Partial implementation of prop 237, ticket 12538.

See also 1ceb714 in tor.git.

The certificate already denotes the type of key.

Conflicts:
	proposals/224-rend-spec-ng.txt

Conflicts:
	proposals/224-rend-spec-ng.txt

Ivan Markin authored 8 years ago and David Goulet committed 8 years ago

Fixes #19469

Signed-off-by: David Goulet <dgoulet@torproject.org>

see ticket 19035 for when we removed this feature.

Signed-off-by: David Goulet <dgoulet@ev0ke.net>

- Sectioning fixes

- Specify credential/subcredential format.
- Bump up revision-counter to 64-bits.
- Specify descriptor encryption padding.

- Replace AES128-CTR with AES256.
- Use relay ed25519 identity keys to create the HSDir hash ring.
- Accept 0 introduction points in descriptors.

- Clarify how to distinguish between old and new style cells.
- Don't send the encryption key to the introduction point.

Signed-off-by: David Goulet <dgoulet@torproject.org>

see ticket 19035 for when we removed this feature.

Specifically concering time periods and SRVs.

Also specify that HSes should re-upload their descriptor every one hour.

Now overlap periods start 6 hours before the start of the next time period.

This reverts commit 8df8c058.

This reverts commit 01119bf1.

Tor is doing the right thing anyway, and specs would look terrible if we
have to refer to [RANDOM-REFS] everytime we use random bytes.

It returns 1 when there's no need for a reachability check.