zzz
a403278fe6
Util: eqCT() null check
2026-05-11 07:37:25 -04:00
zzz
a4afe588f3
Util: Use constant-time comparison in various password checkers
...
reported by: bottomlineit.co.za
2026-05-08 15:02:22 -04:00
zzz
85854c5454
Javadoc fix (json-simple)
...
fixed 6 years ago but got reverted in the update to 2.3.1
2026-05-06 17:29:04 -04:00
zzz
05438ab51d
Util: Set minidns fields to final
...
reported by: bottomlineit.co.za
2026-05-04 17:22:15 -04:00
zzz
57e8f8c1cf
Util: Remove useless synchronized on no-op method
...
reported by: bottomlineit.co.za
2026-05-01 13:15:11 -04:00
zzz
41647e94f0
I2CP: Wait for queue space on internal queue close()
...
reported by: bottomlineit.co.za
2026-05-01 13:10:19 -04:00
zzz
66a270e7a2
Crypto: Use constant-time modPow() for ElG private key operations
...
Deprecate unused ElGamalSigEngine
reported by: bottomlineit.co.za
2026-05-01 11:34:28 -04:00
zzz
93be42925b
Util: Update json-simple to 2.3.1
...
from https://github.com/cliftonlabs/json-simple.git tag json-simple.2.3.1 2018-02-05
Fixes:
- Jsoner.serialize array off-by-one deterministic crash on 9 primitive/Object array branches
reported by: bottomlineit.co.za
2026-04-30 20:17:28 -04:00
zzz
dafde0c327
Util: Update minidns to 1.1.1
...
from https://github.com/MiniDNS/minidns tag 1.1.1 2024-10-24
Possible fixes (unverified):
- MiniDNS per-RR parsers throw NegativeArraySizeException on malformed header
- DnsName.parse recurses per label without depth bound StackOverflow DoS
- DnsName parser throws AIOOBE (not IOException) on truncated pointer
- ipv4From / ipv6From resolve via DNS instead of parsing literals
- Question constructor uses assert for null checks
- DnsMessage pre-allocates ArrayLists from 16-bit header counts
- OPT.parse uses dis.read() and disabled assert for bounds
reported by: bottomlineit.co.za
2026-04-30 19:06:49 -04:00
zzz
051dccf4b1
Util: Revert change causing failed decode of compressed IPv6 addresses
...
partial revert of aa77c9a4ab
reported by: bottomlineit.co.za
2026-04-30 18:21:33 -04:00
zzz
bb49736b33
Crypto: Disallow DSA-SHA1 signing k=q
...
reported by: bottomlineit.co.za
2026-04-25 17:47:20 -04:00
zzz
aa77c9a4ab
Router: Don't use InetAddress.getByName() for blocklist IP conversion
...
to make really sure we don't use DNS, and it's slow anyway.
reported by: bottomlineit.co.za
2026-04-25 17:03:13 -04:00
zzz
20a10ae0ae
Crypto: Change RFC 7748 DH error to a checked exception
...
so things are cleaned up properly
2026-04-25 15:22:21 -04:00
zzz
b9bdce41a0
Add missing file for I2CP, bump -2
2026-04-25 10:57:31 -04:00
zzz
4f892d6331
I2CP, SAM: Support lookup of ls2 options (proposal 167)
2026-04-25 10:43:58 -04:00
zzz
1aba9220a3
I2CP: Add missing max length check on alternate readMessage() path
...
reported by: bottomlineit.co.za
2026-04-25 10:15:08 -04:00
zzz
ba572bd1bd
spotbugs fixes all over
2026-04-25 09:53:32 -04:00
eyedeekay
2800040dee
Bump version to 2.12.0 and update related files
2026-04-20 09:44:38 -04:00
zzz
9d0d5eb604
Pull translations from Weblate
...
fix 'ant testscripts'
2026-04-17 14:24:24 -04:00
zzz
5ba9ad218c
Crypto: Use constant-time comparison in ElG decrypt and HMAC verification
...
check for zero output in X25519 DH as recommmended by RFC 7748
reported by: bottomlineit.co.za
2026-04-13 08:09:49 -04:00
zzz
9a0f22c0d7
I2CP: Fix LS2 options not being updated on subsession
2026-03-25 13:09:47 -04:00
zzz
527ed57e4a
I2NP: HostReplyMessage updates for proposal 167 (WIP)
2026-03-24 11:32:53 -04:00
zzz
39b2116afa
Util: Add note about formatTime() output
2026-03-21 07:49:46 -04:00
zzz
a18db19244
Util: Bump max Java version for CLI output
2026-03-21 07:48:14 -04:00
zzz
174061bd2d
Stats: Fix 60s stat getAverage() returning 20% high
...
