Is it quantum-proof?
Is it alien-proof?
All information is translated to Finnish at ingress, so yes.
Counter Galois Onion: Improved encryption for Tor circuit traffic
31–34 of 34 posts
Re: Counter Galois Onion: Improved encryption for Tor circuit traffic
#32hey guys, anyone believes Tor still can provide anonymity to users ? just trying to ask politely.
This FUD comes up whenever Tor is mentioned on Hacker News. The answer is: let's say you think Tor isn't 100% flawless. What are you going to do? Not use Tor? It's better than any other option.
The better option is to use Tor while being aware of its caveats and limitations. Don't be lulled into a false sense of security.
Re: Counter Galois Onion: Improved encryption for Tor circuit traffic
#33Earlier quoted context omitted.
That is correct. But, (in general) encryption does not necessarily guarantees integrity of the data. In other words, a plaintext can be encrypted, the ciphertext given to another party, and they can tamper with the ciphertext in a way that produces predictable changes in the message obtained by decrypting the tampered ciphertext.
Ok, but if I run (say) HTTPS over the innermost tunnel, then I suppose that HTTPS will take care of any discrepancies.
The malleability of the ciphertext matters because it enables certain circuit tagging attacks as the article explains. It means that the exit relay could confirm you are using a guard relay also controlled by them and thus discover your origin IP address.
There are many reasons that these cryptographic tagging attacks are a lot worse than just the timing correlation attacks that are possible if you control the guard and exit of a client: https://archive.torproject.org/websites/lists.torproject.org...
Re: Counter Galois Onion: Improved encryption for Tor circuit traffic
#34hey guys, anyone believes Tor still can provide anonymity to users ? just trying to ask politely.
This FUD comes up whenever Tor is mentioned on Hacker News. The answer is: let's say you think Tor isn't 100% flawless. What are you going to do? Not use Tor? It's better than any other option.
It's not FUD at all. I think you would be utterly shocked how many active alternatives exist, and how small Tor is compared to it's reputation.