Questions tagged [encryption]
This tag is to be used for questions about the encryption of Tor traffic or questions about encrypted data related to Tor.
75
questions
13
votes
3
answers
2k
views
Are there any vulnerabilities in the process of onion routing?
In onion routing, messages are repeatedly encrypted and then sent through several network nodes called onion routers. Each onion router removes a layer of encryption to uncover routing instructions, ...
- 1,053
11
votes
3
answers
7k
views
Do all .onion addresses use SSL/TLS?
Do .onion sites encrypt the information going through the exit node? Because a lot of them start with HTTP and not HTTPS.
- 111
11
votes
1
answer
1k
views
How is data sent back from exit node to me?
I understand how the client sends the data through Tor to the sever. Onion routing
Basically, it selects a set of nodes to form a circuit, say nodeA nodeB nodeC.
It then encrypts the data this way:
...
- 213
10
votes
1
answer
896
views
Do all relays in a circuit encrypt data response from a server?
I know that when sending data from the Tor client to a server it is encrypted and gradually get decrypted on the way there.
This question is about when the server responds. The data must be encrypted ...
- 500
9
votes
5
answers
6k
views
DNSSEC & DNSCrypt over Tor
I want to use DNSSEC and DNSCrypt with Tor. I wonder which configuration is more secure and better?
SOCKS4 + dnscrypt-proxy:
Forward the DNS traffic to a DNS server which I choose. Although the DNS ...
- 239
8
votes
1
answer
9k
views
What encryption algorithms does Tor use?
I am building an application that will be connected over tor, using onion services. I just realized that the file generated by Tor that contains the private key of the hidden site is only RSA 1024bits....
- 215
8
votes
2
answers
1k
views
Why do Tor hidden service operators bother with SSL/TLS encryption?
Tor hidden services have an asymmetric key pair. That seems like it ought to do the job of authenticating the server and securing the connection to the client. When Tor clients reach out to normal ...
- 429
6
votes
2
answers
10k
views
How does Tor obfs4 protocol and PTs work?
Could someone explain how have many countries and corporations managed to differentiate tor traffic from normal traffic, and how exactly the obfs4 protocol (Or any other Pluggable transports) help ...
- 163
6
votes
2
answers
459
views
Custom cryptography for Hidden services
Tor support AES for symmetric cryptography which is fine but for asymmetric cryptography we might prefer something else (I guess now its RSA1024 which is almost broken and proposals are saying to ...
- 61
5
votes
4
answers
7k
views
Is my Tor browser's connection to the Tor routing network encrypted?
I have frequently heard that the endpoints of a Tor connection are unencrypted. This makes no sense to me. If the purpose of Tor was originally to protect dissidents in places like China, then why ...
- 215
5
votes
2
answers
847
views
Does Tor team have plans to implement post-quantum asymmetrical encryption schemes?
There is information that NSA is building quantum computer. Since it would make it possible to crack RSA using Shor's algorithm and we unlikely to know if they will successfully build it and start ...
- 51
5
votes
2
answers
148
views
Tor security if LE/ISP want me really bad
Let's say LE knows who I am ... they already know I am using Tor. Is there a way for them to create a surveillance from my ISP ? You will say Tor is encrypted except exit relay ... but common to the ...
- 51
5
votes
2
answers
399
views
Does Tor encrypt a client's connection to its entry node?
Does Tor encrypt a client's connection to its entry node? How does it do this?
5
votes
1
answer
265
views
Is Tor traffic using the TAP handshake vulnerable to retroactive decryption?
Assume an attacker with a record of Tor traffic between a client and guard has precomputed the 1024-bit Oakley group for Diffie-Hellman used in the TAP protocol. This would allow them to rapidly ...
- 205
4
votes
1
answer
1k
views
Using Tor Proxy through other aplications
Before I proceed, I would like to mention that I understand that Tor browser integrates unique features such as not loading certain html canvases, scripts and a whole bunch of additions to make ...
- 330
4
votes
1
answer
616
views
Where along the path is encryption used?
This question is born out of two questions that I saw coming up.
Is the connection between my computer and the Tor network encrypted?
How does Tor encrypt my traffic before it sends it to the server?...
- 2,614
4
votes
1
answer
286
views
What is the key blinding function used in the hidden service protocol v3?
I've read the rend-spec-v3.txt document which is supposed to be the specification for the v3 hidden service protocol. The document makes several references to a key blinding function that takes in an ...
