Questions tagged [protocol]
Tor has developed several internal protocols, like the rendezvous specification, directory specification etc. This tag is for questions which deal with protocols Tor uses.
81
questions
0
votes
1
answer
18
views
How do you calculate a response for a create_fast handshake?
I'm reading through the specification and looking through the code (a slightly modified torpy), and I can't figure out what the handshake_response should be.
According to https://spec.torproject.org/...
- 139
53
votes
3
answers
74k
views
How does Tor route DNS requests?
Tor can only handle TCP connections, but DNS is a UDP protocol. How does Tor route DNS requests over its TCP based network? Why can the same approach not be used to route all UDP traffic over Tor?
- 103
0
votes
1
answer
50
views
Can `SUCCEEDED` be the last message for a Tor stream reported by Tor control?
I've been trying to fully understand what is happening with a single Tor stream. I can see in my logs Tor control events:
650 STREAM 97 NEW 0 my.website.com:443 SOURCE_ADDR=127.0.0.1:48828 PURPOSE=...
- 6,208
0
votes
1
answer
326
views
How to verify that signaling NEWNYM worked properly?
Currently the only way I know if signaling NEWNYM worked is if I didn't receive a message stating that I've been rate limited.
Is there a way to send something via GETINFO both pre/post signaling for ...
CommunityBot
- 1
0
votes
1
answer
160
views
Details about Tor's Packaging Window and Delivery Window
I have learned Tor's congestion control policy from the paper: Tor：The Second-Generation Onion Router. But I don't understand Tor's Packaging Window and Delivery Window.
The paper said: "The ...
CommunityBot
- 1
0
votes
1
answer
53
views
API to get Tor SSL certificates
Some onion websites, like facebook, have TLS implemented on top of Tor. Is it possible to fetch the certificates and TLS versions of these connections using something like torpy?
CommunityBot
- 1
0
votes
1
answer
41
views
Gap - Counting number of packages to determine client?
I read a lot about onion routing and I am confused about the following fact on Wikipedia:
Only the final node, the "exit node", is able to determine its own location in the chain.
In my eyes ...
- 3,132
0
votes
1
answer
352
views
understanding tor cell structure
I am looking to create my own version of TOR, and to do that I need to understand the way that relay, directory servers and clients communicate. but after reading Tor: The Second-Generation Onion ...
- 6,208
0
votes
2
answers
81
views
Could there be a way to make the Tor network faster by paying money?
Suppose someone has a lot of monero (or some other sufficiently private currency) and they want to have highest possible data throughput while maintaining anonymity.
Has anyone researched protocols ...
- 326
0
votes
1
answer
109
views
Tor protocol server-side
I am trying to understand the protocol used when a hidden service establishes itself on the Tor network. I read multiple documentations about it, but its not all clear to me.
If I understand correctly,...
- 16
1
vote
1
answer
896
views
How TBB commands tor to use a "New Circuit for this Site"?
Tor Browser Bundle has "New Circuit for this Site" button (or Ctrl/Cmd + Shift + L shortcut), doing what it says: changing circuit for specific domain.
The question is: how TBB do it? And ...
- 1
0
votes
0
answers
28
views
Tor client fails when making bulk requests in a short period of time
I have a list of more than 16,000 thousand up to date active onion domains and I'm trying to download each page with parallel requests through python with tor client as the proxy. All requests take ...
- 101
0
votes
2
answers
1k
views
What is the StaleDesc (state descriptor) flag and how do I update my state descriptor?
My week old relay node got this flag today, I couldn't find any explanations about it figured I'd ask here. All I found out was that it was introduced in tor 4.x
- 421
0
votes
1
answer
58
views
What would be an example of a routing protocol that preserves anonymity even if the Guard Node and Exit Node are both compromised
I was reading a comment discussion on the answer to this question
Where it's basically revealed that large numbers of middle nodes do not provide any additional security if the Guard Node and Exit ...
- 3,132
0
votes
1
answer
109
views
Missing History
Most of us know of Tor V2 addresses (16 characters) and Tor V3 addresses (56 characters).
What about Tor V1 addresses?
What was its specification or why wasn't it used much or at all?
Example:
...
CommunityBot
- 1
0
votes
3
answers
111
views
Hardening the network on the host
I’m trying to harden my host to not leak anything to clearnet.
