1. Andrew Lewman The Tor Project andrew@torproject.org
Online Anonymity
Andrew Lewman
The Tor Project

2. Outline
Why anonymity?
Crash course on Tor
Future

3. Informally: anonymity means you can't tell who did what
“Who wrote this blog post?”
“Who's been viewing my webpages?”
“Who's been ing patent attorneys?”

4. Formally: anonymity means indistinguishability within an “anonymity set”
Alice1
Alice2
Alice3
Bob
Alice4
Alice5
....
Alice6
Attacker can't tell which
Alice is talking to Bob!
Alice7
Alice8

5. Anonymity isn't cryptography: Cryptography just protects contents.
“Hi, Bob!”
Alice
“Hi, Bob!”
<gibberish>
Bob
attacker

6. Anonymity isn't steganography: Attacker can tell that Alice is talking; just not to whom.
network
Alice1
Bob1
Alice2
Bob2
...
AliceN
(Strong high-bandwidth
steganography may not exist.)

7. Anonymity isn't just wishful thinking...
“You can't prove it was me!”
“Promise you won't look!”
“Promise you won't remember!”
“Promise you won't tell!”
“I didn't write my name on it!”
“Isn't the Internet already anonymous?”

8. ...since “weak” anonymity... isn't.
“You can't prove it was me!”
Promise you won't look!”
“Promise you won't remember!”
“Promise you won't tell!”
“I didn't write my name on it!”
“Isn't the Internet already anonymous?”
Proof is a very strong word.
With statistics,
suspicion becomes certainty.
Will others parties have the ability and incentives to keep their promises?
Not what we're talking about.
Nope!
(More info later.)

9. Anonymity serves different interests for different user groups.
Private citizens
“It's privacy!”

10. Regular citizens don't want to be watched and tracked.
Hostile Bob
Blogger
Alice
“I sell the logs.”
Incompetent Bob
8-year-old
Alice
“Oops, I lost the logs.”
Indifferent Bob
“Hey, they aren't
my secrets.”
Sick
Alice
Name, address,
age, friends,
interests
(medical, financial, etc),
unpopular opinions,
illegal opinions....
Consumer
Alice
(the network can track too)
....
Oppressed
Alice

11. Anonymity serves different interests for different user groups.
Private citizens
Businesses
“It's network security!”
“It's privacy!”

12. Businesses need to keep trade secrets.
Competitor
“Oh, your employees are reading
our patents/jobs page/product sheets?”
Competitor
“Hey, it's Alice! Give her the 'Alice' version!”
AliceCorp
“Wanna buy a list of Alice's suppliers?
What about her customers?
What about her engineering department's
favorite search terms?”
Compromised
network

13. Anonymity serves different interests for different user groups.
Private citizens
Governments
Businesses
“It's traffic-analysis
resistance!”
“It's network security!”
“It's privacy!”

14. Law enforcement needs anonymity to get the job done.
Investigated
suspect
“Why is alice.localpolice.gov reading my website?”
Officer
Alice
Sting
target
“Why no, alice.localpolice.gov!
I would never sell counterfeits on ebay!”
Organized
Crime
“Is my family safe if I
go after these guys?”
Anonymous
tips
Witness/informer
Alice
“Are they really going to ensure
my anonymity?”

15. Governments need anonymity for their security
Untrusted
ISP
“What will you bid for a list of Baghdad
IP addresses that get from .gov?”
Agent
Alice
Compromised
service
“What does the CIA Google for?”
Shared
network
Coalition
member
Alice
“Do I really want to reveal my
internal network topology?”
Defense in
Depth
“What about insiders?”

16. Anonymity serves different interests for different user groups.
Private citizens
Governments
Businesses
“It's traffic-analysis
resistance!”
“It's network security!”
“It's privacy!”
Blocked users
“It's reachability!

17. You can't get anonymity on your own: private solutions are ineffective...
Alice's small
anonymity net
...
Citizen
Alice
“One of the 25 users
on AliceNet.”
Municipal
anonymity net
Officer
Alice
Investigated
suspect
“Looks like a cop.”
AliceCorp
AliceCorp
anonymity net
Competitor
“It's somebody at
AliceCorp!”

18. ... so, anonymity loves company!
Shared
anonymity net
...
Citizen
Alice
“???”
Officer
Alice
Investigated
suspect
“???”
AliceCorp
Competitor
“???”

19. Current situation: Bad people on the Internet are doing fine
Trojans
Viruses
Exploits
Botnets
Zombies
Phishing
Espionage
DDoS
Extortion
Spam

20. IP addresses can be enough to bootstrap knowledge of identity.
Alice
x.x
Hotlinked ad
Amazon account
Wikipedia post

21. Tor is not the first or only design for anonymity.
Low-latency
High-latency
Single-hop
proxies
Chaum's Mixes
(1981)
Crowds
(~96)
anon.penet.fi (~91)
V1 Onion
Routing (~96)
ZKS
“Freedom”
(~99-01)
R er networks:
cypherpunk (~93),
mixmaster (~95),
mixminion (~02)
Java Anon Proxy
(~00-)
Tor
(01-)
...and more!

22. Low-latency systems are vulnerable to end-to-end correlation attacks.
match!
Low-latency: Alice1 sends: xx x xxxx x
Bob2 gets: xx x xxxx x
Alice2 sends: x x xx x x
Bob1 gets: x x x x x x
match!
Time
High-latency: Alice1 sends: xx x xxxx
Alice2 sends: x x xx x x
Bob1 gets: xx xxxx
Bob2 gets: x xxxxx
These attacks work in practice. The obvious defenses are expensive (like high-latency), useless, or both.