3
votes
2
answers
360
views
Encrypt traffic between my onion site and exit relays
Is it possible to encrypt all traffic between the last relay and my hidden service site? (I have tried to use an ssl certificate and configure tor like that: HiddenServicePort 443 127.0.0.1:443 but it ...
user1394
3
votes
2
answers
6k
views
HTTPS Everywhere and Tor
I don't see an option to install the HTTPS Everywhere add-on on the Tor Browser. Is the HTTPS not needed on the Tor Browser?
Does Tor encrypt one's data like the HTTPS Everywhere add-on?
I'm new to ...
3
votes
2
answers
1k
views
Sniff Tor onions address from a relay
Currently working on a Tor study, I would have a question regarding the tor hidden services.
I read lot of technicals papers to better understand the tor working on this point, like these good ...
- 131
3
votes
3
answers
368
views
Is all traffic routed through Tor when using TBB?
Consider a computer connected to the Tor network through the Tor Browser Bundle: my question is does the whole internet traffic go through the Tor network like windows update, kaspersky update, vlc ...
- 31
3
votes
1
answer
5k
views
How to completely delete every single trace of Tor from Windows 7 Truecrypt folder
I recently made a Truecrypt AES encrypted folder and installed the Tor Browser Bundle into it.
I was wondering - if I delete the Truecrypt file, is there anything else left on my computer pointing to ...
- 31
3
votes
1
answer
787
views
Is it illegal to use Tor and any encryption product in Russia?
I've read http://www.cryptolaw.org/cls2.htm#ru but also Is there a list of illegal Tor areas?.
So I'm kind of confused, do you guys know anything about this matter?
- 133
3
votes
2
answers
345
views
Tor/Tails Exit Node Connection Encryption
If I use a firewall (IPcop) to allow only HTTPS (443) traffic from the LAN/Tails box/Green NIC, and block all other protocols/traffic, is all traffic from the Exit Node guaranteed to be encrypted?
...
- 31
3
votes
1
answer
227
views
When talking about a hidden service, what does it mean to have an encrypted descriptor? [closed]
What is an "encrypted descriptor?"
What are the pros and cons of using one?
In what version of Tor did they first become available?
Are they automatically used (i.e. default)? If not, how do you ...
- 351
2
votes
1
answer
76
views
How do TOR nodes select the CircID's when creating, or extending, a circuit?
I am coding my own version of TOR and I am trying to set up circuit management. I looked at the TOR spec and it says:
To prevent CircID collisions, when one node sends a CREATE/CREATE2
cell to ...
- 33
2
votes
1
answer
105
views
How does Tor connect to a server while hiding it's ip?
This may be a naive question. When I type in a .onion address I assume that the Tor network is designed to not know the ip of the server, or else law enforcement could easily subpoena Tor saying "...
- 21
2
votes
2
answers
631
views
Tor encryption combination
I'm trying to understand exactly how Tor builds a circuit with encryption. I've read the Tor design literature and have a pretty good grasp on it, however I'm left with the following misunderstanding.
...
- 123
2
votes
2
answers
208
views
Does all bridge users have the same encryption key?
When I connect to a bridge is my encryption key the same as the encryption key for all other users to the same bridge or does the encryption key differ from one user to another for that same bridge?
...
- 21
2
votes
1
answer
185
views
Tor and encryption [duplicate]
Tor [network] encrypts data itself? Or does it only Tor Browser Bundle?
For example, if I use an external client to connect to the Tor network and direct all traffic over Tor and use a different ...
- 121
2
votes
2
answers
110
views
Why Tor node maintains TLS keys with every other Tor node?
I read that Tor proxy maintains key with each Tor node for encryption. Then, why does a Tor node maintains TLS keys with other Tor nodes?
- 61
2
votes
1
answer
2k
views
Multi-VPN hopping Advantages/Disadvantages over Tor
I was told that using Tor and/or a VPN is always a tradeoff of privacy and anonymity. I'm wonder what combination of Tor, VPNs (paid or free), and proxies can help minimize this risk.
For example, if ...
- 131
2
votes
1
answer
992
views
Tor Encryption Standards
I'm looking for up-to-date information on Tor encryption standards, and I can't seem to find anything newer than 2013.
What encryption algorithms does Tor use?
What is the reasoning behind keeping ...
- 1,239
2
votes
1
answer
769
views
How do I encrypt document via right-click menu in Tails?
I don't understand the procedure here. There are some options to choose from to encrypt the file, but then I can't decrypt it because I don't have the password. How do I create a password before I ...
