{"id":56034,"date":"2020-02-03T00:00:00","date_gmt":"2020-02-02T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami"},"modified":"2020-02-18T14:04:12","modified_gmt":"2020-02-18T11:04:12","slug":"proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","title":{"rendered":"A TFC projekt paranoi\u00e1san v\u00e9dett \u00fczenetk\u00fcld\u0151 rendszert fejleszt.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

A projekt keretein bel\u00fcl TFC<\/a><\/noindex> (Tinfoil Chat) egy pr\u00f3b\u00e1lkoz\u00e1s egy paranoid m\u00f3don v\u00e9dett \u00fczenetk\u00fcld\u0151 rendszer protot\u00edpus\u00e1nak l\u00e9trehoz\u00e1s\u00e1ra, amely meg\u0151rzi a besz\u00e9lget\u00e9sek titk\u00e1t m\u00e9g akkor is, ha a v\u00e9gberendez\u00e9sek kompromitt\u00e1l\u00f3dnak. A projekt k\u00f3dj\u00e1nak egyszer\u0171s\u00edt\u00e9se \u00e9rdek\u00e9ben Python nyelven \u00edr\u00f3dott \u00e9s el\u00e9rhet\u0151<\/a><\/noindex> GPLv3 licenc alatt \u00e1ll.<\/p>\n

A jelenlegi \u00fczenetk\u00fcld\u0151 rendszerek, amelyek v\u00e9gpontok k\u00f6z\u00f6tti titkos\u00edt\u00e1st haszn\u00e1lnak, megv\u00e9dik a besz\u00e9lget\u00e9seket a k\u00f6zbens\u0151 szervereken t\u00f6rt\u00e9n\u0151 lehallgat\u00e1st\u00f3l \u00e9s a tranzitforgalom elemz\u00e9s\u00e9t\u0151l, de nem v\u00e9denek a kliensoldali probl\u00e9m\u00e1k ellen. A v\u00e9gpontok k\u00f6z\u00f6tti titkos\u00edt\u00e1st haszn\u00e1l\u00f3 rendszerek kompromitt\u00e1l\u00e1s\u00e1hoz elegend\u0151 a v\u00e9gberendez\u00e9s oper\u00e1ci\u00f3s rendszer\u00e9nek, firmware-j\u00e1nak vagy \u00fczenetk\u00fcld\u0151 alkalmaz\u00e1s\u00e1nak megkompromitt\u00e1l\u00e1sa, p\u00e9ld\u00e1ul eddig ismeretlen sebezhet\u0151s\u00e9gek kihaszn\u00e1l\u00e1s\u00e1val, szoftveres vagy hardveres kiskapuk be\u00e9p\u00edt\u00e9s\u00e9vel, vagy egy hamis friss\u00edt\u00e9s h\u00e1ts\u00f3 ajt\u00f3val val\u00f3 lead\u00e1s\u00e1val (p\u00e9ld\u00e1ul a fejleszt\u0151kre gyakorl\u00f3 nyom\u00e1s r\u00e9v\u00e9n a titkosszolg\u00e1latok vagy b\u0171n\u00f6z\u0151i csoportok \u00e1ltal). M\u00e9g ha a titkos\u00edt\u00e1shoz sz\u00fcks\u00e9ges kulcsok egy k\u00fcl\u00f6n tokenen is vannak, a felhaszn\u00e1l\u00f3i rendszer feletti ellen\u0151rz\u00e9s megl\u00e9t\u00e9vel mindig van lehet\u0151s\u00e9g a folyamatok nyomon k\u00f6vet\u00e9s\u00e9re, a billenty\u0171zetr\u0151l val\u00f3 adathal\u00e1szatra \u00e9s a k\u00e9perny\u0151 kimenet\u00e9nek figyel\u00e9s\u00e9re.<\/p>\n

