Struct tor_hsservice::replay::ReplayLog

pub(crate) struct ReplayLog {
    seen: Filter,
    file: Option<PersistFile>,
}

A probabilistic data structure to record fingerprints of observed Introduce2 messages.

We need to record these fingerprints to prevent replay attacks; see the module documentation for an explanation of why that would be bad.

A ReplayLog should correspond to a KP_hss_ntor key, and should have the same lifespan: dropping it sooner will enable replays, but dropping it later will waste disk and memory.

False positives are allowed, to conserve on space.

Fields

seen: Filter

The inner probabilistic data structure.

file: Option<PersistFile>

Persistent state file etc., if we’re persistent

If is is None, this RelayLog is ephemeral.

Implementations

impl ReplayLog

pub(crate) fn new_ephemeral() -> Self

Create a new ReplayLog not backed by any data storage.

pub(crate) fn new_logged( dir: &InstanceRawSubdir, lid: &IptLocalId ) -> Result<Self, CreateIptError>

Create a ReplayLog backed by the file at a given path.

If the file already exists, load its contents and append any new contents to it; otherwise, create the file.

lock must already have been locked and this cannot be assured by the type system.

Limitations

It is the caller’s responsibility to make sure that there are never two ReplayLogs open at once for the same path, or for two paths that resolve to the same file.

fn new_logged_inner( path: impl AsRef<Path>, lock: Arc<LockFileGuard> ) -> Result<Self>

Inner function for new_logged, with reified arguments and raw error type

fn truncate_to_multiple(file: &mut File, current_len: u64) -> Result<()>

Truncate file to contain a whole number of records

current_len should have come from file.metadata().

pub(crate) fn check_for_replay( &mut self, introduce: &Introduce2 ) -> Result<(), ReplayError>

Test whether we have already seen introduce.

If we have seen it, return Err(ReplayError::AlreadySeen). (Since this is a probabilistic data structure, there is a chance of returning this error even if we have we have not seen this particular message)

Otherwise, return Ok(()).

fn check_inner(&mut self, h: &H) -> Result<(), ReplayError>

Implementation helper: test whether we have already seen h.

Return values are as for check_for_replay

pub(crate) fn flush(&mut self) -> Result<(), Error>

Flush any buffered data to disk.

pub(crate) fn parse_log_leafname( leaf: &OsStr ) -> Result<(IptLocalId, &str), Cow<'static, str>>

Tries to parse a filename in the replay logs directory

If the leafname refers to a file that would be created by ReplayLog::new_logged, returns the IptLocalId.

Otherwise returns an error explaining why it isn’t, as a plain string (for logging).