shadowsocks / shadowsocks/shadowsocks-org

Another mechanism to achieve Forward Security, without changing the protocol

Open
#178 34 comments 8 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
HTML
Stars
1k
Forks
694
PR merge metrics
No merged PRs in 30d

Description

For the record, I have designed the VLESS and XTLS protocols, and I started the Xray-core project a month or so ago.
So those involved in the discussion should have basic level of knowledge of protocol design, engineering practices, etc.

Here's another idea after #177. It can solve existing problem without changing the protocol, but have one limitation. Note that none of my designs require the introduction of additional long-term channels or bring in identifiable features, which is the basic guideline.

  1. On initial configuration, the server generates the random key, along with a corresponding timestamp.
  2. newkey = hash(oldkey), with updated timestamp, regularly, e.g. hourly. The old key should not be retained.
  3. This requires the same time on both sides. And it's not recommended for multiple clients to share key.

In addition, if the configuration is immediately imported to the user's client, actually the timestamp can be ignored during the import, thus eliminating the need to synchronize the time.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Read this proposal together with the referenced issue #177 and the VLESS and XTLS context linked in the description. No repository files, tests, entry point, or acceptance criteria are identified, so the intended implementation scope and definition of done need clarification before work can start.

Written by the indexing model from the issue text.

Assessment

Domain
cryptography, networking, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.