Questions tagged [encryption]
The encryption tag has no usage guidance.
5
votes
1answer
95 views
Is Tor traffic using the TAP handshake vulnerable to retroactive decryption?
Assume an attacker with a record of Tor traffic between a client and guard has precomputed the 1024-bit Oakley group for Diffie-Hellman used in the TAP protocol. This would allow them to rapidly ...
0
votes
1answer
58 views
Why site security information shows “Connection Is Not Secure”,eventhouth web address show HTTPS?
Is it normal that the site security information always shows "Connection Is Not Secure" on all websites even when the web address shows https.The website identity always shows "This website does not ...
0
votes
1answer
111 views
Differences between Onion Routing (Public Key) and Tor-Circuit (Session Key)
I have a hard time understanding how a message is transmitted, when the Public Keys are used and when the Session Keys.
Tor Client connects to a directory server to get a list of active relays & ...
1
vote
0answers
32 views
Is Mix-Kaskading based on the Onion-Routing?
[Note: I'm no native english speaker]
1981 David Chaum first introduced Mix-Networks.
1995 Tor began its life as a research project in the Naval Research Laboratory (NRL), where 1996 three ...
0
votes
1answer
50 views
Have global adversaries ever been able to decrypt hard drives storing .onion material encrypted by Veracrypt?
I'm planning on encrypting my entire HDD - which includes Tor .onion service content - using Veracrypt, the latest in encryption technology.
Has Veracrypt been known to successfully encrypt .onion ...
0
votes
3answers
94 views
ultimate encryption and protection of sensitive data
I have many sensitive documentation which I am scared to lose or get somebody accessed. My question would be what is the ultimate encryption protection? I have read lot of articles saying that for ...
1
vote
1answer
33 views
Rekeying a Tor circuit
Is it possible to rekey a connection between a Tor client and a relay? By rekey I mean perform the usual x25519 key exchange to change the session key on the fly, without tearing the circuit down.
1
vote
1answer
196 views
Security: Can an exit node be set up with an encrypted connection to the service?
So far it seems that all exit note-to-server connections are communicated in plaintext.
Is there a way to add something to a Linux or Windows server so that very last hop is encrypted?
Or ...
1
vote
0answers
318 views
Me->VPN->Tor->Socks5->Tor: Where would a honeypot do the most damage?
Since most vpn's are untrustworthy, and Tor exit nodes can be hosted by malicious entities, im trying to create a trustless chain of anonymization and encryption. I feel as there might be flaws in my ...
0
votes
1answer
193 views
typical way to run tails virtualized on ubuntu?
To run on Ubuntu just use KVM to run tails?
If you are a bit lazy like me, the idea to reboot your system seems
inconvenient. But with the help of QEMU there is an easy to use
alternative ...
2
votes
2answers
282 views
Tor encryption combination
I'm trying to understand exactly how Tor builds a circuit with encryption. I've read the Tor design literature and have a pretty good grasp on it, however I'm left with the following misunderstanding.
...
2
votes
2answers
3k views
HTTPS Everywhere and Tor
I don't see an option to install the HTTPS Everywhere add-on on the Tor Browser. Is the HTTPS not needed on the Tor Browser?
Does Tor encrypt one's data like the HTTPS Everywhere add-on?
I'm new to ...
1
vote
0answers
55 views
tor browser stuck on establishing an encrypted directory connection [duplicate]
i'm trying to connect to tor browser with all my might with my college PC to get some E-books but it's stuck at tor browser stuck on establishing an encrypted directory connection i've tried to use ...
1
vote
0answers
28 views
I seem to be blocked, despite custom bridges. How can I get around this error? [duplicate]
3/29/2017 11:51:07 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.
3/29/2017 11:51:07 AM.600 [NOTICE] ...
2
votes
2answers
126 views
Does all bridge users have the same encryption key?
When I connect to a bridge is my encryption key the same as the encryption key for all other users to the same bridge or does the encryption key differ from one user to another for that same bridge?
...
1
vote
3answers
212 views
Can the tor initial client to relay or bridge connection be MITM attacked?
I am not an expert in Wireshark but I was looking at some packets through Wireshark. I noticed that when using a relay that the connection to the directory authority the first few TCP packets such as ...