due to CoalesceStatsEvent being on a 50s timer
- Caused by rounding in Rate.coalesce()
- Affected data on /stats, Prometheus plugin, console sidebar, and internal use
- Did not affect graphs
- Apparently dates back to original jrandom code
2026-03-19 10:25:12 -04:00
zzz
d5e8cf07bb
Console: Mark LS1 encrypted leasesets as deprecated
...
also add notes to javadocs for the KeyRing class used to store the keys
2026-03-13 09:10:16 -04:00
zzz
9597bc540f
I2CP: Force LS2 even for ElG-only
...
i2pd request
2026-02-28 09:14:51 -05:00
zzz
fc4cd14534
Data: Add cached entries for common properties (props 168, 169)
2026-02-14 14:15:55 -05:00
zzz
bef32f70c3
Datagrams: Use smaller initial buffer size in DG1 maker
...
and improve exception messages and comments.
Also increase max size to match spec.
2026-02-14 13:21:53 -05:00
zzz
98644e565f
i2psnark: Clear bw limiters on session stop
2026-02-14 13:08:51 -05:00
eyedeekay
8e1eb6b012
Update checklist.md and bump version numbers
2026-02-09 14:27:41 -05:00
zzz
358f5fa453
Change canonical domain to i2p.net
2026-01-14 12:08:01 -05:00
zzz
75d7513532
Util: Add namecoin and GNS to DoH blacklist
2025-12-29 11:35:47 -05:00
eyedeekay
9c1573d357
Release I2P 2.10.0
2025-09-08 18:24:08 -04:00
zzz
38805ee866
I2CP: Stub out new HostLookup types for service records (proposal 167)
...
not complete, not yet hooked in
2025-07-27 11:24:18 -04:00
zzz
4128335115
Crypto: Reduce YK precalc pool size, almost unused
2025-07-27 09:11:35 -04:00
zzz
41b7b42ec2
I2CP: Destroy session fixes
...
- Destroying subsession no longer destroys primary session on client side
- Ignore SessionStatus(Destroyed) on client side, it wasn't doing the right thing
- Add notes on router side about not sending SessionStatus(Destroyed)
2025-07-17 18:06:33 -04:00
zzz
a439c86b98
Remove exclusion of class already removed
2025-07-04 07:46:09 -04:00
zzz
fd436ec35a
Util: Android Java version detection improvements
2025-07-04 07:30:26 -04:00
zzz
f6289cb41b
Merge pull request 'PQ MLKEM hybrid ratchet only' ( #517 ) from zzz/i2p.i2p:pq-ratchet into master
...
Reviewed-on: http://git.idk.i2p/I2P_Developers/i2p.i2p/pulls/517
Reviewed-by: idk <idki2p@mail.i2p >
2025-06-24 08:31:49 -04:00
zzz
5bb3cc488c
Merge pull request 'I2CP: Add async lookup API' ( #511 ) from zzz/i2p.i2p:i2cp-asynch-lookup into master
...
Reviewed-on: http://git.idk.i2p/I2P_Developers/i2p.i2p/pulls/511
Reviewed-by: idk <idki2p@mail.i2p >
2025-06-18 11:35:35 -04:00
zzz
0aa280435a
Merge pull request 'Stats: Remove ancient stat log' ( #503 ) from zzz/i2p.i2p:statlog into master
...
Reviewed-on: http://git.idk.i2p/I2P_Developers/i2p.i2p/pulls/503
Reviewed-by: idk <idki2p@mail.i2p >
2025-06-15 08:08:17 -04:00
zzz
5c828fa116
Merge pull request 'I2CP: Add support for service records (proposal 167)' ( #501 ) from zzz/i2p.i2p:prop167 into master
...
Reviewed-on: http://git.idk.i2p/I2P_Developers/i2p.i2p/pulls/501
Reviewed-by: idk <idki2p@mail.i2p >
2025-06-15 08:04:08 -04:00
zzz
e3b176b676
I2P changes for ratchet
2025-06-13 08:56:52 -04:00
eyedeekay
71e2e8d5aa
I2P 2.9.0 Release
2025-06-02 15:21:56 -04:00
eyedeekay
e92695a42e
Release Checklist: ant bumpBuildtime, ran javadoc test, ran java 7 test, geoip will wait until day-of. CI on gitea is temp down, but is equivalent to CI on github.
2025-05-26 15:20:49 -04:00
zzz
740a06b438
I2CP: Add asynch lookup API
...
Underlying lookup was already asynch but there was no sync API.
This will be useful for the zzzot plugin and others.
Also clean up pending lookups on session shutdown.
2025-05-14 08:41:56 -04:00
zzz
488759c66b
code formatting
2025-05-11 14:16:44 -04:00
zzz
9c1175fdc5
spelling
2025-05-08 10:33:50 -04:00
zzz
7755860274
CLI: Show deprecated types in privatekeyfile and su3file help
2025-05-02 07:36:14 -04:00