class: center, middle, main-title # Tor Under the Hood 🕵️ --- ## Who am I? 👨 .center[![Speaker Image](images/jaysinh_shukla.jpg)] - ⚒️ Software Engineer - 🌏 [http://blog.jaysinh.com](http://blog.jaysinh.com) - 💻 [http://github.com/ultimatecoder](http://github.com/ultimatecoder) - 🐦 [@jaysinhp](https://twitter.com/jaysinhp) - 📧 [jaysinhp@gmail.com](mailto:jaysinhp@gmail.com) --- class: center, middle, main-title # Story 1 --- class: center, middle, main-title # Story 2 --- ## Satyendra Dubey .center[![Satyendra Dubey](images/satyendra_dubey.jpg)] --- class: center, middle, main-title # Story 3 --- ## SBI Bank .center[![State Bank of India](images/sbi_bank.jpg)] --- ## I know privacy, I use incognito mode! 😎 .center[![Incognito mode](images/incognito_mode.png)] --- ## I know privacy, I use incognito mode! 😎 .center[![Incognito mode](images/incognito_mode_highlited.png)] --- ## HTTP ❌ HTTPS ❌ ![No Tor No HTTPS](images/no_tor_no_https.png) --- ## HTTP ❌ HTTPS ✔️ ![No Tor Yes HTTPS](images/no_tor_yes_https.png) --- .center[![Kahaani Navaazudin looking for Vidya](images/kahaani_1.png)] --- .center[![Kahaani Vidya in a crowd of white saari](images/kahaani_2.png)] --- .center[![Kahaani Vidya balaan](images/kahaani_3.png)] --- class: center, middle, main-title # History 📚 --- ## Year 1990, United State Naval Research Laboratory .center[![U.S. Naval Research Laboratory](images/us_naval_research_laboratory.jpg)] - Initial Employees - David Goldschlag - Mike Reed - Paul Syverson --- ## Year 1997, The Defense Advanced Research Projects Agency (DARPA) .center[![DARPA](images/darpa.png)] --- ## Year 2000, The Onion Routing (TOR) | ![Roger Dingledine](images/roger_dingledine.jpg) | ![Paul Syverson](images/paul_syverson.jpg) | |--|--| | .center[Roger Dingledine] | .center[Paul Syverson] | --- ## Year 2006, Tor project .center[![Tor Project](images/tor-project.png)] --- class: center, middle, main-title # Statistics of last decade 📈 --- ## Tor users - World 🌐 ![Users of Tor all around the world](images/userstats-relay-country-all-last-decade.png) --- ## Tor users - India 🇮🇳 ![Users of Tor in India](images/userstats-relay-country-india-last-decade.png) --- ## Relays and Bridges 👥 ![Relay and Bridge operators in last decade](images/relays-and-bridges-in-last-decade.png) --- ## Onion addresses 🗣️ ![Onion addresses in last decase](images/onion-addresses-in-last-decade.png) --- class: center, middle, main-title # Components of Tor 🔮 --- ## Tor Relays 🌀 - Entry node (Guard node) - Remains for 2-3 months - Knows who is requesting - Doesn't know what is requested - Middle node - Forwards request from Entry node to Exit node - Forwards response from Exit node to Entry node - Doesn't know who is requesting and what is responded - Exit node - The one who actually resolves the request - Don't know who requested - Knows what is requested - List of relays are publicly available --- ## Diagram of Tor relays .center[![Tor network](images/tor_circuit.png)] --- ## Bridge 📡 - A special type of Tor relays that is not publicly listed - Helps in connecting to Tor network if Tor is blocked by ISP or any level - Bridges are GEO distributed - It is difficult to get addresses of all the bridges --- ## Onion routing 🛡️ ![Onion routing Communication 1](images/communication_1.png) --- ## Onion routing 🛡️ ![Onion routing Communication 2](images/communication_2.png) --- ## Onion routing 🛡️ ![Onion routing Communication 3](images/communication_3.png) --- ## Onion routing 🛡️ ![Onion routing Communication 3](images/communication_4.png) --- ## Onion routing ![Onion routing with layers](images/onion_routing_with_layers.png) --- ## Onion Service - Location of the service is hidden yet accessible - Domain of the service ends with ".onion" - Dot onion services are only accessible via Tor network - Requests is routed only through Tor relays --- ## Tor ✔️ HTTPS ❌ ![Yes Tor No HTTPS](images/yes_tor_no_https.png) --- ## Tor ✔️ HTTPS ✔️ ![Yes Tor Yes HTTPS](images/yes_tor_yes_https.png) --- class: center, middle, main-title # Myths of Tor --- class: center, middle, main-title # I don't bother if someone is using my data because I am not doing anything illegal --- class: center, middle, main-title # Tor is mostly used by Hackers. I will get hacked If I use Tor --- class: center, middle, main-title # I am watching YouTube videos. Still I should use Tor? --- class: center, middle, main-title # Yes you should! --- class: center, middle, main-title # Running a Tor relay invites a Police investigation --- class: center, middle, main-title # If I use Tor, I am not hackable --- class: center, middle, main-title # Tor is funded by U.S. Government. I am sure they knows hidden ways to crack Tor --- class: center, middle, main-title # Tor or not Tor?