2

I read that onion proxy adds a layer of abstraction for each onion router in a route,and each onion router just removes a layer of encryption then does onion proxy knows about all onion routers in the route? and does onion routers just decrypts the data and not encrypt them?

Improve this question

2 Answers 2

Reset to default
3

directory server periodically uploads the list of nodes that are available for relaying data. client selects three nodes from this list and gets their public key using which it encrypt data multiple times and sends data to first node of the circuit. each node in the circuit decrypts one layer using their private key. and exit node send data to the destination.

Improve this answer
5
  • can client select more than 3 nodes?what tor proxy does?
    – user3857907
    Mar 1, 2015 at 17:29
  • in tor there client is restricted to select 3 nodes. but onion routing can have other implementations where this number can change.
    – Shivanu Bhateja
    Mar 1, 2015 at 17:40
  • tor and onion routing is different?tor directory uploads the list of nodes...what tor proxy does then?
    – user3857907
    Mar 1, 2015 at 17:48
  • onion routing is a technique of achieving anonymity. But tor is one of its implementations. Tor proxy is actually a bridge between client and the anonymous path.
    – Shivanu Bhateja
    Mar 2, 2015 at 6:29
  • read about bridge in tor documentation, you will get clear picture of how connection is established using bridge or without bridge..... if you are satisfied with answer please up vote my answer.
    – Shivanu Bhateja
    Mar 2, 2015 at 6:31
1

Let's imagine you want to reach a website. Your tor client gets 3 relays out of list of available ones. After that it shares different decryption/encryption keys with each relay. Then it encrypts the packets 3 times and sends them. Each relay decrypts one layer and exit one can see all data going to the website decrypted as plain text. When your data reaches the website the website sends data back to the exit node again in plain text. Then RELAYS share encryption/decryption keys with you. Exit node encrypts the first time, middle second and entry third time. Then you get the data and you decrypt each layer.

So yeah... relays encrypt and decrypt data. Also when the website sends data back to exit node it has some way to link it to middle and middle to entry and entry to you. I don't know how but I hope none of them knows the whole path.

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .