|
@@ -3696,7 +3696,7 @@ Changes in version 0.2.3.4-alpha - 2011-09-13
|
|
|
by an attacker who controls both an introduction point and a
|
|
by an attacker who controls both an introduction point and a
|
|
|
rendezvous point, and who uses the malleability of AES-CTR to
|
|
rendezvous point, and who uses the malleability of AES-CTR to
|
|
|
alter the encrypted g^x portion of the INTRODUCE1 cell. We think
|
|
alter the encrypted g^x portion of the INTRODUCE1 cell. We think
|
|
|
- that these attacks is infeasible (requiring the attacker to send
|
|
|
|
|
|
|
+ that these attacks are infeasible (requiring the attacker to send
|
|
|
on the order of zettabytes of altered cells in a short interval),
|
|
on the order of zettabytes of altered cells in a short interval),
|
|
|
but we'd rather block them off in case there are any classes of
|
|
but we'd rather block them off in case there are any classes of
|
|
|
this attack that we missed. Reported by Willem Pinckaers.
|
|
this attack that we missed. Reported by Willem Pinckaers.
|
Roger Dingledine