Idle xav ntawm ib tug neeg tsis ua hauj lwm txog cryptography thiab kev tiv thaiv cov ntaub ntawv

Idle xav ntawm ib tug neeg tsis ua hauj lwm txog cryptography thiab kev tiv thaiv cov ntaub ntawv

Vim li cas cryptoography? Kuv tus kheej muaj kev paub zoo tshaj plaws txog nws. Yog, kuv nyeem cov hauj lwm classic Bruce Schneier, tab sis ntev dhau los; Yog lawm, Kuv nkag siab qhov sib txawv ntawm qhov sib luag thiab asymmetric encryption, Kuv nkag siab tias qhov nkhaus elliptic yog dab tsi, tab sis qhov ntawd yog nws. Ntxiv mus, cov tsev qiv ntawv cryptographic uas twb muaj lawm, nrog rau lawv cov kev cai ntxim hlub ntawm suav nrog lub npe tag nrho ntawm cov algorithm hauv lub npe ntawm txhua txoj haujlwm thiab ib pawg ntawm cov pib pib tawm, ua rau kuv txaus ntshai butthurt ua tus programmer.Idle xav ntawm ib tug neeg tsis ua hauj lwm txog cryptography thiab kev tiv thaiv cov ntaub ntawv
Yog li vim li cas? Tej zaum vim tias thaum nyeem cov yoj tam sim no ntawm cov ntawv tshaj tawm txog kev tiv thaiv cov ntaub ntawv, cov ntaub ntawv tsis pub lwm tus paub, thiab lwm yam, Kuv tau txais kev xav tias peb tab tom khawb qhov chaw tsis ncaj ncees lawm, lossis tshwj xeeb tshaj yog, peb tab tom sim daws qhov tseem ceeb ntawm cov teeb meem kev sib raug zoo nrog kev pab ntawm kev siv tshuab. txhais tau tias (cryptography). Cia peb tham txog qhov no, Kuv tsis cog lus tias lub sijhawm tsim kev tshawb pom, nrog rau cov lus pom zoo, kev xav tsis muaj zog tsuas yog qhov ntawd: tsis ua haujlwm.

Me ntsis keeb kwm, me ntsis xwb

Xyoo 1976, Tebchaws Meskas tau txais kev lees paub los ntawm tsoomfwv tus qauv rau kev sib koom ua ke encryption algorithms - DES. Nws yog thawj pej xeem thiab tus qauv cryptographic algorithm tsim los teb rau kev lag luam loj hlob xav tau kev tiv thaiv cov ntaub ntawv.

Bearded xav paub

Lub algorithm tau luam tawm los ntawm qhov yuam kev. Nws tau ua kom zoo rau kev siv kho vajtse thiab suav tias yog qhov nyuaj heev thiab tsis muaj txiaj ntsig rau kev siv software. Txawm li cas los xij, Moore Txoj Cai sai sai muab txhua yam hauv nws qhov chaw.

Nws yuav zoo li - qhov kawg ntawm zaj dab neeg, coj nws, encrypt, decrypt, yog tias tsim nyog, nce qhov ntev ntawm tus yuam sij. Tej zaum koj paub tseeb tias cov neeg Amelikas tau tso cov ntawv sau tseg hauv nws, tom qab ntawd muaj cov lus Lavxias rau koj - GOST 28147-89, uas tej zaum koj yuav ntseeg tsawg dua. Tom qab ntawd siv ob qho tib si, ib qho rau saum lwm qhov. Yog tias koj ntseeg tias FBI thiab FSB koom ua ke rau koj lub hom phiaj thiab pauv lawv cov ntawv sau tseg, ces kuv muaj xov xwm zoo rau koj - koj tsis ntshai, koj muaj kev xav tsis thoob ntawm qhov loj.
Yuav ua li cas symmetric encryption ua haujlwm? Ob tus neeg koom paub tib tus yuam sij, tseem hu ua tus password, thiab dab tsi yog encrypted nrog nws kuj tuaj yeem decrypted nrog nws. Cov tswv yim ua haujlwm zoo rau cov neeg soj xyuas, tab sis tsis tsim nyog rau lub Internet niaj hnub no, txij li tus yuam sij no yuav tsum tau xa mus rau txhua tus interlocutors ua ntej. Rau qee lub sijhawm, txawm tias qee lub tuam txhab tiv thaiv lawv cov ntaub ntawv thaum sib txuas lus nrog tus khub yav dhau los paub, qhov teeb meem tau daws nrog kev pab los ntawm couriers thiab xa ntawv ruaj ntseg, tab sis tom qab ntawd Internet tau nthuav dav thiab tuaj rau hauv daim duab.

