Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [encryption]

The tag has no usage guidance.

13
votes
3answers
750 views

Are there any vulnerabilities in the process of onion routing?

In onion routing, messages are repeatedly encrypted and then sent through several network nodes called onion routers. Each onion router removes a layer of encryption to uncover routing instructions, ...
10
votes
1answer
491 views

Do all relays in a circuit encrypt data response from a server?

I know that when sending data from the Tor client to a server it is encrypted and gradually get decrypted on the way there. This question is about when the server responds. The data must be encrypted ...
10
votes
5answers
3k views

DNSSEC & DNSCrypt over Tor

I want to use DNSSEC and DNSCrypt with Tor. I wonder which configuration is more secure and better? SOCKS4 + dnscrypt-proxy: Forward the DNS traffic to a DNS server which I choose. Although the DNS ...
9
votes
3answers
4k views

Do all .onion addresses use SSL/TLS?

Do .onion sites encrypt the information going through the exit node? Because a lot of them start with HTTP and not HTTPS.
9
votes
1answer
855 views

How is data sent back from exit node to me?

I understand how the client sends the data through Tor to the sever. Onion routing Basically, it selects a set of nodes to form a circuit, say nodeA nodeB nodeC. It then encrypts the data this way: ...
7
votes
1answer
5k views

What encryption algorithms does Tor use?

I am building an application that will be connected over tor, using onion services. I just realized that the file generated by Tor that contains the private key of the hidden site is only RSA 1024bits....
7
votes
2answers
240 views

Why do Tor hidden service operators bother with SSL/TLS encryption?

Tor hidden services have an asymmetric key pair. That seems like it ought to do the job of authenticating the server and securing the connection to the client. When Tor clients reach out to normal ...
6
votes
2answers
315 views

Custom cryptography for Hidden services

Tor support AES for symmetric cryptography which is fine but for asymmetric cryptography we might prefer something else (I guess now its RSA1024 which is almost broken and proposals are saying to ...
5
votes
4answers
5k views

Is my Tor browser's connection to the Tor routing network encrypted?

I have frequently heard that the endpoints of a Tor connection are unencrypted. This makes no sense to me. If the purpose of Tor was originally to protect dissidents in places like China, then why ...
5
votes
2answers
285 views

Does Tor team have plans to implement post-quantum asymmetrical encryption schemes?

There is information that NSA is building quantum computer. Since it would make it possible to crack RSA using Shor's algorithm and we unlikely to know if they will successfully build it and start ...
5
votes
2answers
113 views

Tor security if LE/ISP want me really bad

Let's say LE knows who I am ... they already know I am using Tor. Is there a way for them to create a surveillance from my ISP ? You will say Tor is encrypted except exit relay ... but common to the ...
5
votes
1answer
94 views

Is Tor traffic using the TAP handshake vulnerable to retroactive decryption?

Assume an attacker with a record of Tor traffic between a client and guard has precomputed the 1024-bit Oakley group for Diffie-Hellman used in the TAP protocol. This would allow them to rapidly ...
4
votes
1answer
3k views

How to completely delete every single trace of Tor from Windows 7 Truecrypt folder

I recently made a Truecrypt AES encrypted folder and installed the Tor Browser Bundle into it. I was wondering - if I delete the Truecrypt file, is there anything else left on my computer pointing to ...
4
votes
1answer
685 views

Using Tor Proxy through other aplications

Before I proceed, I would like to mention that I understand that Tor browser integrates unique features such as not loading certain html canvases, scripts and a whole bunch of additions to make ...
4
votes
1answer
216 views

Where along the path is encryption used?

This question is born out of two questions that I saw coming up. Is the connection between my computer and the Tor network encrypted? How does Tor encrypt my traffic before it sends it to the server?...
4
votes
2answers
279 views

Does Tor encrypt a client's connection to its entry node?

Does Tor encrypt a client's connection to its entry node? How does it do this?
3
votes
2answers
4k views

How does Tor obfs4 protocol and PTs work?

