Skip to content

Commit

Permalink
Update threat model... remove inacurracies
Browse files Browse the repository at this point in the history
  • Loading branch information
david415 committed Mar 2, 2014
1 parent 56babc1 commit cfdfbd7
Showing 1 changed file with 9 additions and 24 deletions.
33 changes: 9 additions & 24 deletions doc/bananaphone/bananaphone-threat-model.txt
Expand Up @@ -5,35 +5,20 @@

0. Abstract

We discuss the threat model for the Bananaphone Pluggable
Transport, its limitations, possible uses and implications for
combining it with other protocols.

The Bananaphone Pluggable Transport is based on the Bananaphone
codec api written by Leif Ryge.

1. Adversary capabilities and non-capabilities

2. The adversary's goals

3. Goals of bananaphone
1. Goals of bananaphone

The Bananaphone Pluggable Transport is meant to be combined with
other protocols that provide integrity, confidentiality and authentication.
Therefore in this case Bananaphone's goal is to simply represent a
bitstream as something that looks similar to natural language. This
could be useful if combined with a transport meant for some amount
of natural language, for instance, HTTP.
Bananaphone's goal is to hide the Tor TLS handshake so that
the tor connection is not detected by censorship regime's
passive Deep Packet Inspection machines. In order for these
machines to see that there is encapsulated tor traffic the
bananaphone's encoding_spec must be known;
it takes some effort to guess the correct encoding_spec.

It is possible to extend the Bananaphone codec api to include more
sophisticated models that more accurately mimic natural language.

4. Non-goals of bananaphone
2. Non-goals of bananaphone

The Bananaphone Pluggable Transport does not provide integrity,
confidentiality or authentication; an adversary only needs to guess
the encodingSpec (tokenization function, hash function and bits per
token) to see the data be transported. This encodingSpec is
trivially detectable through frequency analysis.

confidentiality or authentication.

0 comments on commit cfdfbd7

Please sign in to comment.