Re: [tor-dev] Projects to combat/defeat data correlation

On Sat, Jan 18, 2014 at 01:40:43AM +0000, Matthew Finkel wrote:

obfs3 is supposed to be fairly difficult to detect because entropy estimation is seemingly more difficult than typically assumed, and thus far from what has been seen in practice this seems to be true.

There's a recent paper which covers that topic [1]. While entropy estimation is certainly more expensive than, say, counting packet sizes, it's probably not out of reach for well-equipped boxes.

[1] http://cs.unc.edu/~amw/resources/opaque.pdf

Cheers, Philipp