# ScrambleSuit: A Polymorph Network Protocol to Circumvent Censorship

arXiv: https://arxiv.org/abs/1305.3199 · HTML: https://mlsanity.com/paper/1305.3199/

## Key facts

- Cited by 2 papers in the map (data through 14 Oct 2026).
- First posted on arXiv 14 May 2013.

## Built on by (most cited first, 2 of 2)

- [Amoeba: Circumventing ML-supported Network Censorship via Adversarial Reinforcement Learning](https://mlsanity.com/paper/2310.20469/) (2023)
- [One-Prompt Censorship Evasion via Generative Diffusion Models](https://mlsanity.com/paper/2606.22717/) (2026)

## Abstract (arXiv)

Deep packet inspection technology became a cornerstone of Internet censorship by facilitating cheap and effective filtering of what censors consider undesired information. Moreover, filtering is not limited to simple pattern matching but makes use of sophisticated techniques such as active probing and protocol classification to block access to popular circumvention tools such as Tor. In this paper, we propose ScrambleSuit; a thin protocol layer above TCP whose purpose is to obfuscate the transported application data. By using morphing techniques and a secret exchanged out-of-band, we show that ScrambleSuit can defend against active probing and other fingerprinting techniques such as protocol classification and regular expressions. We finally demonstrate that our prototype exhibits little overhead and enables effective and lightweight obfuscation for application layer protocols.