Bug 25870: Allow 4th hop of vanguard circuits to be the guard.
commit289c04b065b7b36734d73fc11a516b3cdc9dd702
authorMike Perry <mikeperry-git@torproject.org>
Tue, 1 May 2018 00:59:21 +0000 (1 00:59 +0000)
committerMike Perry <mikeperry-git@torproject.org>
Tue, 1 May 2018 00:59:21 +0000 (1 00:59 +0000)
tree88a8fae4702b89e45566fe7efe0ee0869bc9d3c6
parente34bf50604903fa54458a2e57271604440c5ad3e
Bug 25870: Allow 4th hop of vanguard circuits to be the guard.

This prevents a malicious RP/IP from learning the guard node in the case that
we are using only one (because we aren't using two guards, or because one of
those two guards is temporarily down).

This ensures the "strong" version of Property #6 from
https://lists.torproject.org/pipermail/tor-dev/2018-April/013098.html
(Information about the guard(s) does not leak to the website/RP at all).
src/or/circuitbuild.c