# How does Tor's encryption mechanism work？

**URL:** https://forum.torproject.org/t/how-does-tors-encryption-mechanism-work/20779
**Category:** Core Tor
**Created:** [November 11, 2025, 12:47pm UTC](https://forum.torproject.org/t/how-does-tors-encryption-mechanism-work/20779 "2025-11-11T12:47:08Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![Harbeter](https://forum.torproject.org/user_avatar/forum.torproject.org/harbeter/32/7234_2.png) [@Harbeter](https://forum.torproject.org/u/Harbeter)
#### Post date: [November 11, 2025, 12:47pm UTC](https://forum.torproject.org/t/how-does-tors-encryption-mechanism-work/20779/1 "2025-11-11T12:47:08Z")

</div>

I have read some information in [https://spec.torproject.org/](https://spec.torproject.org/) and learned that, Tor has two main concepts: **Channel** and **Circuit**.

When a client creates a circuit for the first time, the Tor client first establishes a **TLS Channel** , and then builds one or more **circuits** within it.

So, that’s like

 ![image](https://forum.torproject.org/uploads/default/original/2X/b/bb82cc25b701ab670296cc66c08cf0703b444ef5.png)

Inside the channel, the Tor client uses the node’s **RSA public key** to encrypt an **AES session key** , completing a **Diffie–Hellman key exchange**. The building of circuits do not use TLS.

A **channel** is one layer of TLS encryption between each pair of nodes — like the gray part in the diagram — and a single channel can carry multiple circuits.

A **circuit** consists of **three layers of AES encryption** , represented by the red, green, and blue parts in the diagram. It does not rely on TLS.

Therefore, it can be said that Tor employs **four layers of encryption in total** : one TLS layer for the channel, and three AES layers for the circuit.So it can say that, tor has four layers for encryption?

I want to know if my understanding is correct.

---

<div class="post-metadata">

### Author: ![Felix](https://forum.torproject.org/user_avatar/forum.torproject.org/felix/32/6374_2.png) [@Felix](https://forum.torproject.org/u/Felix)
#### Post date: [November 12, 2025, 10:41am UTC](https://forum.torproject.org/t/how-does-tors-encryption-mechanism-work/20779/2 "2025-11-12T10:41:49Z")

</div>

Probably yes, correct.

I am not clear about the channel1 part in the upper left corner. The application before the Tor client builds the TLS connection through the whole Tor chain to the destination (Google).

The Tor chain starts with the client. The TLS to destination with an app.

The end node usually calls itself exit.

---

<div class="post-metadata">

### Author: ![Harbeter](https://forum.torproject.org/user_avatar/forum.torproject.org/harbeter/32/7234_2.png) [@Harbeter](https://forum.torproject.org/u/Harbeter)
#### Post date: [November 12, 2025, 12:52pm UTC](https://forum.torproject.org/t/how-does-tors-encryption-mechanism-work/20779/3 "2025-11-12T12:52:05Z")

</div>

well, the channel1 is used for the tor client to communication with Directory Servers. I forgot to sign it. Does it have some problem?