Skip to content
This repository has been archived by the owner on Sep 1, 2022. It is now read-only.

TunnelEndpoint: implement out-of-order message fragment reassembly #74

Closed
anonimal opened this issue Jan 18, 2016 · 3 comments
Closed

Comments

@anonimal
Copy link
Collaborator

Look to java i2p's implementation instead of simply dropping the message.

2016-01-18 00:30:44     +zzz    in tunnels, you can fragment as-you-go because there's no retransmission, so you can be smarter
2016-01-18 00:31:43     +zzz    in SSU, you have to fragment up front because individual fragments can be retransmitted
2016-01-18 00:31:46     +zzz    so it gets messier
2016-01-18 00:32:04     +zzz    in SSU, for example, we often transmit the last fragment first, because it's smaller and will fit in a packet that's half full
2016-01-18 00:33:02     +zzz    there's no reason to do that for tunnels
2016-01-18 00:45:04     +zzz    you can always fragment at the GW better so that's optimization. If you don't reassemble correctly at the EP that's a bug. I can't think of any security issues for either.
2016-01-18 00:47:16     +zzz    the quirks at either end could perhaps distinguish between java and c++, but I wouldn't rank that issue very high
@anonimal
Copy link
Collaborator Author

Labeling as critical because the ability to distinguish java i2p from c++ i2p is not inline with our mission statement "The secure, private, untraceable C++ I2P router" and because I consider this distinguishable element as a vulnerability that can be exploited.

@anonimal
Copy link
Collaborator Author

anonimal commented Sep 9, 2016

In a perfect world, this would be critical. In reality, given where we are now, and in relation to more critical vectors, its not. Relabeled as medium.

@anonimal
Copy link
Collaborator Author

anonimal commented Sep 7, 2018

NOTICE: THIS ISSUE HAS BEEN MOVED TO GitLab. Please continue the discussion there. See #1013 for details.

@anonimal anonimal closed this as completed Sep 7, 2018
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

1 participant