Re: What are the chances of this encrytion being broken?

On 09/04/2025 18:40, Mini Mailer wrote:

Peter Fairbrother wrote:

On 24/03/2025 19:07, Stefan Claas wrote:
>

If the
sender uses [...] anonymous Networks, which it
seems you guys are not using (yet), how would be rubberhose applied, if
they can't find the sender?

>
Unfortunately there aren't any effective anonymous networks. At least
none I would trust against NSA/GCHQ/SCA/SCS.

 Isn't the Tor Network not a solid foundation, which can be build up from?

No.
TOR falls to a global passive adversary (eg the NSA) who can watch the traffic to and from the 1,000 or so entrance/exit nodes *. The intermediate nodes are irrelevant in this attack. There are many other attacks.
The problem is latency (and to a lesser extent lack of dummy covertraffic and small fixed packet sizes). For good <5s web latency the amount of traffic to-from the set of exit nodes which needs to be examined and compared is 5s worth, not a lot.
As there is no dummy covertraffic, and packets are split into 512-byte cells, if Alice's sends 4,586 cells to Bob there will be 4,586 cells entering the network from Alice's IP, and somewhere in the next 5s of traffic there will be an exit node which is sending 4,586 cells to Bob's IP.
Not too hard to find a correlation. Especially if repeated into a session.
As for building on TOR, you'd pretty much have to build an anonymous network on top of TOR - which would be better built elsewhere as TOR traffic is slow and closely watched.
TOR was designed by a serving US navy officer (Paul is a nice guy, but I wouldn't ever trust him not to be on the Navy's side); and initial development of TOR was paid for by the US defence establishment.
* all of them, or most of them, or many of them, or just a few of them - the more the easier, but the statistics for even 10% of watched nodes are horrifying

 

Mixmaster might have been effective once, if properly used, but it is
now moribund and never had enough traffic.

 The successor of Mixmaster is YAMN, but nowadays people are working
also on Katzenpost and Nym.

Actually the successor to Mixmaster should have been Mixminion, but TOR stole the coders and some of the theory guys who were working on Mixminion and it never got finished. Or later Panoramix or Loopix or some other Goscinny/Uderzo characters.
I'm a bit out of date, so I'm not intimately familiar with Nym and katzenpost (though I know most of the developers and their work), but while they have some clever tricks to partly overcome TOR's weakness against a global adversary they don't do much more than make things harder. Not impossible or too hard or too expensive**.
Plus I am skeptical of the security of bandwidth credentials etc, they may give adversaries information.
I don't know anything about YAMN. Would Lance/Len approve?
** "Never underestimate the attention, risk, money, and time that an opponent will put into reading traffic" - Robert Morris, former Chief Scientist NCSC NSA
Peter Fairbrother