https://bugzilla.redhat.com/show_bug.cgi?id=1497356
Bug ID: 1497356 Summary: Review Request: obfs4 - The obfourscator, a pluggable transport for Tor Product: Fedora Version: rawhide Component: Package Review Severity: medium Priority: medium Assignee: nobody@fedoraproject.org Reporter: hedayatv@gmail.com QA Contact: extras-qa@fedoraproject.org CC: package-review@lists.fedoraproject.org
Spec URL: https://hedayat.fedorapeople.org/reviews/obfs4/obfs4.spec SRPM URL: https://hedayat.fedorapeople.org/reviews/obfs4/obfs4-0.0.7-1.fc26.src.rpm Description: This is a look-like nothing obfuscation protocol that incorporates ideas and concepts from Philipp Winter's ScrambleSuit protocol. The obfs naming was chosen primarily because it was shorter, in terms of protocol ancestry obfs4 is much closer to ScrambleSuit than obfs2/obfs3.
The notable differences between ScrambleSuit and obfs4:
* The handshake always does a full key exchange (no such thing as a Session Ticket Handshake). * The handshake uses the Tor Project's ntor handshake with public keys obfuscated via the Elligator 2 mapping. * The link layer encryption uses NaCl secret boxes (Poly1305/XSalsa20).
As an added bonus, obfs4proxy also supports acting as an obfs2/3 client and bridge to ease the transition to the new protocol.
Fedora Account System Username: hedayat
Koji scratch build: https://koji.fedoraproject.org/koji/taskinfo?taskID=22150998
% rpmlint obfs4.spec ~/rpmbuild/SRPMS/obfs4-0.0.7-1.fc26.src.rpm ~/rpmbuild/RPMS/x86_64/obfs4-0.0.7-1.fc26.x86_64.rpm ~/rpmbuild/RPMS/x86_64/obfs4-debuginfo-0.0.7-1.fc26.x86_64.rpm obfs4.spec: W: invalid-url Source0: obfs4-0.0.7.tar.xz obfs4.src: W: spelling-error Summary(en_US) obfourscator -> obfuscation obfs4.src: W: spelling-error Summary(en_US) pluggable -> plug gable, plug-gable, plugged obfs4.src: W: spelling-error %description -l en_US obfs -> obs, fobs, obis obfs4.src: W: spelling-error %description -l en_US ntor -> nor, tor, torn obfs4.src: W: invalid-url Source0: obfs4-0.0.7.tar.xz obfs4.x86_64: W: spelling-error Summary(en_US) obfourscator -> obfuscation obfs4.x86_64: W: spelling-error Summary(en_US) pluggable -> plug gable, plug-gable, plugged obfs4.x86_64: W: spelling-error %description -l en_US obfs -> obs, fobs, obis obfs4.x86_64: W: spelling-error %description -l en_US ntor -> nor, tor, torn 3 packages and 1 specfiles checked; 0 errors, 10 warnings.
Note: 'obfourscator' is how the developer have named it. Tor calls these 'pluggable' transports. "ntor handshake": type of handshake!
(The description is actually copied from the README file)
To properly work with SELinux enabled, bug #1496274 should be also fixed.