Ver código fonte

Reduce lifetime of DH public key replay-detection cache elements

Robert Ransom 14 anos atrás
pai
commit
60ed98e184
2 arquivos alterados com 10 adições e 1 exclusões
  1. 9 0
      changes/reduce-hs-intro-dh-key-replay-cache-lifetime
  2. 1 1
      src/or/or.h

+ 9 - 0
changes/reduce-hs-intro-dh-key-replay-cache-lifetime

@@ -0,0 +1,9 @@
+  o Minor features:
+
+    - Reduce the lifetime of elements of hidden services'
+      Diffie-Hellman public key replay-detection cache from 60 minutes
+      to 5 minutes.  This replay-detection cache is now used only to
+      detect multiple INTRODUCE2 cells specifying the same rendezvous
+      point, so we don't launch multiple simultaneous attempts to
+      connect to it.
+

+ 1 - 1
src/or/or.h

@@ -759,7 +759,7 @@ typedef struct rend_data_t {
 /** Time interval for tracking replays of DH public keys received in
  * INTRODUCE2 cells.  Used only to avoid launching multiple
  * simultaneous attempts to connect to the same rendezvous point. */
-#define REND_REPLAY_TIME_INTERVAL (60 * 60)
+#define REND_REPLAY_TIME_INTERVAL (5 * 60)
 
 /** Used to indicate which way a cell is going on a circuit. */
 typedef enum {