A TFC egy szoftver-hardware komplexumot k\u00edn\u00e1l, amely h\u00e1rom k\u00fcl\u00f6n sz\u00e1m\u00edt\u00f3g\u00e9p \u00e9s egy speci\u00e1lis hardver splitter alkalmaz\u00e1s\u00e1t ig\u00e9nyli az \u00fcgyf\u00e9ln\u00e9l. Az \u00fczenetk\u00fcld\u0151k k\u00f6z\u00f6tti interakci\u00f3 sor\u00e1n az \u00f6sszes forgalmat anonimiz\u00e1lt Tor h\u00e1l\u00f3zaton kereszt\u00fcl tov\u00e1bb\u00edtj\u00e1k, m\u00edg az \u00fczenetk\u00fcld\u0151 alkalmaz\u00e1sok Tor rejtett szolg\u00e1ltat\u00e1sok form\u00e1j\u00e1ban m\u0171k\u00f6dnek (a felhaszn\u00e1l\u00f3k az \u00fczenetk\u00fcld\u00e9s sor\u00e1n rejtett szolg\u00e1ltat\u00e1sok c\u00edmeivel \u00e9s kulcsaival azonos\u00edtj\u00e1k magukat). <\/p>\n

\"A<\/a><\/noindex><\/center><\/p>\n

Az els\u0151 sz\u00e1m\u00edt\u00f3g\u00e9p \u00e1tj\u00e1r\u00f3k\u00e9nt m\u0171k\u00f6dik a h\u00e1l\u00f3zathoz val\u00f3 csatlakoz\u00e1shoz \u00e9s a Tor rejtett szolg\u00e1ltat\u00e1s elind\u00edt\u00e1s\u00e1hoz. Az \u00e1tj\u00e1r\u00f3 csak az m\u00e1r titkos\u00edtott adatokat manipul\u00e1lja; a titkos\u00edt\u00e1shoz \u00e9s visszafejt\u00e9shez a k\u00e9t m\u00e1sik sz\u00e1m\u00edt\u00f3g\u00e9p haszn\u00e1latos. A m\u00e1sodik sz\u00e1m\u00edt\u00f3g\u00e9p kiz\u00e1r\u00f3lag a visszafejt\u00e9sre \u00e9s az \u00e9rkezett \u00fczenetek megjelen\u00edt\u00e9s\u00e9re haszn\u00e1lhat\u00f3, m\u00edg a harmadik csak az \u00fczenetek titkos\u00edt\u00e1s\u00e1ra \u00e9s \u00faj \u00fczenetek k\u00fcld\u00e9s\u00e9re. Ennek megfelel\u0151en a m\u00e1sodik sz\u00e1m\u00edt\u00f3g\u00e9p csak a visszafejt\u00e9shez sz\u00fcks\u00e9ges kulcsokkal rendelkezik, m\u00edg a harmadik csak a titkos\u00edt\u00e1shoz sz\u00fcks\u00e9ges kulcsokkal. <\/p>\n

A m\u00e1sodik \u00e9s harmadik sz\u00e1m\u00edt\u00f3g\u00e9pnek nincs k\u00f6zvetlen kapcsolata a h\u00e1l\u00f3zattal, \u00e9s egy speci\u00e1lis USB-eloszt\u00f3n kereszt\u00fcl vannak elv\u00e1lasztva a kapu sz\u00e1m\u00edt\u00f3g\u00e9pt\u0151l, amely az «adatdi\u00f3d<\/a><\/noindex>» elvet k\u00f6vetve csak egy ir\u00e1nyban engedi \u00e1t az adatokat. Az eloszt\u00f3 csak a m\u00e1sodik sz\u00e1m\u00edt\u00f3g\u00e9p fel\u00e9 t\u00f6rt\u00e9n\u0151 adatk\u00fcld\u00e9st \u00e9s csak a harmadik sz\u00e1m\u00edt\u00f3g\u00e9pt\u0151l \u00e9rkez\u0151 adatok fogad\u00e1s\u00e1t enged\u00e9lyezi. Az eloszt\u00f3ban az adatok ir\u00e1ny\u00e1t korl\u00e1tozz\u00e1k optronnal<\/a><\/noindex> (a Tx \u00e9s Rx vonalak egyszer\u0171 megszak\u00edt\u00e1sa a k\u00e1belben nem elegend\u0151, mivel a megszak\u00edt\u00e1s nem z\u00e1rja ki az adatok visszaad\u00e1s\u00e1t, \u00e9s nem garant\u00e1lja, hogy a Tx vonalat ne haszn\u00e1lj\u00e1k olvas\u00e1sra, m\u00edg az Rx-t az ad\u00e1sra). Az eloszt\u00f3 bark\u00e1csolhat\u00f3 h\u00e1zilag, a diagramok csatolva vannak<\/a><\/noindex> (PCB<\/a><\/noindex>) \u00e9s GNU FDL 1.3 licenc alatt el\u00e9rhet\u0151k. <\/p>\n

