-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 孙超 wrote: (snip) > We know that there is an entrance node and an exit node in a path, > cleartext is sent out from the exit node to the destination that we are > aimed at. If so, my original cleartext could be revealed to the exit > node? If my data is encrypted on my PC by the tor I runned, how does the > exit node decrypt the ciphered text? How does it get the decrypt key? >
You should read the Tor FAQ; these questions are answered there: https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#head-75d5f6d474527a80fc370d208252b4dfd2ea2efd I will answer the most important one in short here, though: Unless you're using something that provides end-to-end encryption (HTTPS, encrypting email with PGP/GPG, using SSH for logging into things, etc.), exit nodes can - and have been known to - spy on cleartext. They can also alter things being passed through; this is how Torment and similar tools attempt to "demask" those who haven't properly secured their browser. > Another question is what kind of cryptology algorithm tor uses, RSA? or > others? A bit about the public-key side of Tor: https://wiki.torproject.org/noreply/TheOnionRouter/TorFAQ#head-808ed17a2519e7851b33bcc620b67b97cac76511 I do know that AES is used on the symmetric-key side (although I don't know what key length is used). - -- F. Fox: A+, Network+, Security+ Owner of Tor node "kitsune" http://fenrisfox.livejournal.com -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQIVAwUBR54vp+j8TXmm2ggwAQgc/A//UiAnqn45VEan0ucqmP5YhkvNr2vsph4D TO2fG38VBlSDXiHnMqYJ49eWxPj0SqlbCvLpxyJkgPpXAmXgN6QtrPN7WmlVCWmX qvoC14K8n8dbV00A/VL+1pbxA40OeLR8MKi4dABqA0422V2Ig+zj695bKECjrBWv aPWB99JktAaKAl4I4xTNDDe2mXz4Sc6zb4IkgwGmDJIkQzxvEoo2E7CUPDEhlEM8 DUKRHFyYySu7IT4wgKWluP0TWBHmhBofW0WEAH93usfjqom2atxe92Xn2aNldze5 LIAtuN1bHpq0kw7NGXqBX//mx3n7/lPis+vTRoEPWzR5w791hoE9Lrq20lGZYQfa jCwV8rpZxPWbb+y0qlDx9HwSslBgzozJaR7E4x3vLkz1ysVHm0AdY+0IudhYR+Qf m9jInj0Exg4vR/QThwbhQrqaMyijxxcA55Jd+3M++CWknUnxzEyot0pwVkXEvTNZ FoH91TocOO6suOlPWI36SuX8mlsdsky7BUh0O7FlEwfBRpPT2H6+TPrqNWB/6lzO +M1RB5kPamQa+9fhuMw32J/dxNzcR2n0SETND5d0nIzgu/zDL5T9d6RKGlySp9XY HJ1HX2W3XWvkeo/56NJigiCcgxYkocUe2b7unfNnh4BUUvk/YmqNBnGQE0J8dRqZ MX7aflbz49I= =W3nX -----END PGP SIGNATURE-----