Asymmetric cryptography

qhov twg muaj ob tug yuam sij: pej xeem, uas tsis yog khaws cia zais cia thiab yog sib txuas lus rau leej twg; Thiab tus kheej, uas tsuas yog nws tus tswv paub. Dab tsi yog encrypted nrog tus yuam sij pej xeem tuaj yeem tsuas yog decrypted nrog tus kheej, thiab rov ua dua. Yog li, leej twg tuaj yeem tshawb pom tus yuam sij pej xeem ntawm tus neeg tau txais kev pab thiab xa lus rau nws, tsuas yog tus neeg txais yuav nyeem nws. Nws yuav zoo li qhov teeb meem daws tau?
Tsis tau internet tsis ua hauj lwm li ntawd, qhov teeb meem tshwm sim nyob rau hauv tag nrho cov quab yuam kev lees paub thiab tshwj xeeb tshaj yog, pib authentication, thiab nyob rau hauv ib co kev nkag siab qhov opposite teeb meem tsis qhia npe. Ua ntej, kuv yuav ua li cas thiaj paub tseeb tias tus neeg uas kuv tham nrog yog tus neeg kuv xav tham nrog tiag tiag? thiab tus yuam sij pej xeem kuv siv tiag tiag yog tus neeg kuv yuav tham nrog? Tshwj xeeb yog tias qhov no yog thawj zaug uas kuv tau nrog nws tham? Thiab yuav ua li cas koj thiaj li muaj kev ntseeg siab rau koj tus khub thaum tswj tsis qhia npe? Twb tau nyob ntawm no, yog tias koj saib ze, koj tuaj yeem pom qhov tsis sib xws sab hauv.
Cia peb saib hauv cov ntsiab lus dav dav ntawm cov qauv kev sib cuam tshuam ntawm cov neeg koom nrog thiab siv hauv kev xyaum:

