Taa, ọ bụ naanị ndị umengwụ edebeghị banyere teknụzụ blockchain, cryptocurrencies na otú ọ dị mma. Ma isiokwu a agaghị eto nkà na ụzụ a; anyị ga-ekwu maka adịghị ike ya na ụzọ isi kpochapụ ha.

Mgbe ị na-arụ ọrụ na otu n'ime ọrụ ndị dị na Altirix Systems, ọrụ ahụ bilitere na nkwenye siri ike, nkwenye na-eguzogide nke data sitere na isi iyi dị na blockchain. Ọ dị mkpa iji kwado mgbanwe na ndekọ nke usoro nke atọ na, dabere na mgbanwe ndị a, mebie otu ma ọ bụ alaka ọzọ na nkwekọrịta nkwekọrịta smart. Ọrụ na nlele mbụ bụ ihe na-adịghị mkpa, ma mgbe ọnọdụ ego nke otu n'ime ndị na-ekere òkè na usoro ahụ dabere na nsonaazụ nke mmejuputa ya, ihe ndị ọzọ a chọrọ. Nke mbụ, nke a bụ ntụkwasị obi zuru oke na usoro nkwenye dị otú ahụ. Ma mbụ ihe mbụ.

Nsogbu bụ na blockchain n'onwe ya bụ ihe kwụụrụ onwe ya, mechiri emechi, yabụ nkwekọrịta smart n'ime blockchain amaghị ihe ọ bụla gbasara ụwa dị n'èzí. N'otu oge ahụ, usoro nke nkwekọrịta smart na-ejikọta ya na ozi gbasara ihe ndị dị adị (nkwụsị ụgbọ elu, ọnụego mgbanwe, wdg). Ka smart contracts na-arụ ọrụ nke ọma, ozi enwetara site na mpụga blockchain ga-abụ ndị a pụrụ ịdabere na na nkwenye. A na-edozi nsogbu a site na iji okwu ndị dị ka Town Crier na DECO. Okwu ndị a na-enye ohere nkwekọrịta smart na netwọk blockchain ntụkwasị obi ozi sitere na sava weebụ tụkwasịrị obi; anyị nwere ike ịsị na ndị a bụ ndị na-enye ozi a pụrụ ịdabere na ya.

Oracle

Were ya na nkwekọrịta smart na-ebufe 0.001 btc na obere akpa bitcoin gị ma ọ bụrụ na ụlọ egwuregwu bọọlụ ọkacha mmasị gị meriri iko Russia. N'ọnọdụ nke ezigbo mmeri, nkwekọrịta smart ahụ kwesịrị ịnyefe ozi gbasara ụlọ ọrụ meriri, na ọtụtụ nsogbu na-ebilite ebe a: ebe ị ga-enweta ozi a, otu esi ebufe ya na nkwekọrịta smart na otu esi achọpụta na ozi ahụ. natara na smart nkwekọrịta bụ irè n'ezie coincided na eziokwu?

A bịa na isi mmalite nke ozi, enwere ike ịnwe ọnọdụ 2: ijikọ nkwekọrịta smart na webụsaịtị a tụkwasịrị obi ebe echekwara ozi gbasara nsonaazụ egwuregwu n'etiti, yana nhọrọ nke abụọ bụ ijikọ ọtụtụ saịtị ozugbo wee họrọ ozi sitere na ọtụtụ isi mmalite. nke na-enye otu data ahụ. Iji chọpụta izi ezi nke ozi ahụ, a na-eji ọnụ okwu, dịka ọmụmaatụ Oraclize, nke na-eji TLSNotary (TLS Notary Modification to Gove the Authenticity of Data). Mana enwere ozi zuru oke na Google gbasara Oraclize, enwere ọtụtụ akụkọ na Habré Taa, m ga-ekwu maka okwu ọnụ na-eji ụzọ dịtụ iche na-ebufe ozi: Town Crier na DECO. Edemede a na-enye nkọwa nke ụkpụrụ ọrụ nke ma okwu abụọ, yana ntụnyere zuru ezu.

Obodo Crier

Obodo Crier (TC) bụ IC3 (The Initiative for CryptoCurrencies and Contracts) webatara na 2016 na CCS'16. Echiche bụ isi nke TC: nyefee ozi site na weebụsaịtị gaa na nkwekọrịta smart ma hụ na ozi TC na-enye bụ otu ihe ahụ na weebụsaịtị. TC na-eji TEE (Trusted Execution Environment) iji chọpụta nwe data. Ụdị mbụ nke TC na-akọwa otu esi arụ ọrụ na Intel SGX.
Obodo Crier nwere akụkụ n'ime blockchain yana akụkụ n'ime OS n'onwe ya - TC Server.

Nkwekọrịta TC dị na blockchain ma na-arụ ọrụ dị ka njedebe n'ihu maka TC. Ọ na-anabata arịrịọ sitere na CU (nkwekọrịta smart onye ọrụ) wee weghachi nzaghachi sitere na sava TC. N'ime ihe nkesa TC enwere Relay, nke na-eme ka njikọ dị n'etiti enclave na ịntanetị (okporo ụzọ bidirectional) ma jikọta enclave na blockchain. Enclave nwere progencl, nke bụ koodu na-arịọ arịrịọ site na blockchain wee jiri akara dijitalụ weghachi ozi na blockchain, progencl nwere akụkụ nke koodu nkwekọrịta smart ma na-arụ ọrụ ụfọdụ.

