Private Decentralized Communication Network
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 
 
 
 
 
Kevin F c0d3b367dc Get distance of trust with bfs 2 days ago
.github Create stale.yml 3 years ago
.vscode added sneakernet auto importing 2 years ago
docs Remove todo.txt and replace with ROADMAP.md 5 months ago
install move centos install 2 years ago
scripts Implemented basic server diffusal test 5 months ago
src Get distance of trust with bfs 2 days ago
static-data Get distance of trust with bfs 2 days ago
tests Added block database cleaner 3 weeks ago
.dockerignore Docker improvements 2 years ago
.env adjusted pythonpath .env 6 months ago
.gitignore add all venvs to gitignore and update changelog 2 years ago
.gitlab-ci.yml added helium test deps to ci 2 years ago
.onionr.yml Rename AUR package to onionr-git 3 years ago
AUTHORS.MD * started endpoint for non-app specific control of direct connections 3 years ago
CHANGELOG.md add all venvs to gitignore and update changelog 2 years ago
CODE_OF_CONDUCT.md fixed everything being executable permission 3 years ago
CONTRIBUTING.md fixed some bugs 3 years ago
Dockerfile Docker improvements 2 years ago
ISSUE_TEMPLATE.md Use list for version infos in issue template 2 years ago
LICENSE.txt Update LICENSE.txt 3 years ago
Makefile moved to niceware from mnemonic 3 years ago
README.md README cleanup 3 days ago
ROADMAP.md correct readme to current status 3 days ago
SECURITY.md moved tests to parent directory 3 years ago
git-update.sh bug fixes in block creation and directory security 2 years ago
make-release.sh added site lister 3 years ago
onionr.sh Don't write python bytecode 2 months ago
requirements-ARM.txt Added a new ARM64 (Raspberry Pi's for example) patch allowing for proper support now. 2 years ago
requirements-dev.in Bumped dependencies 8 months ago
requirements-dev.txt Bumped dependencies 8 months ago
requirements.in added dependencies for rpc 3 days ago
requirements.txt added dependencies for rpc 3 days ago
run-onionr-node.py Removed netcontroller 6 months ago
run-onionr-node.sh Docker improvements 2 years ago
run_tests.sh Work on gossip tests and cleaned up api server some 4 months ago
setprofile.sh fixed everything being executable permission 3 years ago
start-daemon.sh added restart command 3 years ago
start-many-nodes.py added script to start many nodes 2 years ago
start-ram.sh Removed webUI and unused god objects 2 weeks ago

README.md

Privacy Respecting Communication Network 📡

WIP anonymous social platform, mail, file sharing and marketplace

- Discord - Matrix: #onionr:amorgan.xyz

Install Features Screenshots
Docs Get involved Onionr.net/.onion

The main repository for this software is at https://gitlab.com/beardog/onionr/

Note that this README reflects the state of the rewrite, and not the original alpha network

Mirrors Gitea

Onionr ("Onion Relay") is a decentralized/distributed peer-to-peer communication network, designed to be anonymous and resistant to (meta)data analysis, spam, and corruption.

Onionr gives the individual the ability to speak freely, without fear of surveillance and censorship.


Onionr internals

Blocks

At the core, Onionr is an anonymous Distributed Hash Table (DHT) syncing prepackaged blocks using a simple Gossip protocol with Dandelion++ as an overlay network on top of Tor and I2P.

Onionr stores data in independent packages referred to as 'blocks'. The blocks are distributed to all nodes, but are not required to be stored. Blocks and user IDs cannot be easily proven to have been created by a particular user. Even if Dandelion++ is defeated and there is enough evidence to believe that a specific node is linked to a block's creation, nodes still operate behind Tor or I2P and as such cannot be trivially unmasked. Anonymity is achieved by a stateless network, with no given indication of what node a block originates from. In fact, since one is not required to participate in routing or storage to insert a message, blocks often do not originate from any identifiable node, similar to how Bitcoin transactions do not necessarily originate from a wallet directly associated with a node.

Onionr Gossip

Onionr works via epidemic/gossip style routing, with message delivery taking roughly logC(N) cycles where C is the number of nodes to send a message to each cycle and N is the number of connected nodes. So a network of 100 million nodes can deliver messages in a few minutes even with high packet loss and malfunctioning nodes.

