What is onion routing?

Onion routing is a technique used to make anonymous browsing more secure. It utilizes nodes acting as hop pointsThis refers to a node in a crowd where a packet lands and then "hops-off" to another node. in a crowdA collection of nodes on a network is considered a crowd. Nodes are users (hosts) acting as stations for the packet to travel through while on it's way to it's destination. of relays to add layers of encryption to a packet, that is to travel over a network until it reaches its destination.

Procedure

For explanation purposes, we assume that a node is communicating with a server that does not involve encryption. So the packet will only be encrypted with the symmetric keys of the nodes in the crowd.

From source to destination

The procedure followed for sending a packet over the internet with onion routing implemented is as follows:

• The client first determines the circuit (route) of the packet to traverse over the internet.
• The client assembles the shared symmetric keys of the nodes included in the circuit.
• The client then encapsulates the packet in the encryption keys of the nodes.
• The packet is then sent to each node included in the circuit, and they use their keys to "peel off" each layer of encryption, one by one.
• The packet reaches its destination with each encryption layer removed, and the destination gains access to its contents.

Below is the illustration of a packet's one-way travel (from source to destination):

From destination to source

The following is the procedure the nodes follow while sending the packet back into the circuit:

• The destination node encrypts the packet in the encryption key of the last node it received it from and sends the packet to it.
• The rest of the nodes also follow the same procedure until the packet arrives back at the source.
• The source node decrypts the packet using the symmetric keys of the nodes which encrypted the packet to gain access to its contents.

Applications

The browser implements onion routing as a protocol and ensures at least three hops per packet before it reaches its destination to ensure the privacy of the person using the browser.

• This protocol ensures web privacy, which prevents third-party applications from tracking user activity to target them with personalized ads.
• Journalists make use of this protocol to communicate with whistleblowers and dissidents.
• Law enforcement agencies also use this technique for surveilling illegal dark web portals and gathering open source information.
• Unfortunately, on the flip-side, this technique is also used for illegal purposes by criminals with the sole purpose of hiding their tracks, and by hackers to cover their malware tracks.