3 ms·
This is widely known. What I find more suspicious is the fact that Tor still partly uses obsolete crypto (RSA-1024) that may specifically be open to attacks fro
by lazyjones 11y ago
This is widely known. What I find more suspicious is the fact that Tor still partly uses obsolete crypto (RSA-1024) that may specifically be open to attacks from governments. This was discussed in 2013 and apparently not fixed ("no time"...). Normally, such a situation would have devs hurrying to fix the issue immediately, as it makes the whole project potentially useless for a particularly important use case (evasion of government censorship/repression).
- acqq 11y agoIt does matter where RSA-1024 is being actually used in Tor. As far as I understand, as long as it's not for some long-term keys, it still shouldn't be a problem. Please write if you know more on this subject.
- lazyjones 11y agoI'm not an expert on Tor code, so I can only speculate and agree partly with you: it matters where it is used. But temporary keys do not necessarily help against an attacker who has access to all/most past Tor traffic. RSA-1024 is used in node identification and hidden services, the weaknesses are known: https://blog.torproject.org/blog/prism-vs-tor https://blog.torproject.org/blog/prism-vs-tor https://blog.torproject.org/blog/hidden-services-need-some-love https://blog.torproject.org/blog/hidden-services-need-some-l... (note: current state of affairs unknown to me since Tor doesn't seem to update these documents)