---
title: "Tor: The Second-Generation Onion Router"
description: "This paper asks how a browser can cross several volunteer relays without handing any one relay the complete route. Read it to see how the client extends a circuit one hop at a time, wraps each fixed-size cell in a different session key for every relay, and why those layers still cannot defeat an observer who can correlate traffic at both ends."
canonical_url: "https://fanout.sh/daily/2026-08-16-tor-onion-router"
md_url: "https://fanout.sh/daily/2026-08-16-tor-onion-router.md"
last_updated: "2026-08-16"
access: "public"
---

# Tor: The Second-Generation Onion Router

This paper asks how a browser can cross several volunteer relays without handing any one relay the complete route. Read it to see how the client extends a circuit one hop at a time, wraps each fixed-size cell in a different session key for every relay, and why those layers still cannot defeat an observer who can correlate traffic at both ends.

## Paper details

- Authors: Dingledine, Mathewson, and Syverson

- Venue: USENIX Security 2004

- Track: Systems

- Difficulty: Easy

- Reading time: 35 min

- Original paper: https://www.usenix.org/conference/13th-usenix-security-symposium/tor-second-generation-onion-router

## What you will learn

- Why a relay can forward a connection while knowing only its predecessor and successor rather than both the client and destination.

- How telescoping circuit construction negotiates a fresh key with each relay and how layered cells expose one local step at a time.

- Where Tor's 2004 threat model stops: traffic timing, hostile exits, application leaks, directory trust, and early-deployment scale remain real boundaries.

## Continue exploring

[Explore the software papers map](https://fanout.sh/blog/100-papers-to-understand-software-and-computing): Place Tor beside foundational papers on protocols, distributed trust, cryptography, naming, peer-to-peer systems, transport, and the tradeoffs that make real infrastructure deployable.

---
This representation contains public Fanout content only. Protected Pro lessons, account data, billing, checkout, and pricing are not included.

Browse the public content map: https://fanout.sh/sitemap.md