1
vote
1answer
216 views
Tor's encryption confusion and client to first node encryption
From what I've read the onion routing process goes like this:
The client encrypts its traffic to the destination server and sends it to the first node (encrypted);
The fird node encrypts it again and ...
0
votes
1answer
95 views
Encryption by EFS
I have the Tor folder in Desktop of Windows 10.
If I created another folder, encrypt it by EFS and put the Tor folder inside of it, do I gain any advantage for security?
I suppose temporary files ...
0
votes
1answer
320 views
Why does Tor only work on TCP?
Is it because of the nature of it's encryption protocol? I'm assuming there are other reasons as well, but I have not been able to find any information about it.
0
votes
1answer
303 views
Is there any vulnerabilities when using socks with tails?
In the tor manual under socks port it states “The SOCKS protocol is unencrypted and (as we use it) unauthenticated”
Does the socks protocol used in the loop back interface only or does the Socks ...
3
votes
2answers
4k views
How does Tor obfs4 protocol and PTs work?
Could someone explain how have many countries and corporations managed to differentiate tor traffic from normal traffic, and how exactly the obfs4 protocol (Or any other Pluggable transports) help ...
2
votes
1answer
122 views
Tor and encryption [duplicate]
Tor [network] encrypts data itself? Or does it only Tor Browser Bundle?
For example, if I use an external client to connect to the Tor network and direct all traffic over Tor and use a different ...
7
votes
2answers
240 views
Why do Tor hidden service operators bother with SSL/TLS encryption?
Tor hidden services have an asymmetric key pair. That seems like it ought to do the job of authenticating the server and securing the connection to the client. When Tor clients reach out to normal ...
1
vote
1answer
298 views
Are all tor exit nodes known?
A normal tor chain is like this :
Client -> Tor Node -> Tor Node -> Tor Exit Node -> Server
Is it possible to have this schema ( two chains ) :
Client -> Tor Node -> Tor Node ->...
2
votes
1answer
646 views
Tor Encryption Standards
I'm looking for up-to-date information on Tor encryption standards, and I can't seem to find anything newer than 2013.
What encryption algorithms does Tor use?
What is the reasoning behind keeping ...
3
votes
2answers
651 views
Sniff Tor onions address from a relay
Currently working on a Tor study, I would have a question regarding the tor hidden services.
I read lot of technicals papers to better understand the tor working on this point, like these good ...
7
votes
1answer
5k views
What encryption algorithms does Tor use?
I am building an application that will be connected over tor, using onion services. I just realized that the file generated by Tor that contains the private key of the hidden site is only RSA 1024bits....
1
vote
1answer
75 views
TOR and Orbot, possibility to add in dynamic AES encryption structure before data is send out?
I read on the documentation about the security issues on TOR, that it is ok if the website is running on HTTPS, but how about on Orbot and site that is not running on HTTPS?
Even if it is running on ...
1
vote
0answers
100 views
VPN Router + Tor and 2nd VPN Local Machine Clarifications
Hello my question is I have my router configured to connect through a vpn (VPN A). Thus all Internet traffic on my network goes through a vpn. If I run tor on a local machine with a 2nd vpn (VPN B), ...
2
votes
1answer
246 views
How do I encrypt document via right-click menu in Tails?
I don't understand the procedure here. There are some options to choose from to encrypt the file, but then I can't decrypt it because I don't have the password. How do I create a password before I ...
1
vote
2answers
594 views
How does data go through Tor
I know how Tor works (mostly) but I want to know how data returns through Tor to the user. Example: I send a message from me (Bob) to my friend (Rob) and it goes to, let's say, 3 relays. Now, when I ...
9
votes
3answers
4k views
Do all .onion addresses use SSL/TLS?
Do .onion sites encrypt the information going through the exit node? Because a lot of them start with HTTP and not HTTPS.
2
votes
2answers
54 views
Why Tor node maintains TLS keys with every other Tor node?
I read that Tor proxy maintains key with each Tor node for encryption. Then, why does a Tor node maintains TLS keys with other Tor nodes?
2
votes
1answer
59 views
Are get variables encrypted when using Tor?
I'm relatively new to Tor and I was wondering if get variables in the address bar are visible to anyone other than the client and the server.
Example:
randomaddress.onion/login.php?a=47
Would ...
