Improving efficiency and simplicity of Tor circuit establishment and hidden services

  • Authors:
  • Lasse Øverlier;Paul Syverson

  • Affiliations:
  • Norwegian Defence Research Establishment, Kjeller, Norway and Gjøvik University College, Gjøvik, Norway;Center for High Assurance Computer Systems, Naval Research Laboratory, Washington, DC

  • Venue:
  • PET'07 Proceedings of the 7th international conference on Privacy enhancing technologies
  • Year:
  • 2007

Quantified Score

Hi-index 0.00

Visualization

Abstract

In this paper we demonstrate how to reduce the overhead and delay of circuit establishment in the Tor anonymizing network by using predistributed Diffie-Hellman values. We eliminate the use of RSA encryption and decryption from circuit setup, and we reduce the number of DH exponentiations vs. the current Tor circuit setup protocol while maintaining immediate forward secrecy. We also describe savings that can be obtained by precomputing during idle cycles values that can be determined before the protocol starts. We introduce the distinction of eventual vs. immediate forward secrecy and present protocols that illustrate the distinction. These protocols are even more efficient in communication and computation than the one we primarily propose, but they provide only eventual forward secrecy. We describe how to reduce the overhead and the complexity of hidden server connections by using our DH-values to implement valet nodes and eliminate the need for rendezvous points as they exist today. We also discuss the security of the new elements and an analysis of efficiency improvements.