What question did this study set out to answer?

The aim is to present AriaTransport, a daemon designed for enhancing network identity protection.

May 7, 2026Open Access

AriaTransport: A Userland Network-Identity-Hardening Daemon Composing TLS Fingerprint Mimicry, Timing Jitter, and Tor SOCKS Forwarding for Application-Layer Anonymity

Key Points

The aim is to present AriaTransport, a daemon designed for enhancing network identity protection.
Developed a userland daemon using Go language with specific functionalities for network anonymity.
Implemented techniques like TLS fingerprint mimicry, timing jitter, and SOCKS5 routing through Tor.
Created a deployable binary with integrity and no dependencies on C.
Successfully combined established techniques into a single application for improved anonymity.
Demonstrated network-identity hardening capabilities across applications.
Provided an audit-friendly daemon that supports privacy ecosystems.

Abstract

We describe AriaTransport, a small userland network-identity-hardening daemon that composes three independently-known techniques — TLS ClientHello fingerprint mimicry via uTLS, randomized per-write timing jitter, and SOCKS5-routed Tor onion forwarding with hostname-resolved DNS — into a single deployable binary with hash-pinned integrity. The implementation is approximately 316 lines of pure Go, cross-compiled for arm64 (Android) and arm64 (Apple Silicon macOS) without C-foreign-function-interface dependency. Each component is established prior art; this paper's contribution is the composition: a deployable, audit-friendly daemon that sits at the network-egress layer of a multi-product privacy ecosystem and provides uniform identity-hardening to all consumers. We document the architecture, operational discipline (hash-pinning, fail-closed behavior, no-CGO purity, no-DNS-leak guarantee), and the integration model with downstream consuming applications.

Read Full Paperexternally

Ask AI

Helpful

Bookmark

View Full Paper