Skip to main content
7 votes
Accepted

What happens with TCP connections on SIGNAL NEWNYM?

Requesting a NEWNYM over the control port will tell Tor to consider the currently used circuits "dirty" (this normally happens after 10 minutes, with a few exceptions), at this point it will no longer ...
cacahuatl's user avatar
  • 11k
7 votes

How to change the entry node?

To actually answer your question, since nobody did that until now: shutdown Tor delete /tor/state file restart Tor In case you use TorBrowser on Windows the path is ...\Tor Browser\Browser\...
user136036's user avatar
5 votes
Accepted

Does tor browser open a new circuit for each unique website?

In Tor Browser, every domain gets it's own circuit. The Design and Implementation of the Tor Browser document has some more details on it. Frankly, you get an own circuit for every domain shown in ...
Peter Gerber's user avatar
  • 1,342
4 votes

WARN: Failed to find node for hop 0 of our path. Discarding this circuit

Tor needs an accurate clock to work correctly. Please sync your time with an NTP (Network Time Protocol) server. Debian family On Debian based machines use package ntpdate. sudo ntpdate -v pool....
NeverMine17's user avatar
3 votes

Is it possible to make a program that will use different circuit for each request? Even if the requests are parallel?

I don't think so, at least natively. Looking at the manual for Tor, it doesn't look like there is any kind of functionality built in that would allow you to do that. Theoretically, you could do ...
elmerjfudd's user avatar
  • 2,284
2 votes

Implementing the tor protocol, based on tor sources and a few clarifications

Step 7 is a TLS socket, not just raw TCP. "I created the onion hidden service, and i want to try make a http request to it", there are additional steps required for onion services which you'll know ...
cacahuatl's user avatar
  • 11k
2 votes

Does Tor choose nodes from nearby countries to create circuits?

No, Tor chooses nodes randomly. There are a lot of Tor nodes in Europe. So, you'll often see that your connections are using European nodes. (So does everybody else.)
Greg Hewgill's user avatar
2 votes

torsocks over torsocks? (by accident)

Torsocks sets the LD_PRELOAD environment variable to intercept a few system calls. It does not matter if you use it recursively: # at first $LD_PRELOAD is unset $ echo $LD_PRELOAD # when we start ...
Peter Gerber's user avatar
  • 1,342
2 votes

Why are entry nodes allowed to know that they are entry nodes?

The network doesn't make the distinction of entry relays. Any Tor client is allowed to use any relay for any hop of the circuit (except with restrictions on the exit relay). To limit the types of ...
Steve's user avatar
  • 3,142
2 votes
Accepted

Why can't a modified guard node compromise the network?

These types of attacks aren't possible in Tor because of Tor's ntor handshake and Tor's authenticated directory documents generated by the directory authorities. Tor clients download a trusted (and ...
Steve's user avatar
  • 3,142
2 votes

How TBB commands tor to use a "New Circuit for this Site"?

Short: it does not send a command. It creates new connection to SocksPort, using different credentials, and sends new requests to domain through it. Details: Tor do isolates streams to different ...
verb0's user avatar
  • 31
2 votes
Accepted

Determining circuit tor client is using

Tor clients keep a pool of circuits and may use several circuits simultaneously for streams depending on factors such as exit policies, stream isolation, etc. So there is generally not a single "...
Steve's user avatar
  • 3,142
2 votes
Accepted

understanding tor cell structure

In simple words: CircID serves the purpose to separate the circuits = onion 3-node chains. As it described in design - I'm citing: The header includes a circuit identifier (circID) that specifies ...
Alexey Vesnin's user avatar
  • 6,265
2 votes

Tor safe when taking future in to account?

Quantum threat is a real thing, especially in context of Shor's algorithm for a possible attack vector, for example. But there're a lot of quantum-resistant things like LWE and some EC's, so - using a ...
Alexey Vesnin's user avatar
  • 6,265
2 votes
Accepted

How do TOR nodes select the CircID's when creating, or extending, a circuit?

A circuit ID identifies a circuit on an OR connection. If this OR connection is between two relays, either relay can make new circuits on that OR connection. If a relay wants to create a new circuit, ...
Steve's user avatar
  • 3,142
1 vote
Accepted

Does Tor daemon build multiple circuit when multiple clients connects to it?

