Onion Routing and Tor: Anonymous Network Communication
This paper explains the architecture and principles of onion routing, a communications infrastructure designed to prevent traffic analysis and eavesdropping by separating routing from identification. The paper describes how layered encryption conceals packet data as it traverses a public network, how socket connections and proxies enable anonymity at the application layer, and what limits remain for local eavesdroppers. It then examines Tor, a second-generation onion routing system, detailing the specific improvements it introduced over the original design, including telescoping path-building, the SOCKS proxy interface, end-to-end congestion control, directory servers, and integrity checking.
- Introduction to Onion Routing: Core concept of layered encryption for anonymous routing
- How Onion Routing Achieves Anonymity: Socket connections, proxies, and per-router decryption
- Limitations of Onion Routing: What local eavesdroppers can still detect
- Tor: The Second-Generation Onion Router: Tor's architecture and design goals
- Tor's Key Improvements Over Onion Routing: Path-building, SOCKS, congestion control, and integrity
- Conclusion: Summary of Tor's advances over original onion routing
✍️ How to write this paper — guide, tools & examples ▾
What makes this paper effective
- Uses a vivid analogy — a suspect changing appearance at each depot station — to make the abstract mechanism of layered decryption intuitive and memorable.
- Moves logically from foundational concepts (onion routing) to an advanced application (Tor), allowing the reader to build understanding incrementally.
- Clearly enumerates each specific improvement Tor made over the original design, giving the paper a concrete, comparative structure that is easy to follow.
Key academic technique demonstrated
The paper demonstrates comparative technical analysis: it first establishes a baseline system (onion routing), identifies its weaknesses, and then systematically explains how a successor system (Tor) addressed each weakness. This before-and-after structure is a reliable framework for technology-focused academic writing.
Structure breakdown
The paper opens with the core principles of onion routing — layered encryption, socket connections, and proxy use — then addresses anonymity guarantees and their limits. The second half pivots to Tor, introducing it as a second-generation improvement and walking through four distinct enhancements: telescoping path-building, the SOCKS interface, congestion control, and directory/integrity features. A brief references section closes the paper.
Introduction to Onion Routing
Onion routing uses a flexible communications infrastructure that prevents traffic from being analyzed and eavesdropping from occurring. It works by separating routing from identification techniques — in other words, any identifying information is removed from the data stream (Syverson, 2005).
The structure is created by wrapping a plaintext message in layers of encryption. Just as an onion has layers that peel away, this wrapping is successively peeled away as the wrapped message passes from one router to the next. The message is viewable only by the sender and the recipient, and perhaps even the last node, unless end-to-end encryption is used (Joshi, 2012).
For example, in a packet-switched network, packets use a header for routing while the payload carries the data. The header is visible to the network and to anyone monitoring it; it reveals where the packet originated and where it is going. Encryption and obscuration alone do not prevent identification.
References
Dingledine, R., Mathewson, N., & Syverson, P. (2004). Tor: The second-generation onion router. Naval Research Lab Washington DC.
Joshi, P. (2012). Onion routing. Retrieved from https://prateekvjoshi.com/2012/11/27/onion-routing/
Syverson, P. (2005). Onion routing. Retrieved from https://www.onion-router.net/Summary.html
Create your account
Always verify citation format against your institution’s current style guide requirements.