Kev ruaj ntseg ceeb toom ceeb toom: los ntawm kev xav mus rau kev xyaum

Hlo Habr!

Hnub no kuv yuav tham txog yam kuv cov npoj yaig thiab kuv tau ua rau ob peb lub hlis tam sim no: thawb cov ntawv ceeb toom rau cov xa xov tooj ntawm tes. Raws li kuv twb tau hais lawm, hauv peb daim ntawv thov qhov tseem ceeb yog kev ruaj ntseg. Yog li ntawd, peb pom tias cov ntawv ceeb toom laub muaj "cov ntsiab lus tsis muaj zog" thiab, yog tias muaj, peb tuaj yeem ua li cas thiaj li yuav tau txais cov kev xaiv no ntxiv rau peb cov kev pabcuam.

Kuv tab tom luam tawm ib qho kev txhais lus ntawm peb cov khoom los ntawm Medium nrog qee qhov me me ntxiv los ntawm kuv tus kheej. Nws muaj cov txiaj ntsig ntawm "kev tshawb nrhiav" thiab ib zaj dab neeg hais txog qhov teeb meem tau daws li cas.

Peb tshuaj xyuas cov khoom

Nyob rau hauv cov qauv classic, thawb cov ntawv ceeb toom ua rau cov tub txib yooj yim rau MITM (Man-in-the-middle) tawm tsam. Piv txwv li, nrog Google, Microsoft, thiab cov qub version ntawm iMessage, daim ntawv thov xa cov yuam sij encryption rau Apple servers - ntawm lub server, cov neeg siv tau lees paub thiab cov lus header (lossis nws cov ntsiab lus) yog decrypted.

Yog li ntawd, muaj lub sijhawm los nyeem cov ntawv xov xwm los ntawm kev nkag mus rau lub laub ceeb toom server. Qhov no txhais tau hais tias txhua qhov encryption ntawm kev sau ntawv tsis muaj txiaj ntsig: cov ntawv ceeb toom thawb tseem yuav tawm hauv qhov muaj peev xwm raug nyeem los ntawm peb tog. Cov neeg sau ntawv ntawm tsab xov xwm tau tham txog qhov muaj peev xwm ua kom ntxaws ntxiv. “Encrypt kom raug” ntawm Xaker.ru, nplooj siab rau txoj kev encrypting lus.

Yog tias koj xav tias Apple thiab Google cov servers yog 100% ruaj ntseg tiv thaiv cov neeg siv cov yuam sij encryption, xav txog qhov tseeb tias lawv cov neeg ua haujlwm tau nkag mus rau lawv. Thiab cov neeg ua haujlwm yog cov neeg.
Txawm hais tias txhua qhov tsis zoo ntawm cov ntawv ceeb toom thawb, ntau tus "kev nyab xeeb" cov neeg xa xov xwm tam sim, suav nrog Cov Teeb Meem thiab Telegram, siv lawv. Txwv tsis pub, cov neeg siv yuav tau "manually" saib xyuas cov lus tshiab los ntawm kev nkag mus rau hauv daim ntawv thov tas li. Qhov no tsis yooj yim heev, thiab cov tub txib sib tw yuav tau txais txiaj ntsig zoo.

Paranoia thiab kev nkag siab zoo

Hauv peb qhov project, peb tau coj qhov teeb meem no ze li ob peb lub hlis dhau los. Peb yuav tsum tau ntxiv ib qho kev ceeb toom kev xaiv kom muaj kev sib tw. Tab sis tib lub sijhawm, tsis txhob qhib qhov chaw ruaj ntseg, vim tias cov ntaub ntawv xau yuav ua rau muaj kev ntseeg siab hauv qhov project.

Txawm li cas los xij, peb twb muaj qhov txiaj ntsig tseem ceeb: peb tus neeg xa xov liaison yog decentralized (cov ntaub ntawv khaws cia hauv blockchain), thiab cov neeg ua haujlwm tsis muaj kev nkag mus rau cov nyiaj. Tsuas yog cov neeg siv muaj cov yuam sij encryption, thiab cov yuam sij pej xeem ntawm interlocutors muaj nyob rau ntawm blockchain los tiv thaiv MITM tawm tsam.

Hauv thawj version ntawm cov ntawv ceeb toom laub, peb txiav txim siab ua si kom nyab xeeb ntau li ntau tau thiab tsis xa cov ntawv xov xwm txhua. Cov kev pabcuam thawb tsis tau txais cov ntawv ntawm cov lus los ntawm cov node, tab sis tsuas yog ib lub teeb liab hais txog qhov tseeb ntawm nws daim ntawv txais nyiaj. Yog li ntawd, tus neeg siv pom qhov "Tshiab lus tau tuaj txog" ceeb toom. Nws muaj peev xwm nyeem nws tsuas yog nyob rau hauv tus tub txib.

Nws ua haujlwm li cas: video.

Tom qab ntawd, peb tau kawm tias Apple cov ntawv ceeb toom tshiab kawg muaj cov yam ntxwv kev nyab xeeb tshiab. Lawv tso tawm UNNotificationServiceExtension, uas tso cai rau cov neeg tsim khoom xa cov ntaub ntawv ceeb toom tag nrho ntawm APNS. Lub app ntawm tus neeg siv kawg lub cuab yeej ces ua qhov kev txiav txim siab (lossis rub tawm cov ntaub ntawv ntxiv) thiab qhia txog kev ceeb toom. Peb coj nws ua lub hauv paus rau qhov thib ob version ntawm kev ceeb toom laub.

Tam sim no peb tau tsim qhov thib ob version ntawm kev ceeb toom laub rau iOS, uas tso cai rau koj los tso saib cov ntawv xov xwm yam tsis muaj kev cuam tshuam txog kev nyab xeeb. Nyob rau hauv lub tswv yim tshiab, lub logic zoo li no:

• Cov kev pabcuam thawb xa ntawv ceeb toom nrog tus lej sib pauv (cov lus encrypted tuaj yeem loj heev, thiab qhov loj ntawm cov ntawv ceeb toom muaj tsawg heev)
• Thaum lub cuab yeej tau txais kev ceeb toom, nws qhib peb Cov Lus Ceeb ToomServiceExtension - ib daim ntawv thov microapplication uas thov kev lag luam los ntawm cov node los ntawm id, decrypts nws siv cov lus cim tseg, thiab xa cov ntawv ceeb toom tshiab rau lub kaw lus. Cov lus zais cia rau hauv qhov chaw ruaj ntseg.
• Lub kaw lus qhia txog kev ceeb toom nrog cov lus decrypted lossis txhais lus.
• Cov yuam sij tsis mus qhov twg, ib yam li cov ntawv nyeem yooj yooj yim. Cov kev pabcuam thawb tsis muaj txoj hauv kev los decrypt cov lus.

Peb lees txais cov ntawv no ua haujlwm thiab siv nws hauv qhov hloov tshiab tshiab ntawm daim ntawv thov iOS no.
Cov neeg nyiam nyob rau sab technical tuaj yeem saib qhov chaws: github.com/Adamant-im/adamant-notificationService.

Tau qhov twg los: www.hab.com