23. Still, we focus on low-latency, because it's more useful.
Interactive apps: web, IM, VOIP, ssh, X11, ...
# users: millions?
Apps that accept multi-hour delays and high bandwidth overhead: , sometimes.
# users: tens of thousands at most?
And if anonymity loves company....?

24. Outline
Why anonymity?
Crash course on Tor
Future

25. What is Tor? online anonymity software and network
open source, freely available
active research environment

26. The Tor Project, Inc.
501(c)(3) non-profit organization dedicated to the research and development of tools for online anonymity and privacy

27. Estimated 500,000 daily Tor users

28. The simplest designs use a single relay to hide connections.
Bob1
Alice1
E(Bob3,“X”)
“Y”
Relay
Alice2
Bob2
E(Bob1, “Y”)
“Z”
“X”
E(Bob2, “Z”)
Alice3
Bob3
(example: some commercial proxy providers)

29. But a single relay is a single point of failure.
Bob1
Alice1
E(Bob3,“X”)
“Y”
Evil
Relay
Alice2
Bob2
E(Bob1, “Y”)
“Z”
“X”
E(Bob2, “Z”)
Alice3
Bob3
Eavesdropping the relay works too.

30. So, add multiple relays so that no single one can betray Alice.
Bob
Alice R1 R3 R5 R4 R2

31. A corrupt first hop can tell that Alice is talking, but not to whom.
Bob
Alice R1 R3 R5 R4 R2

32. A corrupt final hop can tell that somebody is talking to Bob, but not who.
Alice R1 R3 R5 R4 R2

33. Alice makes a session key with R1 ...And then tunnels to R2...and to R3
Bob
Alice R1 R3
Bob2 R5 R4 R2

34. Tor anonymizes TCP streams only: it needs other applications to clean high-level protocols.
SSH
Tor network
SOCKS
Tor client
Web
browser
Web
scrubber
HTTP
SOCKS
SOCKS
IRC
client

35. We added a control protocol for external GUI applications.
SSH
SOCKS
Tor client
Web
browser
Web
scrubber
HTTP
SOCKS
Controller
GUI
protocol
Control
(Change configuration,
report errors,
manage circuits, etc.)

37. Usability for server operators is key.
Rate limiting: eating too much bandwidth is rude!
Exit policies: not everyone is willing to emit arbitrary traffic.
allow /8:*
allow *:22
allow *:80
reject *:*

39. Server discovery must not permit liars to impersonate the whole network.
1. Alice says, “Describe the network!”
Alice1
Evil
Server
E.S.
E.S.
E.S.
Alice1
Evil
Server
E.S.
E.S.
E.S.
2. Alice is now in trouble.

40. Server discovery is hard because misinformed clients lose anonymity.
Known to Alice1 S S
Bob1
Alice1 S S S S
Alice2 S
Bob2 S S
Known to Alice2

41. Early Tor versions used a trivial centralized directory protocol.
cache S1
Trusted directory
Alice S2
Alice downloads
any signed list
Trusted directory
cache S3
Authorities
publish signed
lists of all descriptors
Servers publish
self-signed
descriptors.

42. We redesigned our directory protocol to reduce trust bottlenecks.
cache S1
Evil
Trusted directory
Alice S2
Alice downloads
all statements;
believes the
majority;
downloads descriptors as needed.
Trusted directory
cache S3
Authorities
publish signed
statements about
descriptors.
Servers publish
self-signed
descriptors.
(Also uses less bandwidth!)

43. Location Hidden Services
Developed by US NRL and Finnish Defense
Hides location and routing information of both the server and client
DHT Directory design
Tor software required to host a hidden service

44. .onion domains

45. We're currently the largest strong anonymity network ever deployed.
>
> 1800 running A A A A
> 500,000 in a day
> 350 MB/sec

46. Problem: Abusive users get the whole network blocked./.
Nice
Alice
Tor network X
Jerk
Alice
wikipedia X X
Some IRC
networks
Minimize scope of blocking?

47. Other common abuses
Somebody connects to Hotmail, and sends an obnoxious mail.
Somebody connects to IRC and yells -> DDoS on Tor exit server.
Somebody tries to get you shut down by connecting to Google Groups and posting spam.
Somebody uses Tor to download a movie, and your ISP gets a DMCA takedown.

48. Who uses Tor? Normal people Law Enforcement Human Rights Activists
Business Execs
Militaries
Abuse Victims

49. Tor doesn't magically encrypt the Internet
Operating Systems and Applications leak your info
Browser Plugins, Cookies, Extensions, Shockwave/Flash, Java, Quicktime, and PDF all conspire against you

50. Outline
Why anonymity?
Crash course on Tor
Future

51. Community Many tools make a big splash in the press
Censors need to feel in control; publicity removes the appearance of control
Increase community diversity
Strong social network
Funding
Donations, grants, contracts

52. 3-Year Development Roadmap
Improve Performance
Client Safety
Ease of Use and Understanding
Core Research & Development
for details

53. Copyrights
who uses tor? zes/l/, Matt Westervelt, CC-BY-SA
danger!, zes/o/, hmvh, CC-BY-SA
300k, , tochis, CC-BY-NC