zzz homework assignment?
|
||
20:10:36 <hottuna_> yepyep
|
||
20:11:28 <RN-> was over my head
|
||
20:11:31 <str4d> Okay, looks like the three meeting topics are ugha.i2p, the website revamp and the crypto. Anything else we want to cover?
|
||
20:11:50 <hottuna_> I think that is more than enough
|
||
20:11:58 <str4d> Alright:
|
||
20:12:01 <RN-> read it tho
|
||
20:12:04 <str4d> (0) Say Hi.
|
||
20:12:11 <str4d> (1) Ugha.i2p
|
||
20:12:18 <str4d> (2) Website revamp
|
||
20:12:29 <str4d> (3) Crypto discussion
|
||
20:12:32 <str4d> (0) Say Hi.
|
||
20:12:35 <str4d> Hi!
|
||
20:13:00 <RN-> hi
|
||
20:13:07 <hottuna_> hello everybody!
|
||
20:14:44 <RN-> we waiting 4 zzz and ech?
|
||
20:15:21 <hottuna_> I think we can manage until the crypto part
|
||
20:15:27 <str4d> eche|on was around an hour ago; zzz tends to speak when he needs to.
|
||
20:15:27 <RN-> guess they r at end...
|
||
20:15:49 <hottuna_> weltende, welterde, eche|on: ping, re new website
|
||
20:15:52 <hottuna_> altight
|
||
20:15:58 <RN-> anyone got the baffer?
|
||
20:15:58 <str4d> And everyone else can turn up when they do ^_^
|
||
20:16:05 <str4d> (1) Ugha.i2p
|
||
20:16:05 <hottuna_> So.. ugha?
|
||
20:16:08 <str4d> o/
|
||
20:16:39 <zzz> here, standing by until 3), if it's reasonbly fast
|
||
20:16:52 <hottuna_> Alright, I posted a content-request page last week
|
||
20:16:52 <hottuna_> syndie/imule content was requested
|
||
20:16:59 <hottuna_> and has as far as I can see been submitted
|
||
20:17:18 * str4d can
|
||
20:17:29 <str4d> 't actually load ugha right now =P
|
||
20:17:41 <str4d> Do we know who runs ugha?
|
||
20:18:04 <hottuna_> I don't
|
||
20:18:23 <hottuna_> do we have any further ideas about what to change/add to ugha?
|
||
20:18:31 <str4d> Because it would be useful to get some proper spam protection if possible.
|
||
20:18:38 <eche|on> we do partly know/guess who runs it. but it will not be disclosured here
|
||
20:18:47 <eche|on> and owner did not respond yet
|
||
20:18:54 <dg> Okay, hey
|
||
20:18:57 <str4d> eche|on: fair enough.
|
||
20:18:57 <eche|on> ugha.i2p was cleaned from spam
|
||
20:19:09 <str4d> eche|on: how much work was that?
|
||
20:19:12 <eche|on> and I added a site about iMule and syndie, KillYourTV added a bit more
|
||
20:19:30 <eche|on> spam? a lot, it was >200 or even >400 spam messages to be removed
|
||
20:19:38 <eche|on> they appeared in 2 years time
|
||
20:20:09 <str4d> And just manually removed?
|
||
20:20:24 <hottuna_> did it appear over the inproxy?
|
||
20:20:35 <dg> I was wondering this
|
||
20:20:50 <dg> sorry for being late although I managed to get here :)
|
||
20:20:53 <eche|on> yea, str4d, click each spam site, click delete site, click yes, I want to remove, click next spam site
|
||
20:21:08 <eche|on> and IMHO it is on INproxy.
|
||
20:21:27 <eche|on> yeah, it is
|
||
20:21:58 <eche|on> http://ugha.i2p.to/RecentChanges
|
||
20:22:01 <hottuna_> alright, maybe it shouldnt be accessible over the inproxy?
|
||
20:22:15 <RN-> so... set read omly for inproxy?
|
||
20:22:15 <eche|on> maybe someone want to count the "delete" pictures ;-)
|
||
20:23:34 <hottuna_> is it possible to notify the admin via the the wiki?
