Questions tagged [protocol]
Tor has developed several internal protocols, like the rendezvous specification, directory specification etc. This tag is for questions which deal with protocols Tor uses.
80
questions
0
votes
1
answer
48
views
Can `SUCCEEDED` be the last message for a Tor stream reported by Tor control?
I've been trying to fully understand what is happening with a single Tor stream. I can see in my logs Tor control events:
650 STREAM 97 NEW 0 my.website.com:443 SOURCE_ADDR=127.0.0.1:48828 PURPOSE=...
- 53
0
votes
1
answer
39
views
Gap - Counting number of packages to determine client?
I read a lot about onion routing and I am confused about the following fact on Wikipedia:
Only the final node, the "exit node", is able to determine its own location in the chain.
In my eyes ...
- 5
0
votes
1
answer
283
views
understanding tor cell structure
I am looking to create my own version of TOR, and to do that I need to understand the way that relay, directory servers and clients communicate. but after reading Tor: The Second-Generation Onion ...
0
votes
2
answers
78
views
Could there be a way to make the Tor network faster by paying money?
Suppose someone has a lot of monero (or some other sufficiently private currency) and they want to have highest possible data throughput while maintaining anonymity.
Has anyone researched protocols ...
- 103
0
votes
1
answer
98
views
Tor protocol server-side
I am trying to understand the protocol used when a hidden service establishes itself on the Tor network. I read multiple documentations about it, but its not all clear to me.
If I understand correctly,...
0
votes
1
answer
53
views
API to get Tor SSL certificates
Some onion websites, like facebook, have TLS implemented on top of Tor. Is it possible to fetch the certificates and TLS versions of these connections using something like torpy?
0
votes
0
answers
26
views
Tor client fails when making bulk requests in a short period of time
I have a list of more than 16,000 thousand up to date active onion domains and I'm trying to download each page with parallel requests through python with tor client as the proxy. All requests take ...
- 101
0
votes
1
answer
55
views
What would be an example of a routing protocol that preserves anonymity even if the Guard Node and Exit Node are both compromised
I was reading a comment discussion on the answer to this question
Where it's basically revealed that large numbers of middle nodes do not provide any additional security if the Guard Node and Exit ...
- 103
1
vote
1
answer
758
views
How TBB commands tor to use a "New Circuit for this Site"?
Tor Browser Bundle has "New Circuit for this Site" button (or Ctrl/Cmd + Shift + L shortcut), doing what it says: changing circuit for specific domain.
The question is: how TBB do it? And ...
- 31
0
votes
1
answer
256
views
How to verify that signaling NEWNYM worked properly?
Currently the only way I know if signaling NEWNYM worked is if I didn't receive a message stating that I've been rate limited.
Is there a way to send something via GETINFO both pre/post signaling for ...
- 101
0
votes
2
answers
840
views
What is the StaleDesc (state descriptor) flag and how do I update my state descriptor?
My week old relay node got this flag today, I couldn't find any explanations about it figured I'd ask here. All I found out was that it was introduced in tor 4.x
0
votes
1
answer
149
views
Details about Tor's Packaging Window and Delivery Window
I have learned Tor's congestion control policy from the paper: Tor：The Second-Generation Onion Router. But I don't understand Tor's Packaging Window and Delivery Window.
The paper said: "The ...
- 1
0
votes
3
answers
106
views
Hardening the network on the host
I’m trying to harden my host to not leak anything to clearnet.
I have an idea to get EntryNodes IP addresses from TorProject site, add them to iptables as allowed, and prohibit other traffic.
...
- 1
0
votes
1
answer
140
views
Hidden Services can intros correlate IP with .onion?
I was looking through allot of the details with the hidden services. One answer was done very well and explained allot, which I have linked below. I wasn't sure on exactly how the intro can correlate ...
- 3
0
votes
1
answer
633
views
SOCKS5 protocol: "binding" on a hidden service address
Problem
Accepting incoming connections over Tor through the Tor proxy. I'm developing a socks client in rust for tokio tcp streams. Like https://crates.io/crates/tokio-socks but with upgraded ...
- 101
1
vote
0
answers
54
views
Why is the pub-key of diffie hellmann from Alice (OP) to Bob (OR) encrypted?
