Re: How does tor encrypt my data?

[孙超 <g06b08120301@xxxxxxxxxxxxxxxx>]

That is to say: the exit node we choose must be trustable in keeping my 
privacy?

Thank you for your valuable information!
----- Original Message ----- 
From: "F. Fox" <kitsune.or@xxxxxxxxx>
To: <or-talk@xxxxxxxxxxxxx>
Sent: Tuesday, January 29, 2008 3:40 AM
Subject: Re: How does tor encrypt my data?


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> 孙超 wrote:
> (snip)
> > We know that there is an entrance node and an exit node in a path,
> > cleartext is sent out from the exit node to the destination that we are
> > aimed at. If so, my original cleartext could be revealed to the exit
> > node? If my data is encrypted on my PC by the tor I runned, how does the
> > exit node decrypt the ciphered text? How does it get the decrypt key?
>
> You should read the Tor FAQ; these questions are answered there:
> https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#head-75d5f6d474527a80fc370d208252b4dfd2ea2efd
>
> I will answer the most important one in short here, though: Unless
> you're using something that provides end-to-end encryption (HTTPS,
> encrypting email with PGP/GPG, using SSH for logging into things, etc.),
> exit nodes can - and have been known to - spy on cleartext. They can
> also alter things being passed through; this is how Torment and similar
> tools attempt to "demask" those who haven't properly secured their 
> browser.
>
> > Another question is what kind of cryptology algorithm tor uses, RSA? or
> > others?
>
> A bit about the public-key side of Tor:
> https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#head-808ed17a2519e7851b33bcc620b67b97cac76511
>
> I do know that AES is used on the symmetric-key side (although I don't
> know what key length is used).
>
> - --
> F. Fox: A+, Network+, Security+
> Owner of Tor node "kitsune"
> http://fenrisfox.livejournal.com
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>
> iQIVAwUBR54vp+j8TXmm2ggwAQgc/A//UiAnqn45VEan0ucqmP5YhkvNr2vsph4D
> TO2fG38VBlSDXiHnMqYJ49eWxPj0SqlbCvLpxyJkgPpXAmXgN6QtrPN7WmlVCWmX
> qvoC14K8n8dbV00A/VL+1pbxA40OeLR8MKi4dABqA0422V2Ig+zj695bKECjrBWv
> aPWB99JktAaKAl4I4xTNDDe2mXz4Sc6zb4IkgwGmDJIkQzxvEoo2E7CUPDEhlEM8
> DUKRHFyYySu7IT4wgKWluP0TWBHmhBofW0WEAH93usfjqom2atxe92Xn2aNldze5
> LIAtuN1bHpq0kw7NGXqBX//mx3n7/lPis+vTRoEPWzR5w791hoE9Lrq20lGZYQfa
> jCwV8rpZxPWbb+y0qlDx9HwSslBgzozJaR7E4x3vLkz1ysVHm0AdY+0IudhYR+Qf
> m9jInj0Exg4vR/QThwbhQrqaMyijxxcA55Jd+3M++CWknUnxzEyot0pwVkXEvTNZ
> FoH91TocOO6suOlPWI36SuX8mlsdsky7BUh0O7FlEwfBRpPT2H6+TPrqNWB/6lzO
> +M1RB5kPamQa+9fhuMw32J/dxNzcR2n0SETND5d0nIzgu/zDL5T9d6RKGlySp9XY
> HJ1HX2W3XWvkeo/56NJigiCcgxYkocUe2b7unfNnh4BUUvk/YmqNBnGQE0J8dRqZ
> MX7aflbz49I=
> =W3nX
> -----END PGP SIGNATURE-----