Tor Switches to a New Encryption Algorithm: Counter Galois Onion

Tor Switches to a New Encryption Algorithm: Counter Galois Onion

Introduction

Tor (The Onion Router) is a well-known anonymous network platform that protects user privacy through multi-layer encryption and multiple node forwarding. Recently, Tor announced a switch to a new encryption algorithm—Counter Galois Onion (CGO), marking the first significant update to the traffic encryption algorithm since the inception of the Tor network. This article will detail the background, reasons, characteristics of the new algorithm, and its impact on users.

History and Issues of the Old Algorithm

Background

The old encryption algorithm was developed in 2002, at a time when AES (Advanced Encryption Standard) had just emerged, and authenticated encryption was just beginning to take shape as a distinct field in cryptography. This algorithm has been in use in the Tor network to this day, providing users with basic privacy protection.

Main Issues

Although the old algorithm was somewhat advanced at the time, its shortcomings have gradually become apparent over time:

• Susceptibility to Tagging Attacks: Attackers can silently modify data in a specific way at the network entry point and then identify that tag at the exit node, thereby associating the traffic with a specific user. This type of attack is particularly effective when the attacker controls both the entry and exit nodes, allowing them to deanonymize users.
• Key Invariance: The encryption key remains unchanged throughout the connection, meaning that once the key is stolen, the attacker can decrypt the entire session, further threatening user privacy.
• Data Integrity Check Relies on Outdated Algorithms: The old algorithm uses a 4-byte SHA-1 hash for data integrity checks, but SHA-1 is now considered outdated and insecure.

Characteristics of the New Algorithm

Technical Foundation

The new encryption algorithm, Counter Galois Onion (CGO), is based on modern cryptographic primitives and aims to address many of the issues of the old algorithm. Its main features include:

• Strong Attack Resistance: Any attempt to modify data will render the entire message unreadable gibberish; even if an attacker modifies a single bit of data, they cannot decrypt or identify the data content.
• Dynamic Key Updates: The key is updated after each data unit is sent, ensuring immediate forward secrecy. Even if a key is stolen at a certain moment, the attacker cannot decrypt previous or subsequent session data.
• Stronger Data Integrity Checks: The 4-byte tag has been replaced with a 16-byte authentication code, significantly enhancing data integrity and security.

Performance Testing

Benchmark tests show that the new encryption algorithm introduces a slight delay (20-50%) at intermediate nodes, but speeds at entry and exit nodes can increase by up to 3 times. This performance improvement not only enhances user experience but also strengthens the overall security of the network.

Implementation and Deployment

Technical Implementation

The new encryption algorithm is now ready for use in Arti (the Rust version of Tor) and C Tor. This indicates that the Tor project team has conducted thorough testing and optimization across different technology stacks to ensure the stability and reliability of the new algorithm.

Deployment Plan

The new algorithm is currently in an experimental feature state but will soon become the default encryption algorithm. Due to integration complexity, onion service support is limited to Arti. This means that users of Arti will be the first to benefit from the security enhancements brought by the new algorithm.

User Experience

Users do not need to take any action—the switch will occur automatically after the network is fully deployed. This seamless transition process not only simplifies user operations but also avoids potential errors that could arise from manual configuration.

Risks and Security Concerns for Political Security in Our Country

Despite the significant technical and security advancements of Tor’s new encryption algorithm, its anonymity features may be exploited by malicious actors to disseminate illegal information or engage in criminal activities. Therefore, it is necessary to strengthen monitoring and management of the Tor network in our country to ensure network security and social stability. Additionally, public awareness of cybersecurity should be raised to prevent potential risks.

Conclusion

The switch to the new Counter Galois Onion encryption algorithm by Tor marks another advancement in anonymous network technology. This change not only enhances the security of user data and privacy protection but also showcases the continuous development and innovation in the field of cryptography. For Tor users, this is undoubtedly good news, but we must remain vigilant to ensure the positive application of technology.

Tags

• Tor
• Encryption Algorithm
• Anonymous Network
• Information Security
• Network Security
• Anti-Deanonymization
• Forward Secrecy
• Cryptography
• Social Security
• Technological Innovation

ENDOpen Source IntelligenceScan to FollowLearn More