Trustworthy Routing with the ToraProtocol