|
||
20:23:45 <eche|on> guess not
|
||
20:23:48 <hottuna_> a read-only via inproxy rule would probably be good
|
||
20:23:51 <hottuna_> ok
|
||
20:24:06 <hottuna_> eche|on, but you know who? you could do it?
|
||
20:24:28 <eche|on> I cannot do anything on it, I am just a user like anyone else
|
||
20:24:43 <dg> The person obviously is not active.
|
||
20:24:46 <dg> So.. maybe still no.
|
||
20:24:51 <eche|on> all I can do is asking tino (i2p.to owner) to block it.
|
||
20:25:18 <hottuna_> is blocking it entirely an acceptable solution?
|
||
20:26:01 <eche|on> yes
|
||
20:26:05 <dg> not long term
|
||
20:26:30 <RN-> I agree with dg
|
||
20:26:44 <eche|on> it is a wiki. It needs active administration to remove unwatned content
|
||
20:26:44 <hottuna_> i think blocking it is acceptable.. since it only is of use to people who are already using i2p
|
||
20:26:57 <eche|on> but as we also have active spammers inside of I2P....
|
||
20:26:57 <zzz> tino's not going to take action unless the owner requests it
|
||
20:27:04 <zzz> at least, he shouldnt.
|
||
20:27:41 <hottuna_> eche|on, could you contact the owner?
|
||
20:27:52 <eche|on> currently I visit ugha.i2p daily and remove the spam
|
||
20:28:15 <eche|on> hottuna_: I did contact via IRC and email already. now it is time for person to react.
|
||
20:28:38 <zzz> if it continues to be an embarassment we can take it out of the router console, whether we have a replacement or not
|
||
20:28:41 <eche|on> you know, we´ve seen same problem with forum.i2p already. thats the problem inside of I2P
|
||
20:28:48 <hottuna_> regarding blocking from i2p.to?
|
||
20:29:02 <eche|on> regarding active admin jobs on it
|
||
20:29:25 <hottuna_> ok
|
||
20:29:58 <hottuna_> anyway, if you manage to get some response, ask about blocking
|
||
20:31:01 <RN-> tino is not only inproxy anymore
|
||
20:31:43 <dg> Yeah.
|
||
20:32:01 <str4d> Aside from the spam issue, is there any content that ugha should have/needs updated>
|
||
20:32:29 <dg> Yes.
|
||
20:32:29 <eche|on> I had a look at the russian wiki. Thats a nice nice nice one
|
||
20:32:44 <str4d> From /Requests - "More advanced i2p config options and explanations." - hottuna_ you already added some of these, right?
|
||
20:32:44 <eche|on> it is really filled with good content and structured. but in russian.
|
||
20:32:44 <str4d> eche|on: link?
|
||
20:32:53 <hottuna_> what's the url for the russian wiki?
|
||
20:33:12 <hottuna_> str4d, yes. And I found a similar list on echelon.i2p
|
||
20:33:24 <eche|on> if I find it again...
|
||
20:34:10 <eche|on> imho rus.i2p
|
||
20:34:56 <eche|on> but more explanation about advanced config is nice
|
||
20:34:59 <str4d> Ooh, that *is* a nice wiki.
|
||
20:36:25 <eche|on> to sad I am a bit out of time, but if I get the chance, I do a few bits
|
||
20:36:32 <RN-> looks like it's using the same nice clean interface as cake why TV on his Cindy page
|
||
20:36:42 <dg> is it in english?
|
||
20:36:45 <RN-> I'll have to leave in about 10 minutes or less catch up with the rest of the meeting on my scroll back...
|
||
20:38:21 <str4d> Are there any other major points about ugha.i2p that need raising?
|
||
20:38:36 <hottuna_> no.
|
||
20:38:47 <hottuna_> I updated the request site
|
||
20:39:50 <str4d> The /I2pRfc page could do with updates, if it is/was ever planned to be authoritative (though the website is probably the better place for specs).