- 175
2
votes
1
answer
71
views
Are get variables encrypted when using Tor?
I'm relatively new to Tor and I was wondering if get variables in the address bar are visible to anyone other than the client and the server.
Example:
randomaddress.onion/login.php?a=47
Would ...
- 123
2
votes
1
answer
113
views
hidden services stability and cryptography
Are HSDirs stable or there is a chance to lose my hidden service if HSdirs shuts down? Also Why there is no way to make a hidden service use ECC instead of RSA?
- 21
1
vote
2
answers
1k
views
How does data go through Tor
I know how Tor works (mostly) but I want to know how data returns through Tor to the user. Example: I send a message from me (Bob) to my friend (Rob) and it goes to, let's say, 3 relays. Now, when I ...
- 11
1
vote
1
answer
747
views
Are all tor exit nodes known?
A normal tor chain is like this :
Client -> Tor Node -> Tor Node -> Tor Exit Node -> Server
Is it possible to have this schema ( two chains ) :
Client -> Tor Node -> Tor Node ->...
- 113
1
vote
1
answer
120
views
Need some details about relays between user and onion sites
Can someone explain some things:
Is all trafic between client and .onion server encrypted 6 times in either direction because of chain:
Client -- [1 node ip -- 2 node ip -- 3 node ip] -- [3 node ...
- 11
1
vote
2
answers
2k
views
What encryption is actually used by tor circuits?
I'm trying to determine what encryption (asymmetric and symmetric) Tor actually uses these days for client circuits. I've read the changelogs and only seem to see nebulous statements about having a ...
1
vote
1
answer
54
views
Rekeying a Tor circuit
Is it possible to rekey a connection between a Tor client and a relay? By rekey I mean perform the usual x25519 key exchange to change the session key on the fly, without tearing the circuit down.
- 205
1
vote
1
answer
527
views
Security: Can an exit node be set up with an encrypted connection to the service?
So far it seems that all exit note-to-server connections are communicated in plaintext.
Is there a way to add something to a Linux or Windows server so that very last hop is encrypted?
Or ...
- 115
1
vote
3
answers
321
views
Can the tor initial client to relay or bridge connection be MITM attacked?
I am not an expert in Wireshark but I was looking at some packets through Wireshark. I noticed that when using a relay that the connection to the directory authority the first few TCP packets such as ...
- 51
1
vote
1
answer
315
views
Tor's encryption confusion and client to first node encryption
From what I've read the onion routing process goes like this:
The client encrypts its traffic to the destination server and sends it to the first node (encrypted);
The fird node encrypts it again and ...
1
vote
1
answer
109
views
TOR and Orbot, possibility to add in dynamic AES encryption structure before data is send out?
I read on the documentation about the security issues on TOR, that it is ok if the website is running on HTTPS, but how about on Orbot and site that is not running on HTTPS?
Even if it is running on ...
- 111
1
vote
0
answers
188
views
Can you have a setup with both VPN over Tor and Tor over VPN
Is it possible to first connect to a VPN (like NordVPN or another VPN which supports VPN over Tor) that is preconfigured for Tor and then connect to a VPN once you are browsing in Tor to encrypt both ...
- 984
1
vote
0
answers
46
views
Is Mix-Kaskading based on the Onion-Routing?
[Note: I'm no native english speaker]
1981 David Chaum first introduced Mix-Networks.
1995 Tor began its life as a research project in the Naval Research Laboratory (NRL), where 1996 three ...
- 31
1
vote
0
answers
544
views
Me->VPN->Tor->Socks5->Tor: Where would a honeypot do the most damage?
Since most vpn's are untrustworthy, and Tor exit nodes can be hosted by malicious entities, im trying to create a trustless chain of anonymization and encryption. I feel as there might be flaws in my ...
- 11
1
vote
0
answers
80
views
tor browser stuck on establishing an encrypted directory connection [duplicate]
i'm trying to connect to tor browser with all my might with my college PC to get some E-books but it's stuck at tor browser stuck on establishing an encrypted directory connection i've tried to use ...
- 11
1
vote
0
answers
28
views
I seem to be blocked, despite custom bridges. How can I get around this error? [duplicate]
3/29/2017 11:51:07 AM.600 [NOTICE] DisableNetwork is set. Tor will not make or accept non-control network connections. Shutting down all existing connections.
3/29/2017 11:51:07 AM.600 [NOTICE] ...
- 11