View source for TorChat

{{short description|Anonymous instant messaging application}}
{{more citations needed|date=January 2016}}
{{Infobox software
| name = TorChat
| logo = 
| screenshot = Torchat screenshot.png
| screenshot size = 300px
| caption = Screenshot TorChat 0.9.9.530
| developer = TorChat Developers
| released = November 2007
| discontinued = Yes
| latest preview version = [https://github.com/prof7bit/TorChat/releases/tag/2.0-alpha-14 2.0-alpha-14]
| latest preview date = 22nd of July, 2012
| programming_language = [[Object Pascal]]
| operating system = [[Linux]], [[Microsoft Windows]]
| language = Multilingual
| genre = [[Instant messaging]] [[client (computing)|client]]
| license = [[GPL v3]]
| website = {{URL|https://github.com/prof7bit/TorChat}}
}}

'''TorChat''' was a [[peer-to-peer]] anonymous [[instant messenger]] that used [[Tor (anonymity network)|Tor]] [[onion service]]s as its underlying network. It provided cryptographically secure text messaging and file transfers.<ref name="interview-with-bernd">{{cite web |url=https://www.fsf.org/blogs/licensing/interview-with-bernd-kreuss-of-torchat |title=Interview with Bernd Kreuss of TorChat |publisher=[[Free Software Foundation]] |date= |accessdate=2014-01-28 |archive-date=2014-02-02 |archive-url=https://web.archive.org/web/20140202105724/https://www.fsf.org/blogs/licensing/interview-with-bernd-kreuss-of-torchat |url-status=live }}</ref> The characteristics of Tor's onion services ensure that all traffic between the clients is encrypted and that it is very difficult to tell who is communicating with whom and where a given client is physically located.

TorChat is free software licensed under the terms of the [[GNU General Public License]] (GPL).

==Features==

In TorChat every user has a unique alphanumeric ID consisting of 16 characters. This ID will be randomly created by Tor when the client is started the first time, it is basically the [[.onion]] address of an onion service. TorChat clients communicate with each other by using Tor to contact the other's onion service (derived from their ID) and exchanging status information, chat messages and other data over this connection. Since onion services can receive incoming connections even if they are behind a router doing [[network address translation]] (NAT), TorChat does not need any [[port forwarding]] to work.

==History==

The first public version of TorChat was released in November 2007<ref>{{cite magazine |last1=Zetter |first1=Kim |title=Middle-School Dropout Codes Clever Chat Program That Foils NSA Spying |url=https://www.wired.com/2014/09/new-encrypted-chat-program-thwarts-nsa-eliminating-metadata/ |magazine=Wired |access-date=25 February 2021 |language=en-us |date=2014-09-17 |quote=TorChat, a peer-to-peer instant messaging program released in 2007 that used Tor hidden services to transmit communications. TorChat had a number of implementation problems when it came out, however, and has largely been abandoned by users and its developers.}}</ref><ref name="torchat-2007-prof7bit">{{cite web |author1=prof7bit |title=torchat |url=http://code.google.com/p/torchat/ |website=Google Code |access-date=25 February 2021 |archive-url=https://web.archive.org/web/20071125170228/http://code.google.com/p/torchat/ |archive-date=25 November 2007 |date=25 November 2007}}</ref> by Bernd Kreuss (prof7bit).<ref>{{cite web |title=Bernd Kreuss (prof7bit) |url=https://gist.github.com/prof7bit |website=Gist |publisher=GitHub |access-date=25 February 2021 |language=en |archive-date=17 January 2018 |archive-url=https://web.archive.org/web/20180117052335/https://gist.github.com/prof7bit |url-status=live }}</ref><ref name="interview-with-bernd"/><ref>{{Cite web|url=https://directory.fsf.org/wiki/TorChat|archive-url=https://web.archive.org/web/20131009221718/https://directory.fsf.org/wiki/TorChat|archive-date=2013-10-09|title=TorChat - Free Software Directory}}</ref> It is written in [[Python (programming language)|Python]] and used the cross-platform widget toolkit [[wxPython]] which made it possible to support a wide range of [[Computing platform|platforms]] and [[operating system]]s.

The older Windows versions of TorChat were built with [[py2exe]] (since 0.9.9.292 replaced with pyinstaller) and came bundled with a copy of Tor readily configured so that it could be run as a [[portable application]] right off a [[USB flash drive]] without any installation, configuration or account creation.

