Skip to main content
13 votes
Accepted

How does Tor obfs4 protocol and PTs work?

The Tor Project Wiki has a good article covering this: A Childs Garden Of Pluggable Transports. The pluggable transport is used as a proxy for tors traffic, it provides an extra layer of ...
cacahuatl's user avatar
  • 11k
5 votes
Accepted

Is Tor completely anonymous?

This setup may, or may not, be completely anonymous, depending on a whole bunch of factors, some extremely subtle. Adding a VPN to Tor basically never improves anonymity, though. Exactly how someone ...
womble's user avatar
  • 562
4 votes
Accepted

Why do Tor hidden service operators bother with SSL/TLS encryption?

It has it's uses, of course! At least: Integrity you know, that your server is responsible for cipher strength, and a potential malicious node in a chain will have some trouble-time due to that fact ...
Alexey Vesnin's user avatar
  • 6,265
2 votes

Tor and encryption

If you are using an external client (such as an onion pi) and then connect to the internet over that client, then yes you can use any browser you want and your traffic will be encrypted and sent over ...
Devin Hurley's user avatar
2 votes
Accepted

Are all tor exit nodes known?

There wouldn't really be any benefit to the attacker sniffing the exit traffic and then routing it over Tor again. Theoretically it would be possible. They can run an exit node, and configure their ...
drew010's user avatar
  • 270
2 votes

Sniff Tor onions address from a relay

I have worked on finding ALL Onion Addresses in TOR service and as I found, there is no clear way of finding all the Onions. Actually in the next generation of Onion Addresses, HSDirs can not see the ...
Mir Saman's user avatar
  • 368
2 votes

HTTPS Everywhere and Tor

Is the HTTPS not needed on the Tor Browser? HTTPS Everywhere is included by default in Tor Browser Does Tor encrypt one's data like the HTTPS Everywhere add-on? Neither of these tools encrypt the ...
cacahuatl's user avatar
  • 11k
2 votes

HTTPS Everywhere and Tor

HTTPS Everywhere is already included in Tor Browser. Its button is next to the Firefox menu button. Is the HTTPS not needed on the Tor Browser? It is recommended to always use HTTPS whenever ...
Anonymous's user avatar
  • 138
2 votes

Does all bridge users have the same encryption key?

Whenever your client makes a connection to a bridge or any other Tor relay it negotiates an individual key. So this key if different from a key which another client uses and also from a key which your ...
Jens Kubieziel's user avatar
  • 8,570
2 votes
Accepted

What is the key blinding function used in the hidden service protocol v3?

I've messaged one of the tor developpers and he's been kind enough to answer. In the rend-spec-v3.txt document, the function is actually specified in appendix A2. And the "HSDirV3" flag ...
mega_tarsus's user avatar
2 votes
Accepted

Encryption by EFS

If you create an encrypted folder and put Tor Browser inside of it: Remote - You will gain no security advantage against a remote attacker: exploits will still work fine. Local Offline - You will ...
cacahuatl's user avatar
  • 11k
2 votes
Accepted

What prevents the first relay from decrypting the rest of the layers in the onion packet?

These "layers" in Tor are actually layers of encryption, where each relay only knows how to remove a single layer. As a client builds a circuit, the client performs a key exchange with each ...
Steve's user avatar
  • 3,142
2 votes

How does Tor connect to a server while hiding it's ip?

The general idea is that the client doesn't connect directly to the onion service. Instead, the client creates an anonymous circuit to a relay, the onion service creates its own anonymous circuit to ...
Steve's user avatar
  • 3,142
2 votes
Accepted

How do TOR nodes select the CircID's when creating, or extending, a circuit?

A circuit ID identifies a circuit on an OR connection. If this OR connection is between two relays, either relay can make new circuits on that OR connection. If a relay wants to create a new circuit, ...
Steve's user avatar
  • 3,142
1 vote

Tails Encrypted Persistent Storage access time

How do I find the last time a Tails Encrypted Persistent Storage was accessed? Here is a way to show the last 10 modified files in your Persistent folder: find . -type f -printf '%TF %TT %p\n' | sort ...
roneo.org's user avatar
  • 156
1 vote

Is there any vulnerabilities when using socks with tails?