I have an idea to get EntryNodes IP addresses from TorProject site, add them to iptables as allowed, and prohibit other traffic.
...
- 6,208
0
votes
1
answer
150
views
Hidden Services can intros correlate IP with .onion?
I was looking through allot of the details with the hidden services. One answer was done very well and explained allot, which I have linked below. I wasn't sure on exactly how the intro can correlate ...
- 3,132
0
votes
1
answer
675
views
SOCKS5 protocol: "binding" on a hidden service address
Problem
Accepting incoming connections over Tor through the Tor proxy. I'm developing a socks client in rust for tokio tcp streams. Like https://crates.io/crates/tokio-socks but with upgraded ...
- 101
4
votes
3
answers
3k
views
Can tor nodes (entry, exit, others) store IPs?
I'm a new Tor user. And I want to ensure several questions.
Can "entry point" router store my IP?
Can "middle relay" store "entry point" IP?
Can "exit point" router store "middle relay" IP?
I think ...
- 179
2
votes
1
answer
92
views
What are the immutable characteristics that uniquely identify a relay?
In other words, what are the system "ingredients" that are not allowed to change without triggering attribution of a new fingerprint and the restart of the "ramp up" / flagging process?
Please ...
- 179
6
votes
1
answer
276
views
Is Tor traffic using the TAP handshake vulnerable to retroactive decryption?
Assume an attacker with a record of Tor traffic between a client and guard has precomputed the 1024-bit Oakley group for Diffie-Hellman used in the TAP protocol. This would allow them to rapidly ...
- 225
1
vote
0
answers
54
views
Why is the pub-key of diffie hellmann from Alice (OP) to Bob (OR) encrypted?
For building a circuit Alice contacts Bob (OR) and send her pub diffie-hellmann key encrypted with Bobs pub key. Bob sends his public-diffie-hellmann key and the session key hashed ("only" TLS ...
- 31
1
vote
0
answers
182
views
SENDME cells, window threshold and last data cells
I'm writing a client in Python and trying to download the consensus.
I managed to establish a single-hop connection to an authority server, send the HTTP request, and receive almost all the consensus ...
- 11
1
vote
1
answer
55
views
Rekeying a Tor circuit
Is it possible to rekey a connection between a Tor client and a relay? By rekey I mean perform the usual x25519 key exchange to change the session key on the fly, without tearing the circuit down.
- 725
2
votes
0
answers
639
views
Detailed Understanding of Tor's connection establishment
I am really new to Onion Routing and Tor and I have just started reading about the topic on Wikipedia and the Tor Protocol Specification. Most of the concepts are explained very well but I have ...
- 21
80
votes
1
answer
44k
views
How do onion addresses exactly work?
I understand that the .onion address is a public key of sorts, but not much more than that (I can vaguely guess, though).
When nobody knows the IP of the .onion address, how do requests reach it? Are ...
1
vote
2
answers
342
views
Replicating onion address algorithim?
By all sources I can find, onion / hidden service "domains" are generated by this process:
Generate a 1024-bit RSA keypair
Take the SHA-1 of the public key
Base32 encode the first 80 bytes of the ...
CommunityBot
- 1
3
votes
1
answer
849
views
Signal NEWNYM vs Stream isolation
Resources. This answer explains well what happens at NEWNYM request, and I also dig into the code, yet my lack of knowledge on low level networking prevents me to make a proper design decision if ...
- 173
1
vote
1
answer
122
views
Clearing the state of rendezvous client provides privacy improvement?
Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...
- 11k
1
vote
1
answer
354
views
Clearing the client side DNS cache provides privacy improvement?
Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...
- 173
2
votes
3
answers
2k
views
How to change Tor exit node when using multiple SocksPorts?
I'm using Tor with multiple SocksPorts. Does anyone know how I can programmatically change the exit for each SocksPort separately? The code below changes the exit nodes for all the SocksPorts -- I ...
- 111
0
votes
1
answer
2k
views
Tor Network Protocols
I have created a private Tor network for testing purposes, as well as to verify the fundamental operation of Onion Routing. I am utilizing Wireshark to capture the data flow between relays across the ...
- 3
3
votes
1
answer
3k
views
How does it work - "Hidden services"?
Could somebody describe to me, like for Nooo-oo-ob, from the Start and to the complete End.
My questions are:
I've setup HS.
My Tor client connect to the rendezvous. Is it populate full onion ...