If you want to keep steams isolated for each applications, you should connect to Tor's SOCKS proxy using a different username for each application. Otherwise Tor may use the same circuit for streams ...
Steve's user avatar
  • 3,142
1 vote

Has Tor Browser stopped displaying circuits?

Click on the letter "i" icon on your address bar:
elmerjfudd's user avatar
  • 2,284
1 vote

Does Tor choose nodes from nearby countries to create circuits?

As Greg Hewgill was saying: No, Tor chooses nodes randomly. But you can change it easily. Find where your torrc file is located. Add a line like that ExitNodes {**} StrictNodes 1. Where ** use ...
NeverMine17's user avatar
1 vote
Accepted

OR Forward and reverse keys

One key exchange is performed, the shared secret is streched using a Key Derivation Function (KDF). From tor-spec: 5.1.3. The "TAP" handshake .... Once both parties have g^xy, they derive their ...
cacahuatl's user avatar
  • 11k
1 vote

Tor encryption combination

Tor uses RSA keys as identity keys (except for .onion services, for the time being). For exchanging secret key material Tor uses an ephemeral key exchange method, either TAP (old, DHE) or nTor (new, ...
cacahuatl's user avatar
  • 11k
1 vote

Tor encryption combination

Here is the design document for tor's next generation onion service. The paper that you linked to is outdated. The next generation onion service is expected to launch with 0.3.2 around December 15, ...
anon's user avatar
  • 11
1 vote

displaying streams from onion service to rendezvous point

After reading control-spec.txt, I understand. I think. It's just that only client-side circuits have streams. Onion-side circuits simply handle cells. At lines 2023-2035, for example: The "...
dzgray's user avatar
  • 21
1 vote

The problem about stem's new_circuit and extend_circuit?

Yes, you will then have two circuits, and it will take some time for the previous circuit to be automatically cleaned up. A Stem controller does have a close_circuit(id) function you can use to close ...
Steve's user avatar
  • 3,142
1 vote
Accepted

Share circuit on localhost:9050 to the rest of the internal network

You have to use SocksPort option to specify not just the port, but IP+port explicitly. You will need to have two lines: one for localhost, one for 192.168.1.101 so it will be available for the ...
Alexey Vesnin's user avatar
  • 6,265
1 vote

Differences between Onion Routing (Public Key) and Tor-Circuit (Session Key)

Your understanding is basically correct. The first create cell is indeed encrypted with 1 layer, the second 2 layers, the third 3 layers, etc. However, Tor takes a different approach when encrypting ...
nobody's user avatar
  • 725
1 vote

Tor 8 no longer has Green Onion with option to change circuitcharley

Circuit information is now shown within individual tabs by clicking the "i" object at the far left of the address or URL bar.
forsaken's user avatar
1 vote
Accepted

customizing tor browser bundle

There is a project named: torflow and one of the plugins named OP-addon is a good solution for tor path generation and circuit handling with lots of measurements and analyzing goodies. from the ...
pouya's user avatar
  • 31
1 vote
Accepted

Why Tor doesn't support UDP?

Well, DNS queries are made via TCP - Tor does not use UDP at all, strictly speaking. The resolving query from the exit node - yes, it can be made through UDP protocol, but it's totally up to the ...
Alexey Vesnin's user avatar
  • 6,265
1 vote
Accepted

Signal NEWNYM vs Stream isolation

Can the server somehow learn the connection between Alice and Bob in 1. 2. and 3. alternative? Sort answer: 1. No. 2. Yes. 3. Yes. Long answer: A NEWNYM signal, among some administrative code, ...
nopara73's user avatar
  • 173
1 vote
Accepted

would torify use the same circuit as tbb when both are in operation?

No, Tor Browser isolates it's circuits by the first party domain. e.g. foo.com, bar.foo.com and qux.bar.foo.com will all be isolated on their own circuit for foo.com. While example.com, bar.example....
cacahuatl's user avatar
  • 11k

Only top scored, non community-wiki answers of a minimum length are eligible