5

Let's say LE knows who I am ... they already know I am using Tor. Is there a way for them to create a surveillance from my ISP ? You will say Tor is encrypted except exit relay ... but common to the first node... I have to send the encryption code also so the message is decrypted , right? Also when I get back the response, Tor already know my encryption code... so is Tor safe if Law Enforcement will do a "man in the middle" attack exactly between me and my ISP ?

Improve this question

2 Answers 2

Reset to default
1

Tor uses public key encryption.
Everybody creates a public / private key pair.
The public key is used to encrypt data.
The private key is used for decrypting data.

Public keys are publicly known so anybody can encrypt data.
Private keys are kept secret, so only the person who knows it can decrypt the data.

Tor uses this to avoid the attack that you're describing.
You may find this youtube video useful.

Improve this answer
2
  • 1
    Public key encryption alone does not prevent man in the middle attacks! You need to have safe (trustful) distribution of public keys and protection of private keys. This is what does for example PKI with CAs (X.509) or PGP's Web of trust.
    – pabouk - Ukraine stay strong
    Jan 31, 2014 at 13:05
  • 1
    In this case the public keys of the directory authorities are distributed with the Tor software. Clients then proceed to download any other network information from them. I suppose that more or less mirrors PKI.
    – user194
    Feb 1, 2014 at 3:02
1

but common to the first node... i must to send the encryption code also so the message is decrypted , right?

The first node is the Tor client on your local machine.

The connection from your browser to your Tor client is socks. From there, the connection to the guard node is encrypted. The guard can not decrypt your traffic.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .