1npm i @hazae41/echalote

Node Package 📦 • Online Demo 🌐 • Next.js CodeSandbox 🪣

Use at your own risk

This is experimental software in early development

1. It has security issues
2. Things change quickly

Features

Current features

• 100% TypeScript and ESM
• Zero-copy reading and writing
• Works in the browser
• All cryptography use either WebCrypto or reproducible WebAssembly ports of Rust implementations
• Unsafe Tor protocol (with Ed25519, ntor, kdf-tor)
• Meek (HTTP) transport (without domain-fronting)
• Snowflake (WebRTC/WebSocket) transport (without domain-fronting)
• Unsafe TLS using Cadenas
• HTTP and WebSocket messaging using Fleche

Upcoming features

• Better security

Usage

1import { createWebSocketSnowflakeStream, TorClientDuplex, Consensus } from "@hazae41/echalote"
2import { Ciphers, TlsClientDuplex } from "@hazae41/cadenas"
3
4const tcp = await createWebSocketSnowflakeStream("wss://snowflake.bamsoftware.com/")
5const tor = new TorClientDuplex()
6
7tcp.outer.readable.pipeTo(tor.inner.writable).catch(() => {})
8tor.inner.readable.pipeTo(tcp.outer.writable).catch(() => {})
9
10await tor.waitOrThrow()
11
12using circuit = await tor.createOrThrow()
13const consensus = await Consensus.fetchOrThrow(circuit)
14
15const middles = consensus.microdescs.filter(it => true
16  && it.flags.includes("Fast")
17  && it.flags.includes("Stable")
18  && it.flags.includes("V2Dir"))
19
20const exits = consensus.microdescs.filter(it => true
21  && it.flags.includes("Fast")
22  && it.flags.includes("Stable")
23  && it.flags.includes("Exit")
24  && !it.flags.includes("BadExit"))
25
26const middle = middles[Math.floor(Math.random() * middles.length)]
27const middle2 = await Consensus.Microdesc.fetchOrThrow(circuit, middle)
28await circuit.extendOrThrow(middle2, AbortSignal.timeout(5000))
29
30const exit = exits[Math.floor(Math.random() * middles.length)]
31const exit2 = await Consensus.Microdesc.fetchOrThrow(circuit, exit)
32await circuit.extendOrThrow(exit2, AbortSignal.timeout(5000))
33
34const ttcp = await circuit.openOrThrow("twitter.com", 443)
35
36const ciphers = [Ciphers.TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384]
37const ttls = new TlsClientDuplex({ host_name: url.hostname, ciphers })
38
39ttcp.outer.readable.pipeTo(ttls.inner.writable).catch(() => { })
40ttls.inner.readable.pipeTo(ttcp.outer.writable).catch(() => { })
41
42const response = await fetch("https://twitter.com", { stream: ttls.outer })
43const text = await response.text()