It's only on the local loopback interface, the unencrypted connection is made purely locally. It traverses any local network resources encrypted. Note however that anything you send into the Tor ...
cacahuatl's user avatar
  • 11k
1 vote
Accepted

Can the Last Node See My Private Data?

You should always use a secure connection (HTTPS) when visiting websites as it prevents this type of attack, regardless of if you're using Tor or not. Facebook (along with many other websites) use ...
Steve's user avatar
  • 3,142
1 vote

Is it possible to find encryption key in Tor Browser?

If you're doing something like a presentation, paper, book, etc, it's best to 1. Ask the developers and contributors directly https://www.torproject.org/contact/ and 2. Read the documentation for ...
elmerjfudd's user avatar
  • 2,284
1 vote

Need some details about relays between user and onion sites

I believe the traffic is encrypted 8 times (not including the TLS link crypto): 3 times along the client's circuit, 4 times along the onion service's circuit, and once more for the end-to-end ...
Steve's user avatar
  • 3,142
1 vote

Specifications for Tor security in the transmision of Data

The tor-spec.txt you linked to is a more-or-less up-to-date description of how Tor works. There may be minor divergences between that document and the running code (which makes the codebase the ...
womble's user avatar
  • 562
1 vote

What encryption is actually used by tor circuits?

CELLs are encrypted using a stream cipher, presently AES-128-CTR with a zeroed IV. This will be upgraded to an SPRP in the future to defend against tagging attacks. 0.3. Ciphers These are the ...
cypherfox's user avatar
  • 166
1 vote
Accepted

Is Tor traffic using the TAP handshake vulnerable to retroactive decryption?

To answer my own question after rereading the spec, it is not. There are two things that make it difficult to attack broken DH groups in the old TAP protocol: the RSA hybrid handshake, and link ...
forest's user avatar
  • 225
1 vote

Differences between Onion Routing (Public Key) and Tor-Circuit (Session Key)

Your understanding is basically correct. The first create cell is indeed encrypted with 1 layer, the second 2 layers, the third 3 layers, etc. However, Tor takes a different approach when encrypting ...
nobody's user avatar
  • 725
1 vote

Have global adversaries ever been able to decrypt hard drives storing .onion material encrypted by Veracrypt?

these matters are totally unrelated: Tor is a Network layer, sort of speaking, and - HDD security - is a server-layer or service-layer, regardless of the network the Server is exposed to: Internet/...
Alexey Vesnin's user avatar
  • 6,265
1 vote

ultimate encryption and protection of sensitive data

DonĀ“t exists a "ultimate encryption tool" but with right tools e a little discipline is possible protect your files with a good encryption cipher and software, my recommendation is Veracrypt with AES-...
Kordycepts's user avatar
1 vote

ultimate encryption and protection of sensitive data

There is unfortunately no "ultimate encryption tool". However there are some tools, that if used correctly provide reasonable security. These tools listed here are well known to provide strong enough ...
bn4t's user avatar
  • 446
1 vote
Accepted

Rekeying a Tor circuit

Not possible yet. Proposal 262 is still open and there is no other rekey mechanism.
nobody's user avatar
  • 725
1 vote

Security: Can an exit node be set up with an encrypted connection to the service?

So far it seems that all exit note-to-server connections are communicated in plaintext. They're communicated as they're sent, I.E. Tor doesn't add or remove any encryption that was already applied to ...
cacahuatl's user avatar
  • 11k
1 vote

typical way to run tails virtualized on ubuntu?

Generally the virtualisation of choice is VirtualBox, see: Tails VirtualBox documentation However, also heed the warnings. Tails do not recommend using VirtualBox for day-to-day use. It's there ...
cacahuatl's user avatar
  • 11k
1 vote

Tor encryption combination

Tor uses RSA keys as identity keys (except for .onion services, for the time being). For exchanging secret key material Tor uses an ephemeral key exchange method, either TAP (old, DHE) or nTor (new, ...
cacahuatl's user avatar
  • 11k

Only top scored, non community-wiki answers of a minimum length are eligible