3 votes

Change the private key for my .onion domain

Your host name is calculated from your private key. If you change your private key, you will get a new host name.
  • 3,745
2 votes
Accepted

Can't start relay - certificate error

Several issues were present: 1) Firewall was too restrictive preventing connections to a necessary port (53, for local dns resolving) 2) Torrc misconfiguration. Not entirely sure which option. 3) ...
2 votes
Accepted

Is it a problem to frequently change a Tor relay's fingerprint

The relay would be considered 'new' each time. It would never gain the 'stable' flag or gain much consensus weight. This would neither hurt nor help the network.
  • 3,745
2 votes
Accepted

When using custom keys, what permissions do "/var/lib/tor/hidden_service/" need?

I don't know if it is strictly necessary, for me it works with these permissions: 700 (or drwx------) for the folder (folder2 in your case) 600 (or -rw-------) for the private_key file. Both owned ...
  • 3,745
1 vote

Put Ed25519 keys in usable file format for Tor

The data you've displayed on a screenshot is a binary displayed as a char stream, you need to put it in the right format. I have a good example on Go - here is the code, I'm sure you'll spot the ...
  • 5,431
1 vote

What's the difference between 'secret_id_key' and 'ed25519_master_id_key'?

secret_id_key is an RSA key and ed25519_master_id_key is a Ed25519 key used for Hidden Services v3. Here is what the spec says about it: https://gitweb.torproject.org/torspec.git/tree/rend-spec-v3.txt#...
1 vote

Is it possible to find encryption key in Tor Browser?

If you're doing something like a presentation, paper, book, etc, it's best to 1. Ask the developers and contributors directly https://www.torproject.org/contact/ and 2. Read the documentation for ...
  • 2,151
1 vote
Accepted

Is Tor image friendly?

If you're not a relay and if you're not hosting a hidden service, then you can run multiple instances with exactly the same config. If you are running a hidden service, then each introduction point ...
  • 3,745
1 vote
Accepted

In generating a new hidden service address, does the tor client check for collision with existing ones?

No. As there are 32^16 possible addresses, such a collision is astronomically unlikely. In any case, there's no way of knowing if someone else has the same hidden service, just happens to be offline; ...
1 vote

make a TOR url act like Alias in DNS

onion names are not based on DNS and don't work like them, but there are things that you can do. Here is how I would do it. Just FYI, my example is based on Linux. My website is simple. It is a ...
  • 2,151
1 vote
Accepted

Error: Couldn't rotate onion key

After looking into this again after leaving it for a long time, I quickly found the solution. It turned out that the files in the /var/lib/tor/keys folder were not owned nor writable for the debian-...
1 vote
Accepted

tor adds its own private_key for hidden_service, hijacking my custom .onion

As far as I remember shallot is used to generate custom keys and service names for version 2 of hidden services and you are requesting: HiddenServiceVersion 3 Remove the above mentioned line and it ...
  • 411
1 vote

Tor public key Provided object is too large

This is probably caused by key spam - a few days ago this key took up about 30 MB and took about 10 minutes to delete. Suggested mitigation.
  • 210
1 vote

How to avoid your onion host privatekey to be stolen?

To my knowledge, there is currently no way to avoid that your key, at least for a short time, is on your server in cleartext. However, the next generation onion services (V3) will allow you to do ...
  • 1,342
1 vote

Is there a mechanism for testing that addresses and private keys match?

For any (sane) code, when you generate an RSA key you generate the private key then the public key is derived from it. The onion address is the base32 encoded first 10 bytes of the sha1 sum of the ...
  • 10.8k
1 vote
Accepted

How does an OR create keys?

It uses external libraries. Specifically OpenSSL, curve25519-donna, and ed25519 (either donna or ref10). The code for key generation can be found in: curve25519 - gitweb.torproject.org/tor.git/tree/...
1 vote
Accepted

Location of secret_id_key when built from sources

PREFIX/data/keys, where prefix is --prefix=xxx and in my case - I've made a double-precaution : configure --prefix=/usr/tor in torrc DataDirectory /usr/tor/data and NO problem is given at all, I ...
  • 5,431

Only top scored, non community-wiki answers of a minimum length are eligible