9
votes
1answer
860 views
How is data sent back from exit node to me?
I understand how the client sends the data through Tor to the sever. Onion routing
Basically, it selects a set of nodes to form a circuit, say nodeA nodeB nodeC.
It then encrypts the data this way:
...
3
votes
3answers
208 views
Is all traffic routed through Tor when using TBB?
Consider a computer connected to the Tor network through the Tor Browser Bundle: my question is does the whole internet traffic go through the Tor network like windows update, kaspersky update, vlc ...
5
votes
2answers
287 views
Does Tor team have plans to implement post-quantum asymmetrical encryption schemes?
There is information that NSA is building quantum computer. Since it would make it possible to crack RSA using Shor's algorithm and we unlikely to know if they will successfully build it and start ...
4
votes
1answer
688 views
Using Tor Proxy through other aplications
Before I proceed, I would like to mention that I understand that Tor browser integrates unique features such as not loading certain html canvases, scripts and a whole bunch of additions to make ...
1
vote
1answer
35 views
Visiblity of data in my network (Encrypted Tunnels)
My question is whether data about my addressed websites and me are visible/unencrypted within my network.
E.g. I want to access 'https://ixquick.com/' using the Tor browser. Is the request for ixquick ...
3
votes
2answers
272 views
Tor/Tails Exit Node Connection Encryption
If I use a firewall (IPcop) to allow only HTTPS (443) traffic from the LAN/Tails box/Green NIC, and block all other protocols/traffic, is all traffic from the Exit Node guaranteed to be encrypted?
...
2
votes
1answer
1k views
Multi-VPN hopping Advantages/Disadvantages over Tor
I was told that using Tor and/or a VPN is always a tradeoff of privacy and anonymity. I'm wonder what combination of Tor, VPNs (paid or free), and proxies can help minimize this risk.
For example, if ...
4
votes
1answer
3k views
How to completely delete every single trace of Tor from Windows 7 Truecrypt folder
I recently made a Truecrypt AES encrypted folder and installed the Tor Browser Bundle into it.
I was wondering - if I delete the Truecrypt file, is there anything else left on my computer pointing to ...
3
votes
2answers
261 views
Encrypt traffic between my onion site and exit relays
Is it possible to encrypt all traffic between the last relay and my hidden service site? (I have tried to use an ssl certificate and configure tor like that: HiddenServicePort 443 127.0.0.1:443 but it ...
1
vote
0answers
32 views
When Forward Secrecy ciphers are used, the Torproject website uses 1024 bit key exchange; Can this be improved? [closed]
While the website of Torproject uses a 2048 bit certificate, if Forward Secrecy ciphers are used, the key exchange is only 1024 bit:
https://www.ssllabs.com/ssltest/analyze.html?d=torproject.org
EDIT:...
2
votes
1answer
327 views
Does exit node encrypt three times for the return path to local machine?
I'm new to Tor, So I read the Short User Manual here
I found this image in the link above, I understand Tor on my local machine encrypts everything thrice, what about the return path? Does the exit ...
2
votes
1answer
493 views
Is it illegal to use Tor and any encryption product in Russia?
I've read http://www.cryptolaw.org/cls2.htm#ru but also Is there a list of illegal Tor areas?.
So I'm kind of confused, do you guys know anything about this matter?
10
votes
5answers
3k views
DNSSEC & DNSCrypt over Tor
I want to use DNSSEC and DNSCrypt with Tor. I wonder which configuration is more secure and better?
SOCKS4 + dnscrypt-proxy:
Forward the DNS traffic to a DNS server which I choose. Although the DNS ...
5
votes
2answers
113 views
Tor security if LE/ISP want me really bad
Let's say LE knows who I am ... they already know I am using Tor. Is there a way for them to create a surveillance from my ISP ? You will say Tor is encrypted except exit relay ... but common to the ...
6
votes
2answers
315 views
Custom cryptography for Hidden services
Tor support AES for symmetric cryptography which is fine but for asymmetric cryptography we might prefer something else (I guess now its RSA1024 which is almost broken and proposals are saying to ...
10
votes
1answer
492 views
Do all relays in a circuit encrypt data response from a server?
I know that when sending data from the Tor client to a server it is encrypted and gradually get decrypted on the way there.
This question is about when the server responds. The data must be encrypted ...
