🔒
LLM
-Tor
Privacy-preserving LLM proxy — Interactive Protocol Demo
Phase 1
Credit Purchase
Identity Visible
Phase 2
Blind Token Issuance
Cryptographic Unlinkability
Phase 3
Anonymous Redemption
Zero Identity Leakage
IDENTITY VISIBLE
👤
Alice
ID: alice@...
💳
Stripe
Payment Gateway
🖥
LLM-Tor Server
knows Alice
🗄
Cosmos DB
alice → 100 credits
$10 payment
webhook + id
store credits
100 credits added!
Identity is known here, but that's OK.
Phase 2 will cryptographically decouple identity from tokens.
BLIND SIGNATURE PROTOCOL
💻
Client
(Alice's device)
auth cookie
🖥
LLM-Tor Server
has RSA private key
sees m' never m
Generate Token
m = rand(128-bit)
secret, stays on device
Blind
m’ = m·r𝑒 mod N
r = random blinding factor
m’ + auth cookie →
Blind Sign
s’ = (m’)𝔡 mod N
deducts 1 credit
← s’ (blind sig)
Unblind
s = s’·r⁻¹ mod N
r cancels out
Token pair cached: (m, s)
Server cannot link s to any user. Cryptographic guarantee.
FULLY ANONYMOUS
NO IDENTITY PRESENT
💻
Client
has (m, s)
🧅
Tor Relay 1
🧅
Tor Relay 2
🧅
Tor Relay 3
(m, s)
🖥
LLM-Tor Server
verify RSA sig
check hash(m) unspent
mark token spent
Forward to LLM API
✨ Gemini
🤖 GPT
← LLM response (via Tor)
What the server knows vs. doesn't know
✓ Request is from a paying user (token signature valid)
✓ Token has not been spent before (replay protection)
✗ WHO sent this (IP masked by Tor, identity uncorrelated by blind sig)
Steps
Cryptographic Detail
Select a step to see details.
← Prev
▶ Play
Next →
Step 0 / 0