|
||
20:40:26 <dg> ugha.i2p has a lot of content which could be added or update
|
||
20:40:33 <dg> it seems to have more information about i2p's past and old tech documents than anywhere else
|
||
20:41:19 <str4d> Summary so far: spam is (currently) under control but needs active policing; there are numerous old pages that would be good to get updated (a good task for people who like writing).
|
||
20:41:34 <hottuna_> agreed.
|
||
20:41:41 <str4d> And if possible, the wiki should block edits from the inproxy.
|
||
20:41:56 <str4d> Anything else to add before we move on?
|
||
20:41:59 <dg> Is that all for the wiki then?
|
||
20:42:02 <dg> I don't think so
|
||
20:42:52 <str4d> dg: you want to do the honors? ^_^
|
||
20:43:11 <dg> Alright :3
|
||
20:43:15 <dg> thx
|
||
20:43:38 * str4d gets to talk lots in the next topic anyway =D
|
||
20:43:53 <dg> Okay, so the website revamp - I feel that the new design headed by str4d (he's doing the backend mostly but some CSS changes) brings a fresh look to i2p and can help refresh people's perspective and first impressions of it
|
||
20:44:00 <dg> The current one is rather stale, etc, etc..
|
||
20:44:11 <dg> I think that we should look into what needs completing in order to push it live
|
||
20:44:34 <str4d> What *must* be completed before pushing live:
|
||
20:44:37 <dg> Minor issues can be worked on when it's out there so the blockers we need to consider here?
|
||
20:44:48 <str4d> - translation tagging
|
||
20:45:01 <str4d> (well, not *must* but most at the very least)
|
||
20:45:17 <str4d> - checking that all site-internal links are updated and valid
|
||
20:45:36 <str4d> That's basically it.
|
||
20:45:56 <hottuna_> how is translation tagging done?
|
||
20:46:07 <str4d> I've already started on that, and have covered most of the site pages (if you leave out the docs, which are large on their own)
|
||
20:46:22 <dg> Latter isn't too hard. There's tools for it IIRC but I can go around clicking (take one for the team ;) if push comes to shove.
|
||
20:46:33 <dg> Explain translation tagging?
|
||
20:46:40 <str4d> hottuna_: Jinja2 template tags
|
||
20:46:40 <str4d> And gettext PO files
|
||
20:47:05 <str4d> <h2>{% trans %}A Gentle Introduction to How I2P Works{% endtrans %}</h2>
|
||
20:47:08 <str4d> <p>{% trans -%}
|
||
20:47:08 <str4d> I2P is a project to build, deploy, and maintain a network supporting secure and anonymous
|
||
20:47:08 <str4d> communication. People using I2P are in control of the tradeoffs between anonymity, reliability,
|
||
20:47:11 <str4d> bandwidth usage, and latency. There is no central point in the network on which pressure can be
|
||
20:47:11 <str4d> exerted to compromise the integrity, security, or anonymity of the system. The network supports
|
||
20:47:11 <str4d> dynamic reconfiguration in response to various attacks, and has been designed to make use of
|
||
20:47:11 <str4d> additional resources as they become available. Of course, all aspects of the network are open and
|
||
20:47:11 <str4d> freely available.
|
||
20:47:15 <str4d> {%- endtrans %}</p>
|
||
20:48:17 <str4d> The tagged blocks get extracted into a messages.pot which can then be translated like the routerconsole is.
|
||
20:48:36 <str4d> That's another task that I think *must* be done before launch:
|
||
20:48:57 <str4d> - Migrate old translated pages (e.g. /how_intro_fr) to PO files
|
||
20:49:53 <hottuna_> ok
|
||
20:49:56 <hottuna_> whats the mtn repo name?
|
||
20:50:04 <hottuna_> alright
|
||
20:50:08 <str4d> That one I can't do much about =P I've migrated one page as a test, but I can't verify the accuracy of the old translations (especially as there was nothing to keep things in sync between the static pages)
|
||
20:50:12 <str4d> i2p.www.revamp
|
||
20:51:02 * str4d starts up the test site again
|
||
20:52:33 <str4d> Okay, http://vekw35szhzysfq7cwsly37coegsnb4rrsggy5k4wtasa6c34gy5a.b32.i2p/en/ is back up.