For building a circuit Alice contacts Bob (OR) and send her pub diffie-hellmann key encrypted with Bobs pub key. Bob sends his public-diffie-hellmann key and the session key hashed ("only" TLS ...
- 21
5
votes
1
answer
264
views
Is Tor traffic using the TAP handshake vulnerable to retroactive decryption?
Assume an attacker with a record of Tor traffic between a client and guard has precomputed the 1024-bit Oakley group for Diffie-Hellman used in the TAP protocol. This would allow them to rapidly ...
- 205
1
vote
0
answers
172
views
SENDME cells, window threshold and last data cells
I'm writing a client in Python and trying to download the consensus.
I managed to establish a single-hop connection to an authority server, send the HTTP request, and receive almost all the consensus ...
- 11
2
votes
0
answers
610
views
Detailed Understanding of Tor's connection establishment
I am really new to Onion Routing and Tor and I have just started reading about the topic on Wikipedia and the Tor Protocol Specification. Most of the concepts are explained very well but I have ...
- 21
1
vote
1
answer
54
views
Rekeying a Tor circuit
Is it possible to rekey a connection between a Tor client and a relay? By rekey I mean perform the usual x25519 key exchange to change the session key on the fly, without tearing the circuit down.
- 205
0
votes
1
answer
105
views
Missing History
Most of us know of Tor V2 addresses (16 characters) and Tor V3 addresses (56 characters).
What about Tor V1 addresses?
What was its specification or why wasn't it used much or at all?
Example:
...
- 103
1
vote
2
answers
335
views
Replicating onion address algorithim?
By all sources I can find, onion / hidden service "domains" are generated by this process:
Generate a 1024-bit RSA keypair
Take the SHA-1 of the public key
Base32 encode the first 80 bytes of the ...
- 11
1
vote
1
answer
109
views
Clearing the state of rendezvous client provides privacy improvement?
Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...
- 173
1
vote
1
answer
335
views
Clearing the client side DNS cache provides privacy improvement?
Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...
- 173
3
votes
1
answer
811
views
Signal NEWNYM vs Stream isolation
Resources. This answer explains well what happens at NEWNYM request, and I also dig into the code, yet my lack of knowledge on low level networking prevents me to make a proper design decision if ...
- 173
0
votes
1
answer
2k
views
Tor Network Protocols
I have created a private Tor network for testing purposes, as well as to verify the fundamental operation of Onion Routing. I am utilizing Wireshark to capture the data flow between relays across the ...
- 3
1
vote
2
answers
118
views
How Tor handles nodes designed to burn it
How does tor handles nodes designed just to screw it.
The way i understand it entry node connects to node 2. which connects to node 3.(exit nodes) now all the traffic is encrypted and encryption i ...
0
votes
1
answer
68
views
How to suggest ideas to the Tor project
I would like to submit one idea to the Tor project, that I found interesting and not implemented yet.
Where can I submit this idea ?
- 3
0
votes
2
answers
839
views
I am a newbie to Tor and don't understand coding. I need help with this error log on Tor [duplicate]
2/7/2017 12:19:59 PM.500 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop
2/7/2017 12:25:07 PM.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150
2/7/2017 12:25:...
1
vote
2
answers
666
views
Does Tor work the same when on HTTP-sites and HTTPS-sites?
The question almost says it all. Are their some disadvantages when being on whether HTTP or HTTPS while using tor with the purpose of having anonymous traffic or is it all working equally optimal?
...
- 111
1
vote
1
answer
227
views
Tor router validation
my question is how does Tor validate routers? There are some specifications that mention that there are "validated" nodes, which have a "valid" flag (e.g. https://gitweb.torproject.org/torspec.git/...
- 11
1
vote
0
answers
422
views
Tor Circuit failed to be created: destroyed
Okay, so I'm running a few experiments on Tor for a course project. I keep on changing different relays to see the effects on response time.
But on some of the circuits, I keep on getting this ...
- 111
2
votes
1
answer
669
views
How is Path Selection done in Tor?
Can anybody explain how path selection is done in Tor because the man page fail to specify in detail on how certain probabilities are calculated etc.
