The Tor Project Is Making a Switch to Rust, Ditches C (itsfoss.com)

The Tor Project has officially transitioned to Rust, replacing its long-standing C codebase with a new implementation called Arti, aimed at enhancing security and performance. This shift addresses persistent vulnerabilities associated with C, such as buffer overflows and memory corruption. The latest release, Arti 1.8.0, introduces significant upgrades, including a rework of the circuit timeout mechanism, which now features usage-based, randomized timeouts instead of fixed intervals. This change is crucial as it helps to obscure user activity, making it more difficult for observers to track connections based on predictable timing patterns. Additionally, Arti 1.8.0 includes an experimental command for onion service operators to seamlessly migrate their discovery keys from the C-based Tor to Arti's secure keystore. This not only simplifies the migration process but also enhances the overall security architecture. With improvements in routing, protocol implementation, and directory caching, the transition to Rust signifies a major step forward for the Tor network, bolstering user anonymity and setting a new standard for security in the AI and machine learning domain, where privacy and data protection are paramount.