View Issue Details

IDProjectCategoryView StatusLast Update
0011195GNUnettransport servicepublic2026-07-31 14:36
Reporterthejackimonster Assigned Toschanzen  
PrioritynormalSeverityminorReproducibilityalways
Status resolvedResolutionno change required 
Product VersionGit master 
Target Version0.29.0Fixed in Version0.29.0 
Summary0011195: Communicators require access to private key of peer identity
DescriptionThe TCP and UDP communicators perform multiple cryptographic operations using the private key from the peer identity besides signing messages. This contains GNUNET_CRYPTO_hpke_elligator_kem_decaps() using an HPKE key derived from the EDDSA key and GNUNET_CRYPTO_eddsa_kem_decaps() using the key itself.

Since the PILS service is intended to abstract/manage the peer identity and its private key portion, there are changes needed to utilize this service via its handle instead of requiring direct access to this private key. Additionally this would need new functions on the PILS service handle to perform the needed operations.
TagsNo tags attached.

Activities

schanzen

2026-03-13 18:41

administrator   ~0028136

Before you implement this for all the communicators we should clarify the security architecture of gnunet and doublecheck if we need this.

schanzen

2026-07-31 14:27

administrator   ~0029326

Basically some systems (such as CORE/Transport/Comms) should just use the derived key for performance.

Issue History

Date Modified Username Field Change
2026-03-04 22:17 thejackimonster New Issue
2026-03-13 18:41 schanzen Note Added: 0028136
2026-03-19 08:15 schanzen Target Version 0.27.0 => 1.0.0
2026-03-19 08:18 schanzen Target Version 1.0.0 => 0.28.0
2026-07-31 14:27 schanzen Assigned To => schanzen
2026-07-31 14:27 schanzen Status new => resolved
2026-07-31 14:27 schanzen Resolution open => no change required
2026-07-31 14:27 schanzen Fixed in Version => 0.29.0
2026-07-31 14:27 schanzen Note Added: 0029326
2026-07-31 14:36 schanzen Target Version 0.28.0 => 0.29.0