Kudelski Security, lub tuam txhab tshwj xeeb hauv kev soj ntsuam kev nyab xeeb, luam tawm Oramfs cov ntaub ntawv nrog kev siv ORAM (Oblivious Random Access Machine) thev naus laus zis, uas npog cov ntaub ntawv nkag mus rau cov qauv. Lub phiaj xwm tau tshaj tawm FUSE module rau Linux nrog kev siv cov txheej txheem cov ntaub ntawv uas tsis tso cai rau taug qab cov qauv ntawm kev sau thiab nyeem cov haujlwm. Oramfs code yog sau hauv Rust thiab muaj ntawv tso cai raws li GPLv3.
ORAM thev naus laus zis cuam tshuam nrog kev tsim lwm txheej ntxiv rau kev encryption, uas tsis tso cai rau ib tus los txiav txim qhov xwm txheej tam sim no thaum ua haujlwm nrog cov ntaub ntawv. Piv txwv li, yog tias siv encryption thaum khaws cov ntaub ntawv hauv qhov kev pabcuam thib peb, cov tswv ntawm cov kev pabcuam no tsis tuaj yeem paub cov ntaub ntawv nws tus kheej, tab sis tuaj yeem txiav txim siab seb cov blocks twg tau nkag mus thiab ua haujlwm li cas. ORAM zais cov ntaub ntawv hais txog qhov twg ntawm FS tau nkag mus thiab ua haujlwm zoo li cas (nyeem lossis sau ntawv).
Oramfs muab cov txheej txheem txheej txheem thoob ntiaj teb uas tso cai rau koj kom yooj yim lub koom haum ntawm cov ntaub ntawv khaws cia ntawm ib qho chaw cia sab nraud. Cov ntaub ntawv yog khaws cia encrypted nrog yeem authentication. ChaCha8, AES-CTR thiab AES-GCM algorithms tuaj yeem siv rau encryption. Cov qauv hauv kev sau ntawv thiab nyeem nkag tau muab zais siv Path ORAM scheme. Nyob rau hauv lub neej yav tom ntej, lwm yam schemes yog npaj yuav siv, tab sis nyob rau hauv nws daim ntawv tam sim no, txoj kev loj hlob tseem nyob rau hauv lub prototype theem, uas yog tsis pom zoo rau siv nyob rau hauv ntau lawm systems.
Oramfs tuaj yeem siv nrog txhua cov ntaub ntawv kaw lus thiab tsis nyob ntawm hom phiaj sab nraud cia - nws muaj peev xwm synchronize cov ntaub ntawv rau txhua qhov kev pabcuam uas tuaj yeem txuas rau hauv daim ntawv teev npe hauv zos (SSH, FTP, Google Drive, Amazon S3. , Dropbox, Google Cloud Storage, Mail.ru Huab, Yandex.Disk thiab lwm yam kev pabcuam txhawb nqa hauv rclone lossis uas muaj FUSE modules rau mounting). Qhov loj me me tsis kho thiab yog tias xav tau qhov chaw ntxiv, ORAM qhov loj tuaj yeem nce ntxiv.
Kev teeb tsa Oramfs los ntawm kev txhais ob lub npe - pej xeem thiab ntiag tug, uas ua raws li server thiab tus neeg siv khoom. Cov ntaub ntawv pej xeem tuaj yeem yog cov npe hauv cov ntaub ntawv hauv zos uas txuas nrog cov chaw khaws cia sab nraud los ntawm kev txhim kho lawv ntawm SSHFS, FTPFS, Rclone thiab lwm yam FUSE modules. Cov ntaub ntawv ntiag tug yog muab los ntawm Oramfs FUSE module thiab tsim los ua haujlwm ncaj qha nrog cov ntaub ntawv khaws cia hauv ORAM. Cov ntaub ntawv ORAM duab nyob rau hauv cov ntaub ntawv pej xeem. Ib qho kev ua haujlwm nrog cov ntaub ntawv ntiag tug cuam tshuam rau lub xeev ntawm cov ntaub ntawv duab no, tab sis cov ntaub ntawv no zoo li tus neeg saib xyuas sab nraud zoo li lub thawv dub, cov kev hloov pauv uas tsis tuaj yeem cuam tshuam nrog kev ua haujlwm hauv cov ntaub ntawv ntiag tug, suav nrog kev sau lossis nyeem cov haujlwm tau ua. .
Oramfs tuaj yeem siv rau hauv thaj chaw uas yuav tsum muaj qib siab tshaj plaws ntawm kev ceev ntiag tug thiab kev ua tau zoo tuaj yeem txi. Kev ua tau zoo txo ββqis vim tias txhua qhov kev ua haujlwm khaws cia, suav nrog kev ua haujlwm nyeem cov ntaub ntawv, ua rau rov tsim kho cov blocks hauv cov ntaub ntawv kaw lus duab. Piv txwv li, nyeem cov ntaub ntawv 10MB yuav siv sijhawm li 1 vib nas this, thiab 25MB siv sijhawm 3 vib nas this. Sau 10MB siv sijhawm 15 vib nas this, thiab 25MB siv 50 vib nas this. Tib lub sijhawm, Oramfs yog kwv yees li 9 npaug sai dua thaum nyeem ntawv thiab 2 zaug sai dua thaum sau ntawv piv rau UtahFS cov ntaub ntawv kaw lus, tsim los ntawm Cloudflare thiab xaiv los txhawb ORAM hom.
Tau qhov twg los: opennet.ru