- 346
1
vote
2
answers
118
views
How Tor handles nodes designed to burn it
How does tor handles nodes designed just to screw it.
The way i understand it entry node connects to node 2. which connects to node 3.(exit nodes) now all the traffic is encrypted and encryption i ...
- 11k
0
votes
2
answers
839
views
I am a newbie to Tor and don't understand coding. I need help with this error log on Tor [duplicate]
2/7/2017 12:19:59 PM.500 [NOTICE] Bootstrapped 85%: Finishing handshake with first hop
2/7/2017 12:25:07 PM.900 [NOTICE] Closing no-longer-configured Socks listener on 127.0.0.1:9150
2/7/2017 12:25:...
CommunityBot
- 1
26
votes
1
answer
25k
views
.onion Domains DNS lookup
How does Tor resolve .onion Domains? Are there also some central DNS servers in the Tor network that store these records? Is there a chance that two hidden services generate the same domain name?
CommunityBot
- 1
0
votes
1
answer
70
views
How to suggest ideas to the Tor project
I would like to submit one idea to the Tor project, that I found interesting and not implemented yet.
Where can I submit this idea ?
- 8,570
1
vote
1
answer
113
views
Update on Tor design paper
@Richard Horrocks gave a pointer to the updated Tor design document of 2014.
Are there any new updates available publicly?
CommunityBot
- 1
1
vote
2
answers
745
views
Does Tor work the same when on HTTP-sites and HTTPS-sites?
The question almost says it all. Are their some disadvantages when being on whether HTTP or HTTPS while using tor with the purpose of having anonymous traffic or is it all working equally optimal?
...
- 6,208
21
votes
1
answer
11k
views
Is it possible to look up the public key for a .onion-address?
I know .onion addresses are a (partial) hash of a descriptor which contains a public RSA key, so I was wondering: it is possible to see the public key that is found when connecting to a .onion hidden ...
- 105
2
votes
2
answers
180
views
Does Tor add encryption at the TCP protocol level?
Just wondering if http://www.tcpcrypt.org/ would be useful to add?
Also is there any work being done to replace/add encryption at the ODI level?
- 8,570
6
votes
3
answers
5k
views
Where is the Tor API documentation?
I want to have a program I'm writing interact with the Internet exclusively through Tor. After perusing the Tor project's documentation it appears that they do not specify the API anywhere i.e. how a ...
- 324
4
votes
2
answers
4k
views
What happens with TCP connections on SIGNAL NEWNYM?
When I send the NEWNYM command tor will build new circuits. I'm wondering what happens with open TCP connections. Will tor wait a certain timeout to give them a chance to close, or do I break those ...
- 11k
1
vote
1
answer
233
views
Tor router validation
my question is how does Tor validate routers? There are some specifications that mention that there are "validated" nodes, which have a "valid" flag (e.g. https://gitweb.torproject.org/torspec.git/...
2
votes
1
answer
200
views
Is ADD_ONION control command implemented in the latest stable release?
control-spec.txt mentions an ADD_ONION command to create ephemeral hidden services. Does this exist in the latest stable release of Tor or Tor Browser Bundle?
CommunityBot
- 1
1
vote
0
answers
427
views
Tor Circuit failed to be created: destroyed
Okay, so I'm running a few experiments on Tor for a course project. I keep on changing different relays to see the effects on response time.
But on some of the circuits, I keep on getting this ...
- 8,570
2
votes
1
answer
717
views
How is Path Selection done in Tor?
Can anybody explain how path selection is done in Tor because the man page fail to specify in detail on how certain probabilities are calculated etc.
In the man page there are a set of equations:
...
- 3,135
1
vote
1
answer
763
views
Are all tor exit nodes known?
A normal tor chain is like this :
Client -> Tor Node -> Tor Node -> Tor Exit Node -> Server
Is it possible to have this schema ( two chains ) :
Client -> Tor Node -> Tor Node ->...
- 270
2
votes
1
answer
368
views
How does handshake with directory server work?
How does handshake with directory server work in the standard setup? How does it work when you configure Tor Browser to use a custom bridge?
- 6,208
3
votes
1
answer
84
views
Path selection constraints not working as expected
From Section 2.2 of the path specification
We do not choose any router in the same family as another in the same
path. (Two routers are in the same family if each one lists the other
in ...
CommunityBot
- 1