jrandom authored 19 years ago and zzz committed 19 years ago

    * Added new user-editable eepproxy error page templates.
2005-04-17  jrandom
    * Revamp the tunnel building throttles, fixing a situation where the
      rebuild may not recover, and defaulting it to unthrottled (users with
      slow CPUs may want to set "router.tunnel.shouldThrottle=true" in their
      advanced router config)

jrandom authored 19 years ago and zzz committed 19 years ago

    * Migrated to Bouncycastle's SHA256 and HMAC implementations for efficiency

jrandom authored 19 years ago and zzz committed 19 years ago

    * Migrated to Bouncycastle's SHA256 and HMAC implementations for efficiency
(also lots of udp fixes)

jrandom authored 19 years ago and zzz committed 19 years ago

* use the new raw i2np message format (the previous corruptions were due to above)
* add a new test component (UDPFlooder) which floods all peers at the rate desired
* packet munging fix for highly fragmented messages
* include basic slow start code
* fixed the UDP peer rate refilling
* cleaned up some nextSend scheduling

jrandom authored 19 years ago and zzz committed 19 years ago

the basics (negotiate a session and send I2NP messages back and forth).  Lots,
lots more left.

jrandom authored 19 years ago and zzz committed 19 years ago

    * Make sure we don't get cached updates (thanks smeghead!)
    * Clear out the callback for the TestJob after it passes (only affects the
      job timing accounting)

smeghead authored 19 years ago and zzz committed 19 years ago

    * Added NativeBigInteger benchmark to scripts/i2pbench.sh.

jrandom authored 19 years ago and zzz committed 19 years ago

* include a new signedOnTime so that we can prepare the packet at a different moment from
  when we encrypt & send it (also allowing us to reuse that signature on resends for the same
  establishment)

smeghead authored 19 years ago and zzz committed 19 years ago

    * Security improvements to TrustedUpdate: signing and verification of the
      version string along with the data payload for signed update files
      (consequently the positions of the DSA signature and version string fields
      have been swapped in the spec for the update file's header); router will
      no longer perform a trusted update if the signed update's version is lower
      than or equal to the currently running router's version.
    * Added two new CLI commands to TrustedUpdate: showversion, verifyupdate.
    * Extended TrustedUpdate public API for use by third party applications.

jrandom authored 19 years ago and zzz committed 19 years ago

    * Retry I2PTunnel startup if we are unable to build a socketManager for a
      client or httpclient tunnel.
    * Add some basic sanity checking on the I2CP settings (thanks duck!)

jrandom authored 19 years ago and zzz committed 19 years ago

    * After a successfull netDb search for a leaseSet, republish it to all of
      the peers we have tried so far who did not give us the key (up to 10),
      rather than the old K closest (which may include peers who had given us
      the key)
    * Don't wait 5 minutes to publish a leaseSet (duh!), and rather than
      republish it every 5 minutes, republish it every 3.  In addition, always
      republish as soon as the leaseSet changes (duh^2).
    * Minor fix for oddball startup race (thanks travis_bickle!)
    * Minor AES update to allow in-place decryption.

jrandom authored 19 years ago and zzz committed 19 years ago

/actually/ gets implemented will be documented further once its, er, implemented

aum authored 19 years ago and zzz committed 19 years ago

SigningPublicKey, which take a single String argument and construct
the object from the Base64 data in that string (where this data is
the product of a .toBase64() call on a prior instance).

aum authored 19 years ago and zzz committed 19 years ago

that these return PublicKey and SigningPublicKey objects, respectively.

jrandom authored 19 years ago and zzz committed 19 years ago

    * EepGet fix for open-ended HTTP fetches (such as the news.xml
      feeding the NewsFetcher)

jrandom authored 19 years ago and zzz committed 19 years ago

    * Allow editing I2PTunnel server instances with five digit ports
      (thanks nickless_head!)
    * More NewsFetcher debugging for reported weirdness

jrandom authored 19 years ago and zzz committed 19 years ago

    * Fix to check for missing news file (thanks smeghead!)
    * Added destination display CLI:
      java -cp lib/i2p.jar net.i2p.data.Destination privKeyFilename
    * Added destination display to the web interface (thanks pnspns)
    * Installed CIA backdoor

jrandom authored 19 years ago and zzz committed 19 years ago

2005-03-29  jrandom
    * Decreased the initial RTT estimate to 10s to allow more retries.
    * Increased the default netDb store replication factor from 2 to 6 to take
      into consideration tunnel failures.
    * Address some statistical anonymity attacks against the netDb that could
      be mounted by an active internal adversary by only answering lookups for
      leaseSets we received through an unsolicited store.
    * Don't throttle lookup responses (we throttle enough elsewhere)
    * Fix the NewsFetcher so that it doesn't incorrectly resume midway through
      the file (thanks nickster!)
    * Updated the I2PTunnel HTML (thanks postman!)
    * Added support to the I2PTunnel pages for the URL parameter "passphrase",
      which, if matched against the router.config "i2ptunnel.passphrase" value,
      skips the nonce check.  If the config prop doesn't exist or is blank, no
      passphrase is accepted.
    * Implemented HMAC-SHA256.
    * Enable the tunnel batching with a 500ms delay by default
    * Dropped compatability with 0.5.0.3 and earlier releases

jrandom authored 19 years ago and zzz committed 19 years ago

* split out the encryption and MAC keys