The release of the GNUnet 0.20 framework has been announced, designed for building secure decentralized P2P networks. Networks created using GNUnet do not have a single point of failure and are capable of ensuring the privacy of users' information, including eliminating potential abuses by authorities and administrators who have access to network nodes.
GNUnet supports the creation of P2P networks over TCP, UDP, HTTP/HTTPS, Bluetooth, and WLAN, and can operate in F2F (Friend-to-friend) mode. NAT traversal is supported, including with the use of UPnP and ICMP. A distributed hash table (DHT) can be used for data location addressing. Tools for deploying mesh networks are provided. For selective granting and revocation of access rights, the decentralized attribute exchange service reclaimID is used, which employs GNS (GNU Name System) and attribute-based encryption.
The system features low resource consumption and a multi-processing architecture to ensure isolation between components. Flexible tools for logging and accumulating statistics are provided. For developing end applications, GNUnet offers an API for the C language and bindings for other programming languages. To simplify development, it is recommended to use event loops and processes instead of threads. It includes a testing library for the automatic deployment of experimental networks covering tens of thousands of peers.
Several ready-made applications are being developed based on GNUnet technologies:
- The GNS (GNU Name System) is a completely decentralized and censorship-resistant alternative to DNS. GNS can be used alongside DNS and in traditional applications such as web browsers. Unlike DNS, GNS employs a directed graph instead of a tree-like hierarchy of servers. Name resolution is similar to DNS, but requests and responses are handled with privacy in mind—the node processing the request doesn't know to whom the response is given, and transit nodes and third-party observers cannot decipher the requests and responses. The integrity and immutability of records are ensured through cryptographic mechanisms. A DNS zone in GNS is defined using a pair of ECDSA public and private keys based on the Curve25519 elliptic curves.
- A service for anonymous file sharing that prevents data analysis by transmitting all information in encrypted form and does not allow tracking of who uploaded, searched, or downloaded files through the use of the GAP protocol.
- System VPN for creating hidden services in the '.gnu' domain and tunneling IPv4 and IPv6 over a P2P network. Additionally, it supports IPv4-to-IPv6 and IPv6-to-IPv4 translation schemes, as well as tunneling IPv4 over IPv6 and IPv6 over IPv4.
- The GNUnet Conversation service for making voice calls over GNUnet. GNS is used for user identification, and the content of voice traffic is transmitted in encrypted form. Anonymity is not yet provided—other peers can track the connection between two users and identify them. an IP address.
- A platform for building decentralized social networks, Secushare, that uses the PSYC protocol and supports the multicast distribution of notifications with end-to-end encryption so that only authorized users can access messages, files, chats, and discussions (those to whom messages are not addressed, including node administrators, will not be able to read them);
- A system for organizing encrypted email, pretty Easy privacy, which uses GNUnet to protect metadata and supports various cryptographic protocols for key verification.
- The GNU Taler payment system provides anonymity for buyers while tracking seller transactions to ensure transparency and provide tax reporting. It supports operations with various existing currencies and electronic money, including dollars, euros, and bitcoins.
- The GNUnet Messenger service for creating secure chat applications employs the CADET (Confidential Ad-hoc Decentralized End-to-End Transport) protocol to ensure privacy and protect against message interception, allowing for fully decentralized interaction among a group of users with end-to-end encryption of transmitted data.
The new version of GNUnet includes changes that break protocol compatibility and may lead to issues when interacting with nodes based on GNUnet 0.20 and older releases. Functions GNUNET_STRINGS_get_suffix_from_binary_name and GNUNET_s have been moved to the libgnuneutil library. New functions GNUNET_JSON_spec_object_const, GNUNET_JSON_spec_array_const, GNUNET_PQ_get_oid_by_name, and GNUNET_PQ_get_oid have been added. An API for KEM (Key Encapsulation Mechanism) has been introduced.
Source: opennet.ru