Between 2008 and 2010 weren't any updated packages, resulting in the bundled version of Tor becoming obsolete and unable to connect to the Tor network,<ref>{{cite web |url=https://blog.torproject.org/blog/tor-project-infrastructure-updates |title=Tor project blog |publisher=Blog.torproject.org |date= |accessdate=2014-01-28 |archive-date=2014-02-02 |archive-url=https://web.archive.org/web/20140202092318/https://blog.torproject.org/blog/tor-project-infrastructure-updates |url-status=live }}</ref> which was the reason for the appearance of forks that basically just replaced the bundled Tor.exe with a current one.{{Citation needed|date=January 2016}} In December 2010, an official update finally became available that, among some minor bugfixes, also again included an up-to-date Tor.exe.{{Citation needed|date=January 2016}}

After 2014, all development activity stopped and TorChat has not received any further updates.<ref name="github"/>

==Forks==
A fork was released for OS X in the summer of 2010 by a French developer. The binary (a Cocoa application) and source-code (Objective-C) bundled in a [[Xcode]] 7 project can be downloaded on SourceMac.

A rewrite of the TorChat protocol in [[Java (programming language)|Java]] was created in the beginning of 2012, called jTorChat on [[Google Code]]. Containing the latest Tor.exe, it is meant to emulate all the features of the original TorChat protocol, as well as extending the protocols for jTorChat-specific features. Filesharing, while implemented in the original TorChat, is not yet implemented in jTorChat. A new capability in jTorChat is the broadcast mode, which allows a user to send messages to everybody in the network, even if they are not in their buddylist. Also buddy request mode is implemented, which allows a user to request a random user in the jTorChat network to add them. At this stage jTorChat is designed to work effectively on Windows without any configuration, however since its written in [[Java (programming language)|Java]], it can run on any platform supported by both, Tor and Java itself, making it very portable. The project is actively seeking Java contributors, especially to help debug the GUI interface.

In February 2012, developer Prof7bit moved TorChat to [[GitHub]],<ref name="github">{{Cite web|url = https://github.com/prof7bit/TorChat|title = TorChat2|website = [[GitHub]]|date = 8 December 2021|access-date = 6 February 2012|archive-date = 8 December 2013|archive-url = https://web.archive.org/web/20131208172331/https://github.com/prof7bit/TorChat|url-status = live}}</ref> as a protest against Google selectively censoring access to TorChat download to certain countries.{{Citation needed|date=August 2012}} Prof7bit has switched to working on torchat2, which is a rewrite from scratch, using [[Lazarus (IDE)|Lazarus]] and [[Free Pascal]].<ref>{{Citation |last=K |first=Bernd |title=TorChat2 |date=2022-08-21 |url=https://github.com/prof7bit/TorChat/blob/a58d1fc4ad4c9eb97386cba5707d35d676a7616b/README.markdown |access-date=2022-08-31 |archive-date=2022-08-31 |archive-url=https://web.archive.org/web/20220831124422/https://github.com/prof7bit/TorChat/blob/a58d1fc4ad4c9eb97386cba5707d35d676a7616b/README.markdown |url-status=live }}</ref>{{Citation needed|date=January 2016}}

== Security ==
In 2015 security analysis<ref>{{cite thesis |last=Viigipuu |first=Rain |date=2015 |title=Security Analysis of Instant Messenger TorChat |type=Master's Thesis |publisher=[[Tallinn University of Technology]] |url=https://kodu.ut.ee/~arnis/torchat_thesis.pdf |access-date=24 August 2022 |archive-date=20 August 2022 |archive-url=https://web.archive.org/web/20220820052416/https://kodu.ut.ee/~arnis/torchat_thesis.pdf |url-status=live }}</ref> of TorChat protocol and its Python implementation was conducted. It was found that although the design of TorChat is sound, its implementation has several flaws, which make TorChat users vulnerable to impersonation,
communication confirmation and denial-of-service attacks. Despite the flaws found, the use of TorChat might still be secure in a scenario where the peer's onion address does not become known to an adversary interested in attacking the person behind the TorChat address.

== See also ==
{{Portal|Free and open-source software}}
* [[Bitmessage]]
* [[Briar (software)]]
* [[Tor (anonymity network)]]
* [[Ricochet (software)]]
* [[Tox (protocol)|Tox]]

== References ==
{{reflist}}

== External links ==
{{Commons category|TorChat}}
* {{Github|prof7bit/TorChat}}
* [http://www.sourcemac.com/?page=torchat TorChat for Mac OS X]
* {{Github|jtorchat/jtorchat}}

{{Instant messaging}}
{{Tor project}}
{{Tor hidden services}}

{{DEFAULTSORT:Torchat}}
[[Category:Tor onion services]]
[[Category:Free instant messaging clients]]
[[Category:Free security software]]
[[Category:Tor (anonymity network)]]
[[Category:Free software programmed in Pascal]]
[[Category:Pascal (programming language) software]]
[[Category:Discontinued software]]