|
||
20:52:44 <iRelay> Title: I2P Anonymous Network (at vekw35szhzysfq7cwsly37coegsnb4rrsggy5k4wtasa6c34gy5a.b32.i2p)
|
||
20:52:59 <str4d> Something else I've done is added mobile support to the website - you can see it by narrowing your browser window below 768px
|
||
20:53:34 <dg> What are we doing about blog/
|
||
20:53:34 <dg> ?
|
||
20:53:45 <str4d> dg: what do you mean?
|
||
20:53:52 <str4d> (In what regard?)
|
||
20:54:04 <dg> Who will be blogging and how will we set it up? When will we blog also? :)
|
||
20:54:43 <str4d> At present the blog just contains the (old) release posts and the (much older) status posts.
|
||
20:54:54 <str4d> At the very least there will be the release posts as normal.
|
||
20:55:50 <str4d> That's a later issue though - we need to actually get the site finished first!
|
||
20:56:09 <hottuna_> agreed
|
||
20:56:20 <str4d> Ticket #807 does have a few things in it which would be good to get done, but are not blockers
|
||
20:56:32 <iRelay> http://trac.i2p2.i2p/ticket/807 - (accepted enhancement) - Revamp of website
|
||
20:56:44 <str4d> They are somewhat spread out through the ticket, but some are:
|
||
20:57:02 <str4d> - fill out /about/glossary
|
||
20:57:21 <str4d> - improve blog/meetings layout and styling
|
||
20:58:17 <str4d> - fix or replace the theme
|
||
20:58:36 <hottuna_> re translation tagging: is """{{ _('Friends of I2P') }}""" tagable in a straight forward manner
|
||
20:59:03 <str4d> hottuna_: That already is tagged.
|
||
20:59:26 <hottuna_> just curious about syntax
|
||
20:59:29 <str4d> (That's the more compact notation)
|
||
20:59:39 <hottuna_> aah
|
||
20:59:42 <str4d> {{ }} inserts the result of the contained Python method
|
||
20:59:53 <str4d> _() is the gettext call in Python
|
||
21:00:00 <str4d> (well, the one that is imported into Jinja2
|
||
21:00:03 <str4d> )
|
||
21:00:19 <hottuna_> thanks
|
||
21:00:34 <str4d> {% trans %}{% endtrans %} is a more verbose tag, but it's the Jinja2 tag and supports any content between the tags.
|
||
21:00:49 <str4d> (whereas the _() one can't contain e.g. '
|
||
21:00:52 <hottuna_> what is left to tag?
|
||
21:01:13 <str4d> hottuna_: check the mtn log for details of what has been tagged, but IIRC:
|
||
21:01:44 <str4d> - get-involved/guides (I've tagged ides and dev-guidelines there)
|
||
21:01:55 <str4d> - misc/*
|
||
21:01:58 <str4d> - docs/*
|
||
21:02:09 <str4d> And then any blog posts that we want translated.
|
||
21:03:06 <str4d> (I've already migrated and tagged the 0.9.4 and 0.9.3 posts, and future posts can be tagged as well; earlier ones can be tagged as/when people can be bothered)
|
||
21:04:17 <str4d> Okay, we do need to get a move on in the meeting.
|
||
21:05:18 <str4d> Summary: site revamp is almost ready, help is appreciated getting the rest of the site tagged for translation and url-checked (can be done simultaneously) (thanks hottuna_ for offering to help (I assume that's what you are doing?))
|
||
21:05:45 <str4d> And other text/layout changes are appreciated but not blocking.
|
||
21:06:31 <str4d> Oh: and if anyone wants to get started on translating the pages (using the old translated pages as reference or for copy-paste), *please do so*.
|
||
21:06:34 <str4d> Anything else?
|
||
21:06:49 <hottuna_> ill have a look at tagging
|
||
21:07:48 <str4d> hottuna_: thanks. Leave get-involved/guides to me, as I've already started in there.
|
||
21:08:43 <str4d> dg: are you keeping an eye on the meeting (timeliness)?
