Suppose an intermediate node for onion routing were malicious, exposing the source and destination of communications it forwarded. Clearly the disclosure would damage the confidentiality onion routing was designed to achieve. If the malicious node were one of the two in the middle, what would be exposed. If it were one of three, what would be lost. Explain your answer in terms of the malicious node in each of the first, second, and third positions. How many nonmalicious nodes are necessary to preserve privacy?