In the man page there are a set of equations:
...
- 135
2
votes
1
answer
92
views
What are the immutable characteristics that uniquely identify a relay?
In other words, what are the system "ingredients" that are not allowed to change without triggering attribution of a new fingerprint and the restart of the "ramp up" / flagging process?
Please ...
- 323
1
vote
1
answer
747
views
Are all tor exit nodes known?
A normal tor chain is like this :
Client -> Tor Node -> Tor Node -> Tor Exit Node -> Server
Is it possible to have this schema ( two chains ) :
Client -> Tor Node -> Tor Node ->...
- 113
2
votes
1
answer
363
views
How does handshake with directory server work?
How does handshake with directory server work in the standard setup? How does it work when you configure Tor Browser to use a custom bridge?
- 61
4
votes
2
answers
4k
views
What happens with TCP connections on SIGNAL NEWNYM?
When I send the NEWNYM command tor will build new circuits. I'm wondering what happens with open TCP connections. Will tor wait a certain timeout to give them a chance to close, or do I break those ...
- 143
1
vote
1
answer
113
views
Update on Tor design paper
@Richard Horrocks gave a pointer to the updated Tor design document of 2014.
Are there any new updates available publicly?
- 387
2
votes
2
answers
177
views
Does Tor add encryption at the TCP protocol level?
Just wondering if http://www.tcpcrypt.org/ would be useful to add?
Also is there any work being done to replace/add encryption at the ODI level?
- 37
2
votes
1
answer
199
views
Is ADD_ONION control command implemented in the latest stable release?
control-spec.txt mentions an ADD_ONION command to create ephemeral hidden services. Does this exist in the latest stable release of Tor or Tor Browser Bundle?
1
vote
1
answer
3k
views
TOR and Obfsproxy packet size
I have some questions about TOR and Obfsproxy packet size.
TOR cell size is 512 bytes but most TOR packets have size of 586 bytes.
My question is that why there is such difference in size (74 bytes ...
- 241
2
votes
1
answer
1k
views
Allowing socks request for anonymous connections to a private address?
I want to ask you how I can allow socks request for anonymous connections. I'm using it with metasploit and socat but its always reject connection. So every time I want to exploit an OS with ...
- 21
4
votes
2
answers
6k
views
WebSocket over Tor
I've been researching for many hours, but haven't found a definite answer.
Is it possible for a client to connect to a hidden service with websocket?
If so, how can I learn more? If not, is there an ...
user9675
2
votes
1
answer
520
views
Usage and purpose of variable-length cells?
The Tor protocol version 1 uses 512-byte cells to obfuscate traffic patterns:
Traffic flowing down the circuit is sent in fixed-size ``cells'',
which are unwrapped by a symmetric key at each node ...
- 387
0
votes
0
answers
55
views
How to run multiple tor browser 5.0.2 how it is different 4.5? [duplicate]
how to run multiple tor browser 5.0.2
Pleace help me thak you for ancwer
2
votes
1
answer
303
views
Can HORNET be implemented into Tor?
A while ago a group of researchers presented a Tor like network called HORNET; it is, reportedly, "a better, faster Tor". Do you know if the improvements proposed in the paper could be incrementally ...
- 123
4
votes
1
answer
963
views
How does TOR extend circuit to a third node?
I am reading the Tor: The Second-Generation Onion Router article and my question is that how TOR extends circuit to a third node?
On page 7 of the article,left column, it says:
To extend the ...
- 241
1
vote
1
answer
148
views
Add SocksPort using Tor Controller?
Can I add additional SOCKSPORT entries using Tor Controller? I looked through control-spec.txt and could only find examples of reading the current SOCKSPORT using GETCONF.
- 131
4
votes
3
answers
3k
views
Can tor nodes (entry, exit, others) store IPs?
I'm a new Tor user. And I want to ensure several questions.
Can "entry point" router store my IP?
Can "middle relay" store "entry point" IP?
Can "exit point" router store "middle relay" IP?
I think ...
- 41
1
vote
1
answer
1k
views
How does tor find the nodes?
How does tor find the nodes? In other words, how does tor know which ip addresses are tor nodes and which aren't?
- 11