relay clocks and a second suite
relays can now send on their own clocks, and the gost suite runs behind the same interface as the default one.
relays on their own clocks
a relay can now forward cells on a fixed period of its own instead of at once. in the preliminary series this brings the correlation attack down to chance, at the price of a constant stream on every link and a longer round trip. the numbers are on the research page.
the measurement harness was corrected in the same change, and cover cells are now hidden from every hop, not only from the wire.
a second cryptographic suite
the russian standards suite (vko gost r 34.10-2012, kuznyechik-mgm, streebog) now sits behind the
same CryptoProvider contract as the default x25519, xchacha20-poly1305 and ed25519 suite, and is
switched on with -suite gost. both pass the same conformance tests. the default stays x25519, so
results remain comparable with international work.
key memory measures
memory locking, zeroing and dump prevention can now be switched off one by one through configuration, so each measure’s contribution can be measured on its own.