Could someone explain how have many countries and corporations managed to differentiate tor traffic from normal traffic, and how exactly the obfs4 protocol (Or any other Pluggable transports) help ...
3
votes
2answers
261 views

Encrypt traffic between my onion site and exit relays

Is it possible to encrypt all traffic between the last relay and my hidden service site? (I have tried to use an ssl certificate and configure tor like that: HiddenServicePort 443 127.0.0.1:443 but it ...
3
votes
2answers
644 views

Sniff Tor onions address from a relay

Currently working on a Tor study, I would have a question regarding the tor hidden services. I read lot of technicals papers to better understand the tor working on this point, like these good ...
3
votes
3answers
207 views

Is all traffic routed through Tor when using TBB?

Consider a computer connected to the Tor network through the Tor Browser Bundle: my question is does the whole internet traffic go through the Tor network like windows update, kaspersky update, vlc ...
3
votes
2answers
269 views

Tor/Tails Exit Node Connection Encryption

If I use a firewall (IPcop) to allow only HTTPS (443) traffic from the LAN/Tails box/Green NIC, and block all other protocols/traffic, is all traffic from the Exit Node guaranteed to be encrypted? ...
3
votes
1answer
91 views

hidden services stability and cryptography

Are HSDirs stable or there is a chance to lose my hidden service if HSdirs shuts down? Also Why there is no way to make a hidden service use ECC instead of RSA?
3
votes
1answer
179 views

When talking about a hidden service, what does it mean to have an encrypted descriptor? [closed]

What is an "encrypted descriptor?" What are the pros and cons of using one? In what version of Tor did they first become available? Are they automatically used (i.e. default)? If not, how do you ...
2
votes
2answers
3k views

HTTPS Everywhere and Tor

I don't see an option to install the HTTPS Everywhere add-on on the Tor Browser. Is the HTTPS not needed on the Tor Browser? Does Tor encrypt one's data like the HTTPS Everywhere add-on? I'm new to ...
2
votes
2answers
275 views

Tor encryption combination

I'm trying to understand exactly how Tor builds a circuit with encryption. I've read the Tor design literature and have a pretty good grasp on it, however I'm left with the following misunderstanding. ...
2
votes
2answers
123 views

Does all bridge users have the same encryption key?

When I connect to a bridge is my encryption key the same as the encryption key for all other users to the same bridge or does the encryption key differ from one user to another for that same bridge? ...
2
votes
1answer
122 views

Tor and encryption [duplicate]

Tor [network] encrypts data itself? Or does it only Tor Browser Bundle? For example, if I use an external client to connect to the Tor network and direct all traffic over Tor and use a different ...
2
votes
2answers
54 views

Why Tor node maintains TLS keys with every other Tor node?

I read that Tor proxy maintains key with each Tor node for encryption. Then, why does a Tor node maintains TLS keys with other Tor nodes?
2
votes
1answer
1k views

Multi-VPN hopping Advantages/Disadvantages over Tor

I was told that using Tor and/or a VPN is always a tradeoff of privacy and anonymity. I'm wonder what combination of Tor, VPNs (paid or free), and proxies can help minimize this risk. For example, if ...
2
votes
1answer
644 views

Tor Encryption Standards

I'm looking for up-to-date information on Tor encryption standards, and I can't seem to find anything newer than 2013. What encryption algorithms does Tor use? What is the reasoning behind keeping ...
2
votes
1answer
241 views

How do I encrypt document via right-click menu in Tails?

I don't understand the procedure here. There are some options to choose from to encrypt the file, but then I can't decrypt it because I don't have the password. How do I create a password before I ...
2
votes
1answer
59 views

Are get variables encrypted when using Tor?

I'm relatively new to Tor and I was wondering if get variables in the address bar are visible to anyone other than the client and the server. Example: randomaddress.onion/login.php?a=47 Would ...
2
votes
1answer
492 views

Is it illegal to use Tor and any encryption product in Russia?

I've read http://www.cryptolaw.org/cls2.htm#ru but also Is there a list of illegal Tor areas?. So I'm kind of confused, do you guys know anything about this matter?
2
votes
1answer
326 views

Does exit node encrypt three times for the return path to local machine?