  • server - server (lossis kev lag luam - kev lag luam, hauv cov ntsiab lus no lawv yog tib yam): qhov no yog qhov yooj yim tshaj plaws classical scheme, uas symmetric cryptography yog txaus txaus, cov neeg koom paub txhua yam txog ib leeg, suav nrog kev sib cuag hauv network. Txawm li cas los xij, thov nco ntsoov tias peb tseem tsis tau hais txog qhov tsis qhia npe ntawm no, thiab tus naj npawb ntawm cov neeg tuaj koom nruj me ntsis txwv rau ob. Ntawd yog, qhov no yog qhov yuav luag zoo tshaj plaws rau kev sib txuas lus tsawg kawg nkaus thiab, feem ntau, yog qhov tseeb ntawm kev siv me me.
  • neeg rau zaub mov - tsis qhia npe (los yog lag luam - tus neeg siv): muaj qee qhov asymmetry ntawm no, uas tau ua tiav los ntawm asymmetric cryptography. Lub ntsiab lus tseem ceeb ntawm no yog qhov tsis muaj kev lees paub tus neeg siv khoom; tus neeg rau zaub mov tsis quav ntsej nrog leej twg raws nraim nws pauv cov ntaub ntawv; yog tias xav tau tam sim ntawd, lub server ua haujlwm thib ob authentication siv tus password uas tau pom zoo ua ntej, thiab tom qab ntawd txhua yam los rau hauv rooj plaub dhau los. Ntawm qhov tod tes, tus neeg siv khoom tseem ceeb heev server authentication, nws xav kom paub tseeb tias nws cov ntaub ntawv mus txog raws nraim tus neeg uas nws xa nws, sab hauv kev xyaum yog raws li ib tug daim ntawv pov thawj system. Feem ntau, cov tswv yim no yooj yim heev thiab pob tshab npog los ntawm https:// raws tu qauv, tab sis ob peb lub ntsiab lus nthuav dav tshwm sim ntawm kev sib tshuam ntawm cryptography thiab sociology.
    1. ntseeg hauv server: txawm tias kuv xa qee cov ntaub ntawv mus rau sab qaum teb hauv txoj kev nyab xeeb kiag li, cov neeg sab nraud tuaj yeem nkag mus rau nws nyob ntawd. Qhov teeb meem no yog tag nrho sab nraud ntawm kev encryption, tab sis kuv hais kom koj nco ntsoov cov ntsiab lus no, nws yuav tuaj tom qab.
    2. tso siab rau hauv daim ntawv pov thawj neeg rau zaub mov: lub hierarchy ntawm daim ntawv pov thawj yog nyob ntawm qhov tseeb tias muaj qee yam hauv paus daim ntawv pov thawj tsim nyog kiag li ntseeg. Technically, tus neeg tawm tsam txaus ntshai [thov xav txog lo lus tawm tsam raws li cov lus qhia, thiab tsis yog kev hais lus phem lossis kev thuam rau tsoomfwv uas twb muaj lawm] tuaj yeem hloov daim ntawv pov thawj ntawm qib qis, tab sis nws xav tias yuav tsum muaj ntawv pov thawj los ntawm txhua tus neeg. sib, i.e. daim ntawv pov thawj no yuav raug cuam tshuam tam sim ntawd thiab tag nrho nws daim ntawv pov thawj yuav raug tshem tawm. Yog li nws yog li ntawd, tab sis tseem nco ntsoov tias lub kaw lus tsis yog raws li kev txhais tau tias, tab sis ntawm qee yam kev cog lus ntawm kev sib raug zoo. Los ntawm txoj kev, txog kubRaws li ib feem ntawm qhov xav tau doomsday pupation ntawm RuNet, puas muaj leej twg txheeb xyuas qhov ua tau ntawm cov ntawv pov thawj Lavxias thiab qhov tshwm sim? Yog tias leej twg tau nyeem / sau rau ntawm lub ncauj lus no, xa cov ntawv txuas rau kuv, Kuv yuav ntxiv rau lawv, Kuv xav tias lub ncauj lus nthuav dav
    3. indirect de-anonymization ntawm tus neeg rau zaub mov: kuj yog ib qho mob, txawm tias tus neeg rau zaub mov tsis muaj kev tso npe / kev lees paub, muaj ntau txoj hauv kev los sau cov ntaub ntawv hais txog tus neeg siv khoom thiab thaum kawg txheeb xyuas nws. Nws zoo nkaus li kuv tias lub hauv paus ntawm qhov teeb meem yog nyob rau hauv qhov uas twb muaj lawm http:// raws tu qauv thiab lwm tus neeg nyiam nws, uas, raws li kev cia siab, tsis tuaj yeem pom qhov kev npau taws zoo li no; thiab hais tias nws yuav ua tau heev los tsim ib tug parallel raws tu qauv yam tsis muaj punctures. Txawm li cas los xij, qhov no tawm tsam txhua qhov kev coj ua nyiaj txiag uas twb muaj lawm thiab yog li tsis zoo li. Tseem xav tsis thoob, puas muaj leej twg sim?
  • tsis qhia npe - tsis qhia npe: ob tug neeg ntsib hauv online, (kev xaiv - tsuas yog ntsib), (kev xaiv - tsis yog ob tab sis ob txhiab), thiab xav tham txog lawv tus kheej, tab sis nyob rau hauv xws li ib txoj kev uas Tij laug tsis hnov ​​(kev xaiv: niam tsis pom, txhua tus muaj lawv tus kheej qhov tseem ceeb). Koj tuaj yeem hnov ​​​​txog kuv lub suab, tab sis qhov ntawd yog vim qhov ntawd yog qhov nws yog. Cia peb siv Schneier's postulate rau qhov teeb meem (ib qho algorithm tuaj yeem tawg yog tias muaj peev txheej txaus nqis peev, uas yog, nyiaj thiab sijhawm). Los ntawm qhov kev xav no, kev nkag mus rau hauv cov pab pawg no los ntawm kev sib raug zoo tsis sawv cev rau qhov nyuaj, tsis hais txog nyiaj, uas yog, lub zog cryptographic ntawm lub algorithm. xoom nrog cov txheej txheem encryption tshaj plaws.
    Txawm li cas los xij, rau rooj plaub no peb muaj lub bastion thib ob - tsis qhia npe, thiab peb tso tag nrho peb txoj kev cia siab rau nws, txawm tias txhua tus paub peb, tab sis tsis muaj leej twg tuaj yeem nrhiav tau peb. Txawm li cas los xij, nrog cov txheej txheem niaj hnub tshaj plaws ntawm kev tiv thaiv, koj puas xav tias koj muaj sijhawm? Cia kuv ceeb toom rau koj tias tam sim no kuv tsuas yog tham txog kev tsis qhia npe; nws zoo nkaus li tias peb twb tau ua tiav nrog kev tiv thaiv cov ntaub ntawv. Kom meej meej, cia peb pom zoo tias yog koj lub npe paub los yog chaw nyob los yog IP chaw nyob, turnout ua tsis tiav kiag li.
    Hais txog ip, qhov no yog qhov saum toj no los ua si ntseeg hauv server, nws paub koj tus IP yam tsis muaj kev poob siab. Thiab ntawm no txhua yam ua si tawm tsam koj - los ntawm tib neeg kev xav paub yooj yim thiab saib tsis taus, mus rau kev tswj hwm kev lag luam thiab tib qho nyiaj txiag. Tsuas yog nco ntsoov tias VPS thiab VPN kuj yog cov servers; rau cov kws tshawb fawb cryptography, cov ntawv luv no tsis muaj feem cuam tshuam; Yog, thiab kev txiav txim siab ntawm tus neeg rau zaub mov tsis ua lub luag haujlwm thaum xav tau zoo. Qhov no kuj suav nrog qhov kawg-rau-kawg encryption - nws suab zoo thiab ruaj khov, tab sis tus neeg rau zaub mov tseem yuav tsum coj nws lo lus rau nws.
    Dab tsi yog lub luag haujlwm ntawm tus neeg rau zaub mov hauv tus neeg xa xov zoo li no? Ua ntej, nws yog qhov tsis tseem ceeb rau tus neeg xa ntawv, yog tias tus neeg tau txais tsis nyob hauv tsev, rov qab los dua. Tab sis kuj, thiab qhov no tseem ceeb dua, qhov no yog lub rooj sib tham, koj tsis tuaj yeem xa tsab ntawv ncaj qha mus rau tus neeg txais, koj xa mus rau tus neeg rau zaub mov kom xa mus ntxiv. Thiab qhov tseem ceeb tshaj, lub server ua haujlwm tsim nyog authentication, lees paub rau txhua tus tias koj yog koj, thiab rau koj - tias koj tus interlocutor yog qhov koj xav tau tiag tiag. Thiab nws ua qhov no siv koj lub xov tooj.
    Koj tsis xav tias koj tus tub txib paub koj ntau dhau lawm? Tsis yog, tsis yog, tau kawg peb ntseeg nws (thiab los ntawm txoj kev, peb lub xov tooj tib lub sijhawm, hmm), tab sis cov kws sau ntawv sau cia peb paub tias qhov no tsis muaj tseeb, uas peb tsis tuaj yeem tso siab rau leej twg.
    Tsis ntseeg? Tab sis kuj tseem muaj kev sib raug zoo tib yam, yog tias koj muaj ntau pua tus neeg sib tham hauv ib pawg, koj tsuas yog xav tias 50% ntawm lawv yog cov yeeb ncuab, 49% yog qhov tsis muaj txiaj ntsig, ruam, lossis tsis saib xyuas. Thiab qhov seem ib feem pua, txawm tias koj muaj zog npaum li cas hauv cov ntaub ntawv kev ruaj ntseg, koj feem ntau yuav tsis tuaj yeem tiv thaiv tus kws kho mob zoo hauv kev sib tham.
    Lub tswv yim tiv thaiv nkaus xwb zoo li yuav ploj ntawm ntau lab ntawm cov pab pawg zoo sib xws, tab sis qhov no tsis yog hais txog peb, dua li qee tus neeg soj xyuas cov neeg ua phem uas tsis xav tau lub koob meej hauv online lossis nyiaj txiag.

