洋葱路由包的封装技术研究

Encapsulation of the Onion Routing

洋葱路由技术(Onion Routing)是为了阻止在公用网络上进行窃听和流量分析,在Internet上提供隐藏通信的一种基础设施,它可以在公开的计算机网络中隐藏通信双方的关系及通信目的,对通信内容进行有效地保护。文章针对洋葱包头的实现机制,利用加密和签名技术,结合分层和嵌套的组合,提出了洋葱包的四种封装方式,即分层加密和签名、分层加密与嵌套签名、嵌套加密与分层签名、嵌套加密和签名,在比较了它们优缺点的基础上提出了实现源路由技术的方案。

Onion routing is used for private communication over a public network,it provides anonymous connection that is strongly resistant to both eavesdropping and traffic analysis,it is an infrastructure that provides hiding communication over Internet,the onion router can hide request and responder's information,protect the content efficiently.In this paper,based on the onion routing,combined with encryption and signature,it presents four encapsulatting approaches and compare their advantage and disadvantage,four encapsulatting approaches are atomic encryptions and signatures, atomic encryptions and nested signatures,nested encryptions and atomic signatures,nested encryptions and signatures.