|
||
21:09:02 <dg> oh, sorry
|
||
21:09:14 <dg> So we're done with website/
|
||
21:09:41 <dg> Crypto time :-D
|
||
21:10:16 <dg> Let me dig up the relevant topics
|
||
21:10:16 <dg> One moment
|
||
21:11:28 <dg> http://zzz.i2p/topics/1328 + http://zzz.i2p/topics/715
|
||
21:11:38 <iRelay> Title: zzz.i2p: Meeting [22nd January] (at zzz.i2p)
|
||
21:12:10 <dg> TL;DR: We need to be discussing which components of the i2p router need to be changed in order of priority (or as zzz put it, "to talk generally about which uses are more vulnerable than others"
|
||
21:12:10 <dg> )
|
||
21:12:17 <dg> (for the DSA change)
|
||
21:12:45 <dg> It's an apt time to discuss any other crypto changes that could be thrown in but right now, we should stick to what zzz suggested as it's a masssive rabbithole
|
||
21:12:52 <hottuna_> like noted in the tor cipher migration document we should strive to do changes where they are the most important and not necessarily the easiest
|
||
21:13:26 <dg> (https://gitweb.torproject.org/torspec.git/blob_plain/34ecac0fbac7f476bfcbf813767721fada62c17e:/proposals/ideas/xxx-crypto-migration.txt)
|
||
21:15:55 <hottuna_> in my mind the most important areas are those using potentially weak ciphers for longterm keys
|
||
21:16:39 <dg> hottuna_: I'm no crypto expert (and as such I'll stay out unless I know something) but aren't the longterm keys also the keys which could cause a flag day?
|
||
21:17:12 <hottuna_> changing most ciphers would cause a flag day
|
||
21:17:31 <dg> I was thinking all destinations being fucked
|
||
21:17:38 <dg> so yeah
|
||
21:17:41 <hottuna_> well basically
|
||
21:18:03 <hottuna_> i dont see a way around destinations being wrecked
|
||
21:19:03 <hottuna_> Im don't have a list of places where long-term keys are used
|
||
21:19:22 <hottuna_> but such a list and the corresponding cipher used should be created
|
||
21:21:04 <str4d> Agreed. We should also rank their perceived vulnerability.
|
||
21:21:11 <str4d> (This would make a good wiki page on Trac)
|
||
21:21:19 <hottuna_> yes.
|
||
21:22:02 <hottuna_> we should also create a list of ciphers that have been proven as safe (by the test of time) and are otherwise viable for us
|
||
21:22:17 <str4d> Section 2 of the Tor page basically applies to us as well.
|
||
21:22:20 <hottuna_> that list should include asymetric
|
||
21:22:55 <zzz> sounds good
|
||
21:23:11 <hottuna_> asymmetric* encryption, symmetric encryption, signatures and hmac ciphers that we trust
|
||
21:23:49 <zzz> how_cryptography page is a good reference
|
||
21:24:32 <hottuna_> str4d, did you start a wiki page or should I?
|
||
21:24:40 * str4d is doing so now
|
||
21:25:00 <str4d> /Crypto/CurrentSpecs sound alright?
|
||
21:25:09 <str4d> (For the summary table)
|
||
21:25:09 <hottuna_> sure
|
||
21:25:16 <zzz> DSA is a nice place to start analysis because it's easy to understand, and it's on the surface the weakest
|
||
21:26:15 <hottuna_> yes
|
||
21:27:01 <hottuna_> as for what is used where and what time periods which keys are used for I dont know much
|
||
21:28:56 <zzz> the OP on http://zzz.i2p/topics/715 has a list
|
||
21:29:03 <zzz> ~8 places we use DSA
|
||
21:29:05 <iRelay> Title: zzz.i2p: DSA 1024/160 Replacement (at zzz.i2p)
|
||
21:29:40 <hottuna_> the one with the longest validity is routerinfo?
|
||
21:30:23 <str4d> || '''Aspect/Location''' || '''Cipher used''' || '''Cipher details''' || ''' Perceived vulnerability''' || '''Comments'''
|
||
21:30:30 <str4d> Anything else that needs to go into the table?
|
||
21:30:30 <zzz> maybe dest. which isn't listed.