Zoo, nws zoo li kuv tias kuv tau lees paub qee yam (tsis yog, kuv tsis tau ua pov thawj, kuv tsuas yog lees paub) kuv cov kev xav hnyav txog kev tiv thaiv cov ntaub ntawv hauv cov qauv niaj hnub ntawm zej zog. Cov lus xaus yog qhov yooj yim tab sis tu siab - peb yuav tsum tsis txhob suav nrog kev pab ntau dua los ntawm cov ntaub ntawv encryption ntau dua li peb twb muaj lawm, cryptography tau ua txhua yam nws ua tau, thiab ua tau zoo, tab sis peb tus qauv hauv Is Taws Nem cuam tshuam tag nrho peb txoj kev xav rau kev ceev ntiag tug thiab ua rau tag nrho peb cov kev siv zog. . Qhov tseeb, kuv yeej tsis yog ib tug pessimist thiab kuv yeej xav hais tej yam kaj tam sim no, tab sis kuv tsuas yog tsis paub dab tsi.
Sim saib mus rau ntu tom ntej, tab sis kuv ceeb toom koj - muaj cov xim liab dawb uas tsis paub txog kev xav, tab sis lawv yuav ua rau ib tus neeg muaj kev ntseeg siab, thiab tsawg kawg tsuas yog txaus siab rau ib tus neeg.

