From 9bfdd77f722807a611d6910bbef45084360064a1 Mon Sep 17 00:00:00 2001 From: Yawning Angel Date: Tue, 13 May 2014 02:31:37 +0000 Subject: Add preliminary support for packet length obfuscation. The same algorithm as ScrambleSuit is used, except: * SipHash-2-4 in OFB mode is used to create the distribution. * The system CSPRNG is used when sampling the distribution. This fixes most of #3, all that remains is generating and sending a persistent distribution on the server side to the client. --- README.md | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) (limited to 'README.md') diff --git a/README.md b/README.md index ef38532..549e27c 100644 --- a/README.md +++ b/README.md @@ -17,7 +17,7 @@ is much closer to ScrambleSuit than obfs2/obfs3. The notable differences between ScrambleSuit and obfs4: * The handshake always does a full key exchange (no such thing as a Session - Ticket Handshake). (TODO: Reconsider this.) + Ticket Handshake). * The handshake uses the Tor Project's ntor handshake with public keys obfuscated via the Elligator mapping. * The link layer encryption uses NaCl secret boxes (Poly1305/XSalsa20). @@ -32,7 +32,6 @@ handshake variants without being obscenely slow is non-trivial. ### TODO - * Packet length obfuscation. * (Maybe) Make it resilient to transient connection loss. * (Maybe) Use IP_MTU/TCP_MAXSEG to tweak frame size. * Write a detailed protocol spec. -- cgit v1.2.3