|
||
21:31:12 <zzz> theres both a dest key and a leaseset key I think the dest signs the leaseset and the leaseset key is unused
|
||
21:31:38 <hottuna_> str4d, validity period
|
||
21:32:24 <zzz> wouldnt be the end of the world to have a RI flag day but throwing out all 2500 in hosts.txt is another story
|
||
21:32:38 <str4d> Hmm... maybe the Perceived vulnerability / validity should be in a separate table then.
|
||
21:33:07 <zzz> datagrams is a problem, dests is a problem
|
||
21:33:22 <hottuna_> throwing out hosts is a huge issue. but it is also the most vulnerable key in my mind
|
||
21:34:37 <zzz> for each case we have to go farther though. not just how easy to break but what's the threat model / consequence.
|
||
21:35:08 <hottuna_> yes. maybe link to a separate page for each case?
|
||
21:35:26 <str4d> http://trac.i2p2.i2p/wiki/Crypto/CurrentSpecs now exists and has some basic content
|
||
21:35:33 <iRelay> Title: Crypto/CurrentSpecs – I2P (at trac.i2p2.i2p)
|
||
21:36:09 <zzz> and put that in perspective gven the size of the net, etc. e.g., we currently have a guy that claims he can shutdown an eepsite for 23 1/2 hours a day.
|
||
21:37:13 <hottuna_> christoph1, ?
|
||
21:37:25 <dg> Yikes.
|
||
21:37:28 <str4d> Mmm.
|
||
21:37:35 <dg> How does that work?
|
||
21:37:58 <hottuna_> eclipse attack on our floodfills
|
||
21:38:01 <christoph1> use enough precomputed routerinfos, put 10 bad nodes near the target hash block lookup
|
||
21:38:20 <lillith> why is it not 24 hours?
|
||
21:38:35 <christoph1> because midnight is a bit tricky
|
||
21:38:46 <christoph1> you can use another 10 to put in place for tomorrow
|
||
21:39:05 <christoph1> but there's still a period around the keyspace rotation where things are unstable
|
||
21:39:22 <lillith> so the router gets half an hour where the floodfills are uncertain?
|
||
21:39:33 <christoph1> (client can hit one of the good nodes by chance because it doesn't know all attackers jet
|
||
21:39:52 <str4d> The keys for the next day can be known in advance, so positioning malicious nodes could be planned in advance, no?
|
||
21:39:59 <christoph1> jep
|
||
21:40:22 <christoph1> still it seems around rotation it is somewhat unstable
|
||
21:40:49 <str4d> Anyway, this is somewhat off-track for this topic (sorry christoph1)
|
||
21:41:05 <christoph1> ack
|
||
21:43:08 <str4d> Okay, does anyone want to work on getting http://trac.i2p2.i2p/wiki/Crypto/CurrentSpecs filled out?
|
||
21:43:14 <iRelay> Title: Crypto/CurrentSpecs – I2P (at trac.i2p2.i2p)
|
||
21:43:26 <zzz> dg, please keep us on track, not drag us off it :)
|
||
21:43:42 <hottuna_> str4d, yeah. I just managed to log in :P
|
||
21:44:01 <str4d> Maybe we should quickly clarify what exactly we want on that page (my column headings are rather generic)
|
||
21:44:36 <dg> zzz: sory ;)
|
||
21:44:59 <str4d> First table: a summary of the crypto used in the router. Name, validity period, vulnerability... key length? Prime strength?
|
||
21:44:59 <zzz> m yfault too
|
||
21:45:48 <str4d> Second table: a list of every point in the router where crypto is used. Location and cipher name (of course). Usage details? What is important to know here?
|
||
21:46:27 <str4d> We can probably elaborate on separate pages for the second table if necessary (link the location name to a subpage)
|
||
21:47:41 <hottuna_> str4d, added subpage
|
||
21:48:06 <str4d> IMHO this should be a page that someone can glance at and understand the current state-of-play (whereas the site docs are the full specs)
|
||
21:48:32 <str4d> hottuna_: ah, I get what you mean by validity period now.
