I was looking through allot of the details with the hidden services. One answer was done very well and explained allot, which I have linked below. I wasn't sure on exactly how the intro can correlate a hidden service to their ip however. If the hidden service gives the public key then isn't it possible for the intro to also know the hidden service domain at some point and correlate the 2?

In other words:
1. hidden service gives public key to intro.
2. intro saves public key as variable name for the ip.
3. months later the intro comes across a blank.onion which they get a public key from.
4. they correlate that with the public keys they have and suddenly have the ip of blank.onion

How do onion addresses exactly work?


The introduction point never learns the IP address of the onion service. The onion service builds a 3-hop circuit to the introduction point in order to stay anonymous, just like clients build 3-hop circuits. Also, the answer you linked to was for V2 onion services. Since then Tor has added support for V3 onion services which provide much better security/privacy for onion services.

  • That makes allot of sense, but doesn't the peer that connects to the hidden service ip know the public key. Couldn't that peer correlate the hidden service?
    – TheAnarch
    Mar 18 '20 at 4:13
  • @TheAnarch Onion services use guard relays, so the guard learns the IP address of the onion service, but it doesn't learn the public key of (or any information that identifies) the service. Just like guards don't require public keys from Tor clients, guards don't require public keys from onion services either. Any information that identifies the onion service travels through the 3-hop circuit from the guard to the introduction point, and the guard cannot read this information since it's encrypted to only the introduction point.
    – Steve
    Mar 18 '20 at 18:11
  • Awesome, you have answered my question!
    – TheAnarch
    Mar 18 '20 at 18:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.