[Bug 1497356] New: Review Request: obfs4 - The obfourscator,
a pluggable transport for Tor
by bugzilla@redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=1497356
Bug ID: 1497356
Summary: Review Request: obfs4 - The obfourscator, a pluggable
transport for Tor
Product: Fedora
Version: rawhide
Component: Package Review
Severity: medium
Priority: medium
Assignee: nobody(a)fedoraproject.org
Reporter: hedayatv(a)gmail.com
QA Contact: extras-qa(a)fedoraproject.org
CC: package-review(a)lists.fedoraproject.org
Spec URL: https://hedayat.fedorapeople.org/reviews/obfs4/obfs4.spec
SRPM URL:
https://hedayat.fedorapeople.org/reviews/obfs4/obfs4-0.0.7-1.fc26.src.rpm
Description: This is a look-like nothing obfuscation protocol that incorporates
ideas and
concepts from Philipp Winter's ScrambleSuit protocol. The obfs naming was
chosen primarily because it was shorter, in terms of protocol ancestry obfs4
is much closer to ScrambleSuit than obfs2/obfs3.
The notable differences between ScrambleSuit and obfs4:
* The handshake always does a full key exchange (no such thing as a Session
Ticket Handshake).
* The handshake uses the Tor Project's ntor handshake with public keys
obfuscated via the Elligator 2 mapping.
* The link layer encryption uses NaCl secret boxes (Poly1305/XSalsa20).
As an added bonus, obfs4proxy also supports acting as an obfs2/3 client and
bridge to ease the transition to the new protocol.
Fedora Account System Username: hedayat
Koji scratch build:
https://koji.fedoraproject.org/koji/taskinfo?taskID=22150998
% rpmlint obfs4.spec ~/rpmbuild/SRPMS/obfs4-0.0.7-1.fc26.src.rpm
~/rpmbuild/RPMS/x86_64/obfs4-0.0.7-1.fc26.x86_64.rpm
~/rpmbuild/RPMS/x86_64/obfs4-debuginfo-0.0.7-1.fc26.x86_64.rpm
obfs4.spec: W: invalid-url Source0: obfs4-0.0.7.tar.xz
obfs4.src: W: spelling-error Summary(en_US) obfourscator -> obfuscation
obfs4.src: W: spelling-error Summary(en_US) pluggable -> plug gable,
plug-gable, plugged
obfs4.src: W: spelling-error %description -l en_US obfs -> obs, fobs, obis
obfs4.src: W: spelling-error %description -l en_US ntor -> nor, tor, torn
obfs4.src: W: invalid-url Source0: obfs4-0.0.7.tar.xz
obfs4.x86_64: W: spelling-error Summary(en_US) obfourscator -> obfuscation
obfs4.x86_64: W: spelling-error Summary(en_US) pluggable -> plug gable,
plug-gable, plugged
obfs4.x86_64: W: spelling-error %description -l en_US obfs -> obs, fobs, obis
obfs4.x86_64: W: spelling-error %description -l en_US ntor -> nor, tor, torn
3 packages and 1 specfiles checked; 0 errors, 10 warnings.
Note: 'obfourscator' is how the developer have named it.
Tor calls these 'pluggable' transports.
"ntor handshake": type of handshake!
(The description is actually copied from the README file)
To properly work with SELinux enabled, bug #1496274 should be also fixed.
--
You are receiving this mail because:
You are on the CC list for the bug.
You are always notified about changes to this product and component
6 years, 4 months