HathorNetwork / HathorNetwork/hathor-core
We should use Diffie-Hellman based key exchange in P2P connections
- Dominant language
- Python
- Stars
- 92
- Forks
- 45
- PR merge metrics
- No merged PRs in 30d
Description
For servers, it is desirable to offer Diffie-Hellman based key exchange that provides perfect forward secrecy. The ciphers are activated by default, however it is necessary to pass an instance of DiffieHellmanParameters to CertificateOptions via the dhParameters option to be able to use them.
https://twistedmatrix.com/documents/current/core/howto/ssl.html#tls-protocol-options
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by reading the Twisted TLS protocol options documentation linked in the issue and locate the P2P connection setup in the repository. Determine where CertificateOptions is created and how DiffieHellmanParameters could be supplied, then verify that server connections provide forward secrecy without breaking existing TLS behavior.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- cryptography, networking, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 30/100