LLM-Tor

Privacy-preserving LLM proxy — Interactive Protocol Demo
Phase 1
Credit Purchase
Identity Visible
Phase 2
Blind Token Issuance
Cryptographic Unlinkability
Phase 3
Anonymous Redemption
Zero Identity Leakage
IDENTITY VISIBLE 👤 Alice ID: alice@... 💳 Stripe Payment Gateway 🖥 LLM-Tor Server knows Alice 🗄 Cosmos DB alice → 100 credits $10 payment webhook + id store credits 100 credits added! Identity is known here, but that's OK. Phase 2 will cryptographically decouple identity from tokens.
BLIND SIGNATURE PROTOCOL 💻 Client (Alice's device) auth cookie 🖥 LLM-Tor Server has RSA private key sees m' never m Generate Token m = rand(128-bit) secret, stays on device Blind m’ = m·r𝑒 mod N r = random blinding factor m’ + auth cookie → Blind Sign s’ = (m’)𝔡 mod N deducts 1 credit ← s’ (blind sig) Unblind s = s’·r⁻¹ mod N r cancels out Token pair cached: (m, s) Server cannot link s to any user. Cryptographic guarantee.
FULLY ANONYMOUS NO IDENTITY PRESENT 💻 Client has (m, s) 🧅 Tor Relay 1 🧅 Tor Relay 2 🧅 Tor Relay 3 (m, s) 🖥 LLM-Tor Server verify RSA sig check hash(m) unspent mark token spent Forward to LLM API ✨ Gemini 🤖 GPT ← LLM response (via Tor) What the server knows vs. doesn't know ✓ Request is from a paying user (token signature valid) ✓ Token has not been spent before (replay protection) ✗ WHO sent this (IP masked by Tor, identity uncorrelated by blind sig)

Steps

    Cryptographic Detail

    Select a step to see details.
    Step 0 / 0