Puas muaj peev xwm ua tau txhua yam?

Zoo, piv txwv li, xav txog cov ncauj lus no, zoo dua los ntawm kev tso koj lub siab xav thiab pov tseg cov kev xav tsis zoo. Piv txwv li, cia ib ntus tag nrho cia peb txi tsis qhia npe, txawm yuav zoo npaum li cas los nws yuav zoo mloog. Cia txhua tus neeg tau txais ib tus yuam sij rau pej xeem tshwj xeeb txij thaum yug los, thiab tus yuam sij ntiag tug sib xws, tau kawg. Tsis tas yuav qw rau kuv thiab tsuj koj txhais taw, lub ntiaj teb zoo tagnrho qhov no yog qhov yooj yim heev - ntawm no koj muaj koj daim ntawv hla tebchaws, tus lej cim se, thiab txawm tias tus lej xov tooj hauv ib lub raj mis. Ntxiv mus, yog tias koj ntxiv ib daim ntawv pov thawj rau qhov no, koj tau txais kev lees paub thoob ntiaj teb / nkag mus; thiab tseem muaj lub hnab tshos notary nrog lub peev xwm los lees paub cov ntaub ntawv. Koj tuaj yeem ua rau lub kaw lus ntau theem - tsuas yog pej xeem tus yuam sij thiab daim ntawv pov thawj muaj rau pej xeem, rau cov phooj ywg (cov npe ntawm cov yuam sij uas tau txuas rau ntawm no) koj tuaj yeem ua rau koj lub xov tooj muaj thiab lwm yam uas lawv ntseeg cov phooj ywg, tej zaum yuav muaj qhov tob dua. theem, tab sis qhov no twb qhia tsis tsim nyog kev ntseeg siab nyob rau hauv lub server.
Nrog rau cov tswv yim no, kev ceev ntiag tug ntawm cov ntaub ntawv xa mus tau tiav (txawm tias ntawm qhov tod tes, vim li cas, hauv lub ntiaj teb zoo tagnrho?), Alice sau ib yam dab tsi rau Bob, tab sis tsis muaj leej twg yuav tau nyeem nws tsuas yog Bob nws tus kheej. Txhua tus neeg xa xov tuaj yeem tau txais qhov kawg-rau-kawg encryption, lawv lub luag haujlwm raug txo rau hauv cov thawv ntawv thiab, hauv txoj cai, tsis tuaj yeem tsis txaus siab txog cov ntsiab lus. Thiab cov servers lawv tus kheej tuaj yeem hloov pauv tau, koj tuaj yeem xa los ntawm ib qho, lossis los ntawm lwm tus, lossis txawm tias los ntawm cov saw ntawm cov servers, zoo li email. Koj tuaj yeem xa ncaj qha mus rau tus neeg txais yog tias nws tus IP paub, yam tsis muaj kev sib cuag nrog tus neeg nruab nrab txhua. Tsis zoo li ntawd? Nws tsuas yog kev khuv leej uas peb yuav tsis tau nyob hauv lub sijhawm zoo no - tsis yog rau kuv lossis rau koj. Nn-yog, dua kuv tham txog tej yam tu siab.
Tom ntej no, qhov twg khaws tag nrho cov no? Zoo, tawm sab saum toj ntawm kuv lub taub hau, tsim ib qho qhib hierarchical system, ib yam dab tsi zoo li DNS tam sim no, tsuas yog muaj zog dua thiab dav. Txhawm rau kom tsis txhob muaj lub nra hnyav rau hauv paus DNS cov thawj coj nrog kev ntxiv thiab kev hloov kho, koj tuaj yeem sau npe pub dawb, tsuas yog kos npe tsim nyog rau qhov tsis sib xws. Zoo li >> " Nyob zoo, peb yog tsib tus neeg, tsev neeg Ivanov. Nov yog peb cov npe/npe, ntawm no yog cov yuam sij rau pej xeem. Yog leej twg nug, thov xa tuaj rau peb. Thiab ntawm no yog ib daim ntawv teev npe ntawm ib puas thiab tsib puas pog los ntawm peb cheeb tsam nrog lawv cov yawm sij, yog tias lawv nug, xa lawv rau peb thiab.Β«
Koj tsuas yog yuav tsum ua kom lub installation thiab teeb tsa ntawm lub tsev neeg rau zaub mov no yooj yim heev thiab yooj yim, yog li leej twg tuaj yeem paub nws yog tias lawv xav tau, dua, tsis muaj leej twg yuav rov thauj cov nom tswv servers.
Tso tseg nws!, tab sis lub xeev yuav ua li cas nrog nws?

