release (NNCP) is a set of utilities for secure file transfer, email, and command execution in mode . It operates on POSIX-compatible operating systems. The utilities are written in Go and are distributed under the GPLv3 license.
The utilities are aimed at assisting in the construction of small peer-to-peer networks (a dozen nodes) with static routing for secure file transmission in fire-and-forget mode, file requests, emails, and command execution requests. All packets transmitted are end-to-end and are explicitly authenticated using known public keys of friends. Onion (as in Tor) encryption is applied to all intermediate packets. Each node can act as both a client and a server and use both push and poll behavior.
between NNCP and solutions like and (FidoNet Technology Network), aside from the aforementioned encryption and authentication, is the built-in support for and computers that are physically isolated () from unsafe local and public networks. Another feature of NNCP is its easy integration (along with UUCP) with existing mail servers like Postfix and Exim.
Potential use cases for NNCP include organizing mail sending/receiving on devices without a permanent internet connection, file transfer in unstable network conditions, secure transmission of very large volumes of data on physical media, creating isolated data transmission networks that are resilient to MitM attacks, circumventing network censorship and surveillance. Since the decryption key is only with the recipient, regardless of the delivery paths of the packet over the network or through physical media, third parties cannot read the content, even if they intercept the transmission. In turn, digital signature authentication prevents the formation of a fake transmission posing as another sender. Among the innovations in NNCP 5.0.0, compared to
the previous news The project's license has changed from GPLv3+ to GPLv3-only, due to a lack of trust in
- The FSF after Full-featured
- A full-fledged is used ChaCha20-Poly135 encryption with 128 KiB blocks. This allows for immediate authentication of data in encrypted packets, rather than encountering an error at the end of reading the entire ciphertext;
- The configuration file format has changed from to . The latest library is significantly simpler and smaller, while maintaining similar ease of use for human interaction with the configuration;
- The zlib compression algorithm has been replaced with : a significant increase in compression speed with substantially better efficiency;
- now includes the option to view available packages (-list) on the remote side without downloading them. It also allows selective downloading of packages (-pkts);
- now includes the -inetd option, allowing it to run under or, for example, through SSH;
- Online connections can be made not only directly over TCP, but also by invoking external commands and communicating through stdin/stdout. For example: nncp-call gw.stargrave.org "|ssh gw.stargrave.org nncp-daemon -inetd";
- The friendliness of commands to umask (using extended access rights like 666/777) and the ability to globally set umask through , simplifying usage among multiple users;
- Full utilization of the .
Source: opennet.ru