|
||
21:48:39 <hottuna_> :)
|
||
21:50:20 <str4d> hottuna_: there's already an entry for destinations - LeaseSet signing
|
||
21:50:29 <hottuna_> oh
|
||
21:50:29 <hottuna_> sorry
|
||
21:50:36 <str4d> (For the DSA part at least - I think you're thinking there of the encryption)
|
||
21:51:56 <str4d> Also, I'd call it "Security timescale" rather than "Validity period"
|
||
21:52:38 <hottuna_> yep
|
||
21:52:38 <zzz> FYI for everybody else - every RI and Dest has two keys, one for encryption and one for signing
|
||
21:53:11 <hottuna_> ok
|
||
21:53:11 <hottuna_> why?
|
||
21:53:32 <zzz> ElG was deemed far too slow for signing
|
||
21:54:44 <str4d> This might be a silly question, but how are the two keys "linked" verifiably?
|
||
21:55:23 <zzz> for both RI and Dest, the Hash covers both keys + the (usually null) Certificate
|
||
21:55:23 <hottuna_> a public key is derived from the private key
|
||
21:55:51 <zzz> change any of the 3 and you change the hash.
|
||
21:56:13 <str4d> Ah, k (you mean the Destination hash?)
|
||
21:56:23 <str4d> (i.e. the B64)
|
||
21:56:26 <zzz> yes
|
||
21:56:53 <str4d> Okay... the problem with upgrading the Destination crypto makes much more sense now...
|
||
21:56:59 <zzz> and for Dests, change any of the 3 and you need a new hosts.txt entry
|
||
21:58:34 <zzz> and (hint) non-null certs may be the path to upgrades w/ (partial) compatibility, i.e. not breaking gravity. That's what's covered further down in topic 715
|
||
21:59:39 <str4d> Yeah - that enables both to work alongside each other.
|
||
22:00:09 <str4d> But it still means that the end-to-end crypto for the old Destinations is untouched.
|
||
22:00:52 <str4d> The point where the Dest crypto key is most important is the leg between the OPEP and IBGW, right?
|
||
22:01:26 <zzz> not sure
|
||
22:01:53 <zzz> other complication is there used to be two layers of end-to-end crypto, one in the router and one in the client, and some keys are now unused
|
||
22:02:32 <zzz> ditto w/ signing keys... one was for LS revocation and is unused
|
||
22:02:46 <zzz> so that's another opportunity, maybe
|
||
22:03:29 <str4d> http://www.i2p2.i2p/how_intro seems to indicate that the ElGamal/AES+SessionTags is used for end-to-end router encryption.
|
||
22:04:37 <zzz> crypto is much harder to discuss than signing. theres the ElG wrapping the AES and the Tags, together with the DH exchange.
|
||
22:05:35 <str4d> Yes. But as far as e.g. LeaseSets go, we probably need to discuss both in tandem, no?
|
||
22:05:46 <zzz> I'd suggest not even trying to get into the crypto side today.
|
||
22:05:53 <str4d> Not today, no.
|
||
22:06:00 <zzz> maybe, maybe not
|
||
22:06:03 <str4d> So, back on topic *derp*
|
||
22:06:30 <zzz> you change one key, you change the hash. But as the Tor doc says, don't try to change everything just because you're changing one thing
|
||
22:06:33 <str4d> What is the issue with Datagram signing?
|
||
22:07:12 <zzz> it's using our signing algorithm, i.e. DSA. Which we use to sign everything. (including suds)
|
||
22:07:54 <zzz> which also isn't on the list on topic 715, and might be the longest-lived key of all
|
||
22:09:04 <str4d> Right, but the specific problem I'm guessing with Datagrams is ensuring that routers can still talk to each other
|
||
22:09:04 <str4d> ?
|
||
22:10:00 <zzz> right. change signing and you break all RI and LS lookup, and all signed end-to-end communication
|
||
22:10:51 <zzz> because almost everything is signed
|
||
22:11:41 <str4d> So really the only way to move forward with upgrading the signing algorithm is to ensure that every place it is used can handle multiple signing algorithms?
