[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Encryption over Hidden Services

To: or-dev@xxxxxxxxxxxxx
Subject: Re: Encryption over Hidden Services
From: Marcus Griep <tormaster@xxxxxxx>
Date: Fri, 6 Aug 2010 09:44:08 -0400
Delivered-to: archiver@xxxxxxxx
Delivered-to: or-dev-outgoing@xxxxxxxx
Delivered-to: or-dev@xxxxxxxx
Delivery-date: Fri, 06 Aug 2010 09:44:47 -0400
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:mime-version:sender:received :in-reply-to:references:from:date:x-google-sender-auth:message-id :subject:to:content-type:content-transfer-encoding; bh=2F6saSXMczTUfQVpUgCTwNi043J9EroMkdFO9V3Vf6E=; b=MBfdY4NxL/Ce5Nesx/k1UwZ7RRAlKvRp+idjs/9KNpYE99oiQY7tZ/r4SqA6v6CDdl +mVTFemUgzFLCmmv0KXWTbQXYETlOezD0/T/WJ+nkEOtkWH9h4d3+1FmghT9XHJzvEw1 oaR/2ZhBv8QGU5jQlO2TcH8WI8DVZSAB5SvNo=
Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:from:date :x-google-sender-auth:message-id:subject:to:content-type :content-transfer-encoding; b=e4AkXOYYJlQrVH9C7S0DHQ6veEGWsCF1TsLwWHgCWPE1ViDfPhM0sva0w/2ZT/yAJa Yjfpe2R/ojcfljetu8Cbvc7t/j1/lok9xZvynAAAuxgx18VsiARlVt+bLxe7Hs7wcnWc xWiEFBfXbpYQRMOaXxHBuz8gR228zHq75ZOVs=
In-reply-to: <20100806060012.770bb840@ceres-arch64>
References: <AANLkTik_3bot-0yXXfYUScV2wGt4h8R4zo9AmsJ6_SDr@xxxxxxxxxxxxxx> <AANLkTinhzyWY6OUPgLvIuc1cTe0W4effGxa5lhmxqf6K@xxxxxxxxxxxxxx> <AANLkTimUvUT6AqvU2tPN6OtkeYM4KuXtjJ1sUKSgJapd@xxxxxxxxxxxxxx> <AANLkTilQqXFz1fDrEpmPK6WV3h4tyDhLoFH-k-gCaMY4@xxxxxxxxxxxxxx> <AANLkTimBfl5pKwLVIkPNkN2serU2QlRwdLyTIb7mVHiw@xxxxxxxxxxxxxx> <AANLkTiliwZoXDTavYSg6NxQvdVdU_Qhy6aH_mv8itHOk@xxxxxxxxxxxxxx> <AANLkTik8ZzJ1YVzDX9a0Nh1jYxKjVD0I5PP_lYX12VLJ@xxxxxxxxxxxxxx> <AANLkTikLLdFcUkagDsUxnt_iYcnDvDCW5kzGhhkKyOcO@xxxxxxxxxxxxxx> <AANLkTimuDRsQntEdu9REb+BiBEyFyRaQfHh4sZL8auj6@xxxxxxxxxxxxxx> <4C5ACD79.80908@xxxxxxxxxxx> <20100806100711.GA15543@xxxxxxxxxx> <20100806060012.770bb840@ceres-arch64>
Reply-to: or-dev@xxxxxxxxxxxxx
Sender: owner-or-dev@xxxxxxxxxxxxx

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, Aug 6, 2010 at 09:00, Robert Ransom <rransom.8774@xxxxxxxxx> wrote:
>
> On Fri, 6 Aug 2010 03:07:12 -0700
> Mike Perry <mikeperry@xxxxxxxxxx> wrote:
>
> > In the real world, it is disturbingly practical to compute .onion urls
> > that have a significantly large number of characters in common with an
> > arbitrary target url, in arbitrary positions of the url.
> >
> > There was a program called 'shallot' which optimized hidden service
> > key generation to accomplish exactly this using THC's Fuzzy
> > Fingerprint technique. It seems to exist only in rumor and legend
> > these days, but if you would like an arbitrary snapshot of the code
> > that calls itself 0.0.1, I can post it somewhere.
>
> http://taswebqlseworuhc.onion/

I haven't worked on it in a while, but I wrote a Mono implementation
of a vanity onion generator as well You can find it here:
http://github.com/neoeinstein/purpleonion

The main relevant portion is under src/Por.OnionGenerator.

>
> > It was originally created for the sake of creating vanity .onion urls.
> > ...
> > (and if your goal is to deceive a user into visiting or chatting with
> > your spoofed hidden service, why not use weak keys?).
>
> Also, it can search for keys whose hashes match an arbitrary regular
> expression, not just keys whose hashes have specified characters at the
> beginning and end.
>

PurpleOnion (Por) was intended to be a full Mono implementation of
Tor, but I didn't get that far. The PurpleOnion vanity generator also
uses an arbitrary regular expression for doing its matching and uses
multi-threading. It currently just uses the Mono framework's
implementation to generate the key pairs, but could probably be
optimized by writing it's own generating functions, including using
Mono.SIMD or CUDA in some form.

I may have to pull this back out of the mothballs to continue
hammering at it and run some more tests.
- --
Marcus Griep
ââ
ÎÎÎÎÎÎ ××.ÏÎÂ, 3Â
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.14 (MingW32)
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=P1gQ
-----END PGP SIGNATURE-----

References:
- Re: Proposal: GETINFO controller option for connection information
  - From: Nick Mathewson
- Encryption over Hidden Services
  - From: Nathan Freitas
- Re: Encryption over Hidden Services
  - From: Mike Perry
- Re: Encryption over Hidden Services
  - From: Robert Ransom

Prev by Author: Re: Proposal: Separate streams across circuits by destination port or destination host
Next by Author: Re: Encryption over Hidden Services
Previous by thread: Re: Encryption over Hidden Services
Next by thread: Re: Encryption over Hidden Services
Index(es):
- Author
- Thread