Enwere ike iche na Intel SGX enclave dị ka ọbá akwụkwọ nke API na-agba site na ecall. Ecall na-ebufe njikwa na nkpuchi. Enclave na-eme koodu ya ruo mgbe ọ ga-apụ ma ọ bụ ruo mgbe ewepụrụ. a na-eji ocall akpọ ọrụ akọwara na mpụga ogige ahụ. A na-egbu ocall na mpụga ogige ahụ ma na-ewere ya dị ka oku enweghị ntụkwasị obi site na ya. Mgbe emechara ocall, a ga-eweghachi njikwa ahụ na mpaghara ahụ.

N'akụkụ Enclave, a na-ahazi ọwa echekwara na sava weebụ, enclave n'onwe ya na-eme aka TLS na ihe nkesa ebumnobi wee na-arụ ọrụ cryptographic niile n'ime. Ebupụla ọba akwụkwọ TLS (mbedTLS) na koodu HTTP belatara na gburugburu SGX. Ọzọkwa, Enclave nwere asambodo CA mgbọrọgwụ (nchịkọta asambodo) iji nyochaa asambodo nke sava dịpụrụ adịpụ. Arịrịọ Handler na-anabata arịrịọ datagram n'ụdị Ethereum nyere, mebie ya ma tụba ya. Mgbe ahụ, ọ na-emepụta azụmahịa Ethereum nwere datagram a rịọrọ, bịanye aka na skTC ma bufee ya na Relay.

Akụkụ Relay gụnyere Interface Client, TCP, Blockchain Interface. Achọrọ Interface Client iji kwado koodu mkpuchi wee soro onye ahịa kparịta ụka. Onye ahịa ahụ na-eziga arịrịọ nrịbama site na iji ecall wee nata akara ngosi timestamp nke skTC bịanyere aka na ya yana att (mbinye aka akaebe), mgbe ahụ, a na-enyocha att site na iji Intel Attestation Service (IAS), yana ọrụ oge tụkwasịrị obi na-enyocha akara timestamp. Blockchain Interface na-enyocha arịrịọ mbata ma tinye azụmahịa na blockchain maka nnyefe datagram. Geth bụ onye ahịa Ethereum gọọmentị ma na-enye ohere Relay ka ya na blockchain na-emekọrịta ihe site na oku RPC.

Na-arụ ọrụ na TEE, TC na-enye gị ohere ịme ọtụtụ enclaves n'otu aka ahụ, si otú ahụ na-abawanye ọsọ nke nhazi ozi site na ugboro 3. Ọ bụrụ na otu na-agba ọsọ na-agba ọsọ bụ 15 tx / sk, mgbe ahụ na 20 na-agba ọsọ na-agba ọsọ na-agba ọsọ na-abawanye ruo 65 tx / sk; maka ntụnyere, oke ọsọ ọsọ na Bitcoin blockchain bụ 26 tx / sk.

Deco

DECO (Decentralized Oracles for TLS) ka ewepụtara na CCS'20, na-arụ ọrụ na saịtị na-akwado njikọ TLS. Na-eme ka o doo anya na nzuzo na iguzosi ike n'ezi ihe data.
DECO nwere TLS na-eji nzuzo nzuzo, yabụ onye ahịa na sava weebụ nwere igodo nzuzo, onye ahịa nwere ike chepụta data nnọkọ TLS ma ọ bụrụ na ọ chọrọ. Iji dozie nsogbu a, DECO na-eji usoro ịme aka atọ n'etiti prover (smart contract), verifier (oracle) na sava weebụ (isi iyi data).

Ụzọ DECO si arụ ọrụ bụ na onye nyocha ahụ na-enweta mpempe data D wee gosi na onye nyocha na D sitere na sava TLS S. Nsogbu ọzọ bụ na TLS anaghị abanye data na ọ na-esiri onye ahịa TLS ike igosi na enwetara data sitere na sava ziri ezi (ihe isi ike provenance).

Usoro DECO na-eji igodo nzuzo KEnc na KMac. Onye ahịa na-eziga arịrịọ Q na sava weebụ, nzaghachi sitere na ihe nkesa R na-abịa n'ụdị ezoro ezo, mana onye ahịa na ihe nkesa nwere otu KMac, onye ahịa ahụ nwere ike ịmepụta ozi TLS. Ngwọta DECO bụ izobe KMac n'aka onye ahịa (prover) ruo mgbe ọ zara arịrịọ ahụ. Ugbu a KMac kewara n'etiti prover na verifier - KpMac na KvMac. Ihe nkesa na-enweta KMac iji zoo nzaghachi site na iji ọrụ akụkụ KpMac ⊕ KvMac = KMac.

Site n'ịtọpụta aka atọ, mgbanwe data n'etiti onye ahịa na ihe nkesa ga-eji nkwa nchekwa.

Mgbe ị na-ekwu maka usoro okwu ọnụ na-enweghị isi, mmadụ enweghị ike ịghara ịkọ Chainlink, nke na-achọ ịmepụta netwọọdụ ọnụ nke ọnụ ọnụ ọnụ nke kwekọrọ na Ethereum, Bitcoin na Hyperledger, na-eburu n'uche modularity: akụkụ ọ bụla nke usoro ahụ nwere ike imelite. N'otu oge ahụ, iji hụ na nchekwa, Chainlink na-enye onye ọ bụla okwu ọnụ na-ekere òkè na ọrụ ahụ iji nye nchịkọta igodo (ọha na nzuzo). A na-eji igodo nzuzo wepụta mbinye aka akụkụ nke nwere mkpebi ha maka arịrịọ data. Iji nweta azịza, ọ dị mkpa ijikọ niile akụkụ mbinye aka nke netwọk nke oracles.

Chainlink na-ezube iduzi PoC DECO nke mbụ na-elekwasị anya na ngwa ego enweghị isi dịka Mixicles. N'oge ederede, akụkọ pụtara na Forbes na Chainlink nwetara DECO na Mahadum Cornell.

Mwakpo na ọnụ