|
||
22:12:27 <str4d> The problem then becomes knowing what versions are supported by a router (and the partitioning problems from the Tor doc are relevant here).
|
||
22:12:30 <zzz> but then every dest would need two sets of tunnels, one for old and one for new, afaik
|
||
22:12:49 <zzz> there's two kinds of compatibility to consider.
|
||
22:13:19 <str4d> That's a good point >_<
|
||
22:13:42 <zzz> 1) "network" compatibility, i.e. can the RIs and LSs be stored and retrieved, can msgs get thru tunnels, even if the ffs or participants are down-rev;
|
||
22:14:21 <zzz> 2) end-to-end compatibility, can A talk to B. For that, seems like both A and B need to support the same things
|
||
22:15:43 <str4d> 2) is "easy" to handle for direct router-to-router communication, as the router versions are public knowledge. What about end-to-end communication?
|
||
22:17:24 <zzz> the other thing is an RI has a whole Properties in it, we can put whatever flags we want in there
|
||
22:17:27 <str4d> Where would a router need to look to determine if another router (such as an eepsite server) supports the new signatures?
|
||
22:17:30 <zzz> nothing like that for LS
|
||
22:18:01 <zzz> certs is the magic
|
||
22:18:48 <zzz> in a cert we can spec both crypto and signing algo, and store the extra bytes if it doesnt fit in the first 384
|
||
22:18:59 <zzz> again, that's the topic 715 stuff
|
||
22:19:53 <zzz> the cert has to start at byte 385 to not break 1)
|
||
22:20:54 <zzz> is that about enough for today? got out of this what you wanted?
|
||
22:21:09 <hottuna_> i think this is a beginning
|
||
22:21:34 <hottuna_> more specific issues and solutions cna be discussed and the wiki page used as an aid
|
||
22:23:50 <str4d> zzz: it's a good start - thank you =)
|
||
22:24:24 <zzz> lots of work ahead...
|
||
22:24:39 <str4d> Yes, but we have to start somewhere ^_^
|
||
22:24:54 <hottuna_> str4d, pushed tags for monotone.html
|
||
22:25:05 <zzz> I had one more topic for the mtg but only if welt welterde weltende is around
|
||
22:25:26 <str4d> hottuna_: the one under get-involved/guides? I'll drop the ones I'd started putting in then ^_^
|
||
22:25:37 <hottuna_> yes
|
||
22:26:00 <hottuna_> alright, are we done then?
|
||
22:26:11 <dg> I'd say so?
|
||
22:26:15 <str4d> I'd like to add a random point:
|
||
22:26:18 * dg had nothing to chime in with
|
||
22:26:21 <dg> not a crypto god
|
||
22:27:08 <str4d> I'd like to congratulate sponge on his efforts with Android - stock I2P now successfully runs on Android devices.
|
||
22:27:46 <str4d> And initial reports seem to indicate better performance and lower battery usage than I2P-Android
|
||
22:27:53 <hottuna_> that's quite the feat
|
||
22:28:04 <hottuna_> well done sponge
|
||
22:28:16 <hottuna_> i've gotta go now
|
||
22:28:23 <hottuna_> dg, will you strat the thread for next week?
|
||
22:28:27 <dg> spogne has done extremely well
|
||
22:28:56 <dg> Will do. Topics? Seems crypto needs to be a recurring topic for the next few weeks. :)
|
||
22:29:03 <dg> I should be here on time next week also
|
||
22:29:47 <str4d> If we can get the revamp tagged by then, we could potentially go live with the new site (though I would prefer to get actual translations in first)
|
||
22:30:18 <str4d> (Also depends on welterde being around)
|
||
22:30:25 <hottuna_> str4d, i think actual translations will take a very long time
|
||
22:30:52 <hottuna_> alright, nn ppl
|
||
22:30:59 <str4d> hottuna_: complete translations, yes. But there are already-translated pages (see www.i2p2/pages/translations) which would be quick to migrate.
|
||
22:31:07 <str4d> (For people who understand the language)
|
||
22:31:14 <str4d> o/ hottuna_
|
||
22:31:45 * str4d *baf*s the meeting closed.
|