[tor-dev] Projects to combat/defeat data correlation

[Philipp Winter]

On Sat, Jan 18, 2014 at 01:40:43AM +0000, Matthew Finkel wrote:
> obfs3 is supposed to be fairly difficult to detect because entropy
> estimation is seemingly more difficult than typically assumed,
> and thus far from what has been seen in practice this seems to be true.

There's a recent paper which covers that topic [1].  While entropy estimation
is certainly more expensive than, say, counting packet sizes, it's probably not
out of reach for well-equipped boxes.

[1] http://cs.unc.edu/~amw/resources/opaque.pdf

Cheers,
Philipp