\"A<\/a><\/noindex><\/center><\/p>\n

Egy ilyen s\u00e9ma mellett a gateway kompromitt\u00e1l\u00e1sa nem engedi<\/a><\/noindex> hozz\u00e1f\u00e9r\u00e9st a titkos\u00edt\u00e1si kulcsokhoz, \u00e9s nem teszi lehet\u0151v\u00e9 a t\u00e1mad\u00e1sok folytat\u00e1s\u00e1t a tov\u00e1bbi eszk\u00f6z\u00f6k\u00f6n. Ha a sz\u00e1m\u00edt\u00f3g\u00e9p, amelyen a dek\u00f3dol\u00f3 kulcsok tal\u00e1lhat\u00f3k, kompromitt\u00e1l\u00f3dik, az onnan sz\u00e1rmaz\u00f3 inform\u00e1ci\u00f3kat nem lehet \u00e1tkonvert\u00e1lni a k\u00fclvil\u00e1gba, mivel az adatfolyam csak az inform\u00e1ci\u00f3k fogad\u00e1s\u00e1ra korl\u00e1toz\u00f3dik, visszafel\u00e9 pedig az adatdi\u00f3d blokkolja az \u00e1tad\u00e1st.<\/p>\n

\"A<\/a><\/noindex><\/center><\/p>\n

A titkos\u00edt\u00e1s 256 bites kulcsok alapj\u00e1n k\u00e9sz\u00fclt az XChaCha20-Poly1305 haszn\u00e1lat\u00e1val, a kulcsok jelsz\u00f3 v\u00e9delme \u00e9rdek\u00e9ben lass\u00fa hash-funkci\u00f3t alkalmaznak Argon2id<\/a><\/noindex>. A kulcsok cser\u00e9je X448<\/a><\/noindex> (Diffie-Hellman protokoll Curve448 alap\u00fa) vagy PSK kulcsok (el\u0151zetesen megosztott<\/a><\/noindex>). Minden \u00fczenet t\u00f6k\u00e9letes el\u0151remen\u0151 titkoss\u00e1g (PFS, T\u00f6k\u00e9letes El\u0151remen\u0151 Titkoss\u00e1g<\/a><\/noindex>) Blake2b hash-ek alapj\u00e1n, amelyn\u00e9l egy \u00e1lland\u00f3 kulcs kompromitt\u00e1l\u00e1sa nem teszi lehet\u0151v\u00e9 a kor\u00e1bban elfogott munkamenet dek\u00f3dol\u00e1s\u00e1t. Az alkalmaz\u00e1s fel\u00fclete rendk\u00edv\u00fcl egyszer\u0171, \u00e9s h\u00e1rom ter\u00fcletre osztott ablakot tartalmaz - k\u00fcld\u00e9s, fogad\u00e1s \u00e9s parancssor a kapuval val\u00f3 interakci\u00f3s napl\u00f3val. A vez\u00e9rl\u00e9s egy speci\u00e1lis parancsk\u00e9szleten kereszt\u00fcl t\u00f6rt\u00e9nik.<\/a><\/noindex>.<\/p>\n

\"A<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Forr\u00e1s: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 TFC (Tinfoil Chat) \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e-\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u043b\u0430 \u0431\u044b \u0442\u0430\u0439\u043d\u0443 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0438 \u0434\u0430\u0436\u0435 \u043f\u0440\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv3. \u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0435 \u043d\u044b\u043d\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0441\u043a\u0432\u043e\u0437\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u043e\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043d\u0430 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-56034","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47A TFC projekt egy paranoid m\u00f3don v\u00e9dett \u00fczenetk\u00fcld\u0151 rendszer fejleszt\u00e9s\u00e9n dolgozik | ProHoster","description":"A TFC projekt keretein bel\u00fcl (Tinfoil Chat) k\u00eds\u00e9rletet tett\u00fcnk egy paranoid m\u00f3don v\u00e9dett \u00fczenetk\u00fcld\u0151 rendszer protot\u00edpus\u00e1nak l\u00e9trehoz\u00e1s\u00e1ra, amely.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 TFC \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 | ProHoster","og:description":"\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 TFC (Tinfoil Chat) \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e-\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-02T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"56034","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:32:32","updated":"2022-10-06 03:45:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/56034","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=56034"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/56034\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=56034"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=56034"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=56034"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}