A zero-metadata mixnet and closed-circuit mesh built natively in Rust. Post-quantum onion routing (ML-KEM-768 / ML-DSA), deterministic fixed-size cells, synchronous mixing — no Tor's public federated trust model, no timing fingerprints.
GhostNet splits into three Rust crates: ghost-core (protocol engine), ghost-mesh (node topology), ghost-shield (OS tap/tun integration), orchestrated by ghost-daemon. The console above visualizes a live onion circuit through the mesh.
Each hop peels one AES-256-GCM layer. Cells are fixed 1024 bytes with jitter — no length fingerprint. Mixing phases break timing correlation. Origin Block provides zero-knowledge provenance instead of directory authorities.
ML-KEM-768 key encapsulation + ML-DSA signatures for quantum-resistant forward secrecy. Layered AES-256-GCM cells.
Deterministic 1024-byte cells with timing jitter blind packet-length fingerprinting. No metadata leaks.
Stratified mixing phases break timing correlation — the core weakness of Tor's public federated model.
Zero-knowledge provenance replaces directory authorities. No central trust, no deanonymization vector.
OS tap/tun integration intercepts raw packets, wraps them in fixed-size cells, pipes through the private node chain.
Closed-circuit exit strategy. Full opsec chain. No third-party exit nodes, no logging, no correlation surface.
| Property | GhostNet | Tor |
|---|---|---|
| Trust model | Closed-circuit mesh | Public federated |
| Post-quantum | ✅ ML-KEM-768 / ML-DSA | ❌ Legacy RSA/Ed25519 |
| Cell size | Fixed 1024B + jitter | Variable (fingerprintable) |
| Timing resistance | Synchronous mixing | Correlation attacks |
| Directory | Origin Block ZK provenance | Directory authorities |
| Metadata | Zero | Leaks via timing/length |