How to Find New Onion Hidden Service based on Blind Secret Key?
Jianwei Ding, Xinze Li, Huangxiang Li, Zhouguo Chen · 2024
Abstract-With the development of Internet technology and privacy protection, anonymous network technology is widely used to browse, publish and deliver private or sensitive information on the Internet, such as The Onion Router (Tor). Tor is the most widely used service to protect the user's privacy, because of its bidirectional anonymous mechanism, which makes it so difficult to correlate and find the real Tor web service provider. Actually, Tor is the most influential dark web that contains a lot of illegally sensitive information, which becomes a big challenge to find the new Onion service quickly. Since Tor's specific communication mode makes the instant detection for new Onion service becomes more and more impossible. Before Tor V3 protocol was released, the researcher is able to use reverse calculation to get the real time Tor web service address by deploying the Tor honey pot. Although, with Tor V3 protocol is all updating, which introduces blind key secret to encrypt the Tor onion service's hash code, intended to make it impossible to get the real time Tor web service address by reverse calculation. Hence, this paper analyzes the Tor's blind key secret mechanism, and propose an estimation method of Tor hidden service's scale based on the binding relationship with the blinding key secret and the Tor hidden service's address, by deploying the Tor hidden service honey pot. According to the binding relationship in the 24 hours, we are able to calculate the Tor hidden service's scale, which help us to have a good command of Tor's overall operation situation. We also present empirical results of our ongoing experimentation and the Tor's real statistics with it, which verify the feasibility of our proposed method.