Stem Docs

Hidden Service Descriptor

Hidden Service Descriptor

Parsing for Tor hidden service descriptors as described in Tor's rend-spec.

Unlike other descriptor types these describe a hidden service rather than a relay. They're created by the service, and can only be fetched via relays with the HSDir flag.

Module Overview:

HiddenServiceDescriptor - Tor hidden service descriptor.

New in version 1.4.0.

class stem.descriptor.hidden_service_descriptor.IntroductionPoints

Bases: stem.descriptor.hidden_service_descriptor.IntroductionPoints

  • identifier (str) -- hash of this introduction point's identity key
  • address (str) -- address of this introduction point
  • port (int) -- port where this introduction point is listening
  • onion_key (str) -- public key for communicating with this introduction point
  • service_key (str) -- public key for communicating with this hidden service
  • intro_authentication (list) -- tuples of the form (auth_type, auth_data) for establishing a connection
exception stem.descriptor.hidden_service_descriptor.DecryptionFailure[source]

Bases: exceptions.Exception

Failure to decrypt the hidden service descriptor's introduction-points.

class stem.descriptor.hidden_service_descriptor.HiddenServiceDescriptor(raw_contents, validate=False)[source]

Bases: stem.descriptor.Descriptor

Hidden service descriptor.

  • descriptor_id (str) -- * identifier for this descriptor, this is a base32 hash of several fields
  • version (int) -- * hidden service descriptor version
  • permanent_key (str) -- * long term key of the hidden service
  • secret_id_part (str) -- * hash of the time period, cookie, and replica values so our descriptor_id can be validated
  • published (datetime) -- * time in UTC when this descriptor was made
  • protocol_versions (list) -- * list of int versions that are supported when establishing a connection
  • introduction_points_encoded (str) -- raw introduction points blob
  • introduction_points_auth (list) -- * tuples of the form (auth_method, auth_data) for our introduction_points_content (deprecated, always [])
  • introduction_points_content (bytes) -- decoded introduction-points content without authentication data, if using cookie authentication this is encrypted
  • signature (str) -- signature of the descriptor content

* attribute is either required when we're parsed with validation or has a default value, others are left as None if undefined

Changed in version 1.6.0: Moved from the deprecated pycrypto module to cryptography for validating signatures.

introduction_points(*args, **kwds)[source]

Provided this service's introduction points.


list of IntroductionPoints

Raises :
  • ValueError if the our introduction-points is malformed
  • DecryptionFailure if unable to decrypt this field