I'm new to Tor, So I read the Short User Manual here I found this image in the link above, I understand Tor on my local machine encrypts everything thrice, what about the return path? Does the exit ...
1
vote
2answers
586 views

How does data go through Tor

I know how Tor works (mostly) but I want to know how data returns through Tor to the user. Example: I send a message from me (Bob) to my friend (Rob) and it goes to, let's say, 3 relays. Now, when I ...
1
vote
1answer
33 views

Rekeying a Tor circuit

Is it possible to rekey a connection between a Tor client and a relay? By rekey I mean perform the usual x25519 key exchange to change the session key on the fly, without tearing the circuit down.
1
vote
1answer
195 views

Security: Can an exit node be set up with an encrypted connection to the service?

So far it seems that all exit note-to-server connections are communicated in plaintext. Is there a way to add something to a Linux or Windows server so that very last hop is encrypted? Or ...
1
vote
3answers
210 views

Can the tor initial client to relay or bridge connection be MITM attacked?

I am not an expert in Wireshark but I was looking at some packets through Wireshark. I noticed that when using a relay that the connection to the directory authority the first few TCP packets such as ...
1
vote
1answer
215 views

Tor's encryption confusion and client to first node encryption

From what I've read the onion routing process goes like this: The client encrypts its traffic to the destination server and sends it to the first node (encrypted); The fird node encrypts it again and ...
1
vote
1answer
295 views

Are all tor exit nodes known?

A normal tor chain is like this : Client -> Tor Node -> Tor Node -> Tor Exit Node -> Server Is it possible to have this schema ( two chains ) : Client -> Tor Node -> Tor Node ->...
1
vote
1answer
75 views

TOR and Orbot, possibility to add in dynamic AES encryption structure before data is send out?

I read on the documentation about the security issues on TOR, that it is ok if the website is running on HTTPS, but how about on Orbot and site that is not running on HTTPS? Even if it is running on ...
1
vote
0answers
31 views

Is Mix-Kaskading based on the Onion-Routing?

[Note: I'm no native english speaker] 1981 David Chaum first introduced Mix-Networks. 1995 Tor began its life as a research project in the Naval Research Laboratory (NRL), where 1996 three ...
1
vote
0answers
312 views

Me->VPN->Tor->Socks5->Tor: Where would a honeypot do the most damage?

Since most vpn's are untrustworthy, and Tor exit nodes can be hosted by malicious entities, im trying to create a trustless chain of anonymization and encryption. I feel as there might be flaws in my ...
1
vote
0answers
55 views

tor browser stuck on establishing an encrypted directory connection [duplicate]

i'm trying to connect to tor browser with all my might with my college PC to get some E-books but it's stuck at tor browser stuck on establishing an encrypted directory connection i've tried to use ...
1
vote
0answers
28 views

I seem to be blocked, despite custom bridges. How can I get around this error? [duplicate]

3/29/2017 11:51:07 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections. 3/29/2017 11:51:07 AM.600 [NOTICE] ...
1
vote
0answers
100 views

VPN Router + Tor and 2nd VPN Local Machine Clarifications

Hello my question is I have my router configured to connect through a vpn (VPN A). Thus all Internet traffic on my network goes through a vpn. If I run tor on a local machine with a 2nd vpn (VPN B), ...
1
vote
1answer
35 views

Visiblity of data in my network (Encrypted Tunnels)

My question is whether data about my addressed websites and me are visible/unencrypted within my network. E.g. I want to access 'https://ixquick.com/' using the Tor browser. Is the request for ixquick ...
1
vote
0answers
32 views

When Forward Secrecy ciphers are used, the Torproject website uses 1024 bit key exchange; Can this be improved? [closed]

While the website of Torproject uses a 2048 bit certificate, if Forward Secrecy ciphers are used, the key exchange is only 1024 bit: https://www.ssllabs.com/ssltest/analyze.html?d=torproject.org EDIT:...
0
votes
3answers
91 views

ultimate encryption and protection of sensitive data

I have many sensitive documentation which I am scared to lose or get somebody accessed. My question would be what is the ultimate encryption protection? I have read lot of articles saying that for ...
0
votes
1answer
95 views

Encryption by EFS

I have the Tor folder in Desktop of Windows 10. If I created another folder, encrypt it by EFS and put the Tor folder inside of it, do I gain any advantage for security? I suppose temporary files ...