Through Dandelion++ message forwarding and key privacy, it is intended to be nigh impossible to discover the identity of a message creator or recipient. Via long-term traffic analysis, a well funded adversary may discover the most probable node(s) to be creating a set of related blocks, however doing so would only lead them to a node behind Tor. As the first node that a block appears on is almost always not the creator of the block, there is plausible deniability regarding the true creator of the block.

Users are identified by ed25519/curve25519 public keys, which can be used to sign blocks or send encrypted data.

Onionr can be used for mail, as a social network, instant messenger, file sharing software, or for encrypted group discussion.

Since Onionr is technically just a data format, any routing scheme can technically be used to pass messages.

The whitepaper is available here.


Main Features

  • 🌐 Fully p2p/decentralized, no trackers or other single points of failure
  • 🕵 Metadata analysis resistance and anonymity
  • 📡 Transport agnosticism (no internet required)

Roadmap

See ROADMAP.md

Documentation

More docs coming soon.

Install and Run on Linux

The following applies to Ubuntu Bionic. Other distributions may have different package or command names.

Master may be unstable, you should use the latest release tag. (checkout via git: $ git checkout release-latest)

$ sudo apt install python3-pip python3-dev tor

  • Have python3.10, python3-pip, Tor (daemon, not browser) installed. python3-dev is recommended.
  • You may need build-essentials or the equivalent of your platform
  • Clone the git repo: $ git clone https://gitlab.com/beardog/onionr --tags
  • cd into install direction: $ cd onionr/
  • Install the Python dependencies (virtualenv strongly recommended): $ pip3 install --require-hashes -r requirements.txt (on ARM64 devices like Raspberry Pi 4's use requirements-ARM.txt instead.)
  • (Optional): Install desktop notification dependencies: $ pip3 install --require-hashes -r requirements-notifications.txt

(--require-hashes is intended to prevent exploitation via compromise of PyPi/CA certificates)

Run Onionr

  • Run Onionr normally: $ ./onionr.sh start
  • Run Onionr in background as daemon: $ ./start-daemon.sh
  • Gracefully stop Onionr from CLI $ ./onionr.sh stop

Contact/Community

  • Email: onionr [ at ] voidnet.tech
  • Twitter: @onionrnet
  • Matrix: #onionr:amorgan.xyz
  • Discord: https://discord.gg/DVF2bEAzrt (Discord is bad for freedom and privacy, this is only provided for convenience)

Help out

Everyone is welcome to contribute. Help is wanted for the following:

  • Development (Get in touch first)
    • Creation of a shared lib for use from other languages and faster proof-of-work
    • Android and IOS development
    • Mac support (testers needed)
    • Bug fixes and development of new features
  • Testing
  • Translations/localizations
  • UI/UX design
  • Running stable nodes
  • Security review/audit
  • I2P support

Watch the talk from BSidesPDX 2019

improving anonymous networking talk link

Contribute money:

Donating at least $3 gets you cool Onionr stickers. Get in touch if you want them.

sticker

  • Bitcoin: bc1qpayme9rlpkch0qp3r79lvm5racr7t6llauwfmg (Contact us for a unique address or for other coins)

  • Monero: 4B5BA24d1P3R5aWEpkGY5TP7buJJcn2aSGBVRQCHhpiahxeB4aWsu15XwmuTjC6VF62NApZeJGTS248RMVECP8aW73Uj2ax

  • USD (Card/Paypal (no account required)): Ko-Fi

  • Sign up for privacy.com (refferal link) to protect your personal information when contributing or shopping elsewhere, we both get $5 USD.

Note: not tax deductible

Security

Onionr is alpha software. This means it is unstable, probably insecure, and experimental.

No matter how good Onionr and other software gets, there will always be ways for clever or well-funded adversaries to break your security.

Onionr does not protect your identity if you associate your user ID with your name either on Onionr or elsewhere.

Do not rely on Onionr or any other software to hold up if your life or liberty are at stake.

Licenses and Branding

Onionr is published under the GNU GPL v3 license, except for the logo.

The Tor Project and I2P developers do not own, create, or endorse this project, and are not otherwise involved.

Tor is a trademark for the Tor Project. We do not own it.

The Onionr logo was created by Anhar Ismail under the Creative Commons Attribution 4.0 International License.

If you modify and redistribute our code ("forking"), please use a different logo and project name to avoid confusion. Please do not use the project name or logo in a way that makes it seem like we endorse you without our permission.