{"id":56034,"date":"2020-02-03T00:00:00","date_gmt":"2020-02-02T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami"},"modified":"2020-02-18T14:04:12","modified_gmt":"2020-02-18T11:04:12","slug":"proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","title":{"rendered":"TFC-projektet udvikler et paranoid sikkert messagesystem.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Som en del af projektet TFC<\/a><\/noindex> (Tinfoil Chat) er der gjort et fors\u00f8g p\u00e5 at skabe en prototype af et paranoid sikkert messagesystem, som ville bevare hemmeligheden om kommunikationen selv ved kompromittering af de endelige enheder. For at forenkle revisionen er projektets kode skrevet i Python og tilg\u00e6ngelig<\/a><\/noindex> under GPLv3 licens.<\/p>\n

De nuv\u00e6rende messagesystemer, der bruger ende-til-ende-kryptering, beskytter kommunikationen mod aflytning p\u00e5 mellemliggende servere og mod analyse af transit-trafik, men beskytter ikke mod problemer p\u00e5 klientens side. For at kompromittere systemer baseret p\u00e5 ende-til-ende-kryptering er det tilstr\u00e6kkeligt at kompromittere operativsystemet, firmware eller messaging-app p\u00e5 den endelige enhed, for eksempel ved at udnytte tidligere ukendte s\u00e5rbarheder, ved oprindeligt at indf\u00f8re software- eller hardwarebagd\u00f8re i enheden eller ved at levere en falsk opdatering med en bagd\u00f8r (for eksempel under pres fra myndighederne eller kriminelle grupper). Selv hvis n\u00f8glerne til kryptering ligger p\u00e5 en separat token, er der altid mulighed for at spore processerne, aflytte data fra tastaturet og overv\u00e5ge output p\u00e5 sk\u00e6rmen, n\u00e5r der er kontrol over brugerens system.<\/p>\n

TFC tilbyder et software-hardware-kompleks, der kr\u00e6ver anvendelse af tre separate computere p\u00e5 klientsiden og en specialiseret hardware-splitter. Al trafik under interaktionen mellem deltagerne i messagesystemet sendes gennem det anonyme netv\u00e6rk Tor, og programmerne til messaging fungerer som skjulte Tor-tjenester (brugerne identificeres under messaging ved hj\u00e6lp af adresserne til de skjulte tjenester og n\u00f8glerne). <\/p>\n

\"TFC-projektet<\/a><\/noindex><\/center><\/p>\n

Den f\u00f8rste computer fungerer som gateway til tilslutning til netv\u00e6rket og opstart af den skjulte Tor-tjeneste. Gatewayen manipulerer kun med allerede krypterede data, mens de to andre computere bruges til kryptering og dekryptering. Den anden computer kan kun bruges til dekryptering og visning af modtagne beskeder, mens den tredje kun bruges til kryptering og afsendelse af nye beskeder. Den anden computer har derfor kun n\u00f8gler til dekryptering, mens den tredje kun har n\u00f8gler til kryptering. <\/p>\n

Den anden og tredje computer har ikke direkte forbindelse til nettet og er adskilt fra gateway-computeren med en speciel USB-splitter, der bruger princippet \u00abdata diode<\/a><\/noindex>\u00bb og kun tillader data at passere fysisk i \u00e9n retning. Splitteren tillader kun sending af data mod den anden computer og kun modtagelse af data fra den tredje computer. Retningen for data i splitteren begr\u00e6nses ved hj\u00e6lp af optokoblere<\/a><\/noindex> (en simpel afbrydelse af Tx- og Rx-linjerne i kabel er ikke tilstr\u00e6kkelig, da afbrydelsen ikke udelukker transmission af data i modsat retning og ikke garanterer, at Tx-linjen ikke vil blive brugt til at l\u00e6se, og Rx til at sende). Splitteren kan laves af let tilg\u00e6ngelige materialer, skemaerne er vedh\u00e6ftet<\/a><\/noindex> (PCB<\/a><\/noindex>) og er tilg\u00e6ngelige under GNU FDL 1.3-licensen. <\/p>\n

\"TFC-projektet<\/a><\/noindex><\/center><\/p>\n

Med en s\u00e5dan ops\u00e6tning vil kompromittering af gatewayen forhindrer<\/a><\/noindex> f\u00e5 adgang til krypteringsn\u00f8glerne og forhindre yderligere angreb p\u00e5 de resterende enheder. I tilf\u00e6lde af kompromittering af computeren, hvor n\u00f8glerne til dekryptering er gemt, kan oplysningerne ikke overf\u00f8res til omverdenen, da datastreamen kun er begr\u00e6nset til modtagelse af oplysninger, og den omvendte overf\u00f8rsel blokeres af datadioden.<\/p>\n

\"TFC-projektet<\/a><\/noindex><\/center><\/p>\n

Kryptering er udf\u00f8rt med 256-bit n\u00f8gler baseret p\u00e5 XChaCha20-Poly1305, og en langsom hash-funktion bruges til at beskytte n\u00f8glerne med et password Argon2id<\/a><\/noindex>. Til n\u00f8gleudveksling anvendes X448<\/a><\/noindex> (Diffie-Hellman-protokollen baseret p\u00e5 Curve448) eller PSK-n\u00f8gler (pre-shared<\/a><\/noindex>). Hver meddelelse overf\u00f8res i perfekt fremadrettet hemmelighed (PFS, Perfect Forward Secrecy<\/a><\/noindex>) baseret p\u00e5 hashes fra Blake2b, hvor compromittering af \u00e9n af de langsigtede n\u00f8gler ikke tillader dekryptering af tidligere opsnappede sessioner. Applikationens interface er meget enkelt og inkluderer et vindue opdelt i tre omr\u00e5der \u2014 afsendelse, modtagelse og en kommandolinje med log over interaktionen med gatewayen. Kontrollen foreg\u00e5r gennem en speciel kommando s\u00e6t<\/a><\/noindex>.<\/p>\n

\"TFC-projektet<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 TFC (Tinfoil Chat) \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e-\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u043b\u0430 \u0431\u044b \u0442\u0430\u0439\u043d\u0443 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0438 \u0434\u0430\u0436\u0435 \u043f\u0440\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv3. \u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0435 \u043d\u044b\u043d\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0441\u043a\u0432\u043e\u0437\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u043e\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043d\u0430 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-56034","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 TFC-projektet udvikler et paranoid-beskyttet meddelelsessystem | ProHoster","description":"Som en del af TFC (Tinfoil Chat) projektet er der gjort et fors\u00f8g p\u00e5 at skabe en prototype af et paranoid-beskyttet meddelelsessystem, der.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 TFC \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 | ProHoster","og:description":"\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 TFC (Tinfoil Chat) \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e-\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-02T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"56034","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:32:32","updated":"2022-10-06 03:45:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/56034","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=56034"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/56034\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=56034"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=56034"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=56034"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}