Constructor Detail

• BloomFilterIVValidator

  public BloomFilterIVValidator(RouterContext ctx,
                                int KBps)

  Construct the validator, selecting filter size based on bandwidth and memory.

  Parameters:

  ctx - the router context

  KBps - share bandwidth

Method Detail

• destroy

  public void destroy()

  Stop the decaying filter.

• receiveIV

  public boolean receiveIV(byte[] ivData,
                           int ivOffset,
                           byte[] payload,
                           int payloadOffset)

  Description copied from interface: IVValidator
  receive the IV for the tunnel message, returning true if it is valid, or false if it has already been used (or is otherwise invalid). To prevent colluding attackers from successfully tagging the tunnel by switching the IV and the first block of the message, the validator should treat the XOR of the IV and the first block as the unique identifier, not the IV alone (since the tunnel is encrypted via AES/CBC). Thanks to dvorak for pointing out that tagging!

  Specified by:

  receiveIV in interface IVValidator

  Parameters:

  ivData - data will not be modified

  ivOffset - offset of the IV in the iv array

  payload - will not be modified

  payloadOffset - offset of the payload in the payload array

  Returns:

  true if valid, false if already used or otherwise invalid