Tab sis tam sim no koj tuaj yeem ua tib zoo rov qab tsis qhia npe. Yog tias leej twg tuaj yeem tsim tus yuam sij rau lawv tus kheej thiab lees paub nws nrog daim ntawv pov thawj tus kheej thiab teeb tsa CA server qis rau lawv tus kheej, lossis nug ib tus neeg nyob ze, lossis rau qee tus neeg rau zaub mov pej xeem, vim li cas txhua qhov kev ua haujlwm no xav tau? Thiab tom qab ntawd tsis tas yuav tsum tau txuas nrog tus cwj pwm tiag tiag, ua tiav kev ceev ntiag tug, kev ruaj ntseg thiab tsis qhia npe. Nws yog txaus hais tias thaum pib ntawm lub hierarchy muaj ib tug neeg ntseeg, zoo, peb ntseeg hais tias nyob rau hauv TM los yog Let's Encrypt, thiab cov neeg paub zoo DNSs tseem tsis tau xa leej twg mus rau steppe. Nws zoo li yuav tsum tsis muaj kev tsis txaus siab los ntawm bureaucrats ib yam, uas yog, tau kawg yuav muaj kev tsis txaus siab, tab sis mus txog qhov kawg?
Tej zaum muaj ib hnub zoo li no, lossis ib yam dab tsi zoo sib xws, yuav raug tsim. Thiab ntawm chav kawm, peb tsis muaj leej twg yuav suav tau tab sis peb tus kheej; tsis muaj ib lub xeev uas paub rau kuv yuav tsim kom muaj lub cev zoo li no. Hmoov zoo, uas twb muaj lawm Telegram, i2p, Tor, thiab tej zaum lwm tus neeg uas kuv tsis nco qab, qhia tias tsis muaj dab tsi yog qhov ua tsis tau. Qhov no yog peb lub network, thiab peb yuav tsum muab nws yog tias peb tsis txaus siab rau lub xeev tam sim no.
Brrr, Kuv tsis nco qab xaus ntawm daim ntawv mob siab. Qhov tseeb, kuv tsis nyiam qhov no, kuv nyiam sarcasm.

PS: Qhov no yog tag nrho, ntawm chav kawm, liab snot thiab girlish npau suav
PPS: tab sis yog tias tam sim ntawd ib tug neeg txiav txim siab sim nws, tseg lub npe menyuam yaus rau kuv degs thov, kuv tau siv rau nws
PPPS: thiab qhov kev siv zoo li yooj yim heev los ntawm txoj kev

Tau qhov twg los: www.hab.com

Ntxiv ib saib