It is very unlikely that your VPN will be able to pull any of these off, as they often require additional attacks against the entire Tor network. Tor does have many defenses which makes this more difficult, far too many to name exhaustively, such as padding data into chunks of exactly 514 bytes ( previously 512 bytes). Most of these are termed traffic analysis attacks, because, while they don't involve decrypting the data directly, they involve finding loopholes that end up discovering what the data is without actually finding the encryption key. However, you should be aware that, while Tor is very secure, there are theoretical attacks against it which an actor between you and the guard node, or the guard node itself could pull off. It only sees encrypted data between you and your guard node. To answer your literal question: no, the VPN cannot see your data.
Neither seem likely to appear in the near future, and if they are, they are the kind of things which will be used by FVEY (NSA, GCHQ, etc), not by petty commercial VPN providers who want to snoop on your data. This would require either a major breakthrough in mathematics, or a breakthrough in cryptoanalytic quantum computers. In order to break them, it would have to either brute force at most 2 131 keys (on average half, or 2 130 keys), or break the algorithm used to exchanged keys safely, called curve25519. *Īssuming you are using Tor browser correctly so you are not leaking DNS, the VPN will only be able to see your IP, the IP of the guard node you are connecting to, and the encrypted communications between you and the guard. Simple math dictates that 2 128×3 equals 2 131, so the three layers total up to the equivalent of 2 131 possible keys. Each layer provides 2 128 possible combinations of keys. The third layer is a key shared between you and the exit node. The second layer is a key shared between you and the middle node. The first layer is a key shared between you and the guard node. Between your Tor client and the guard node, the communications are encrypted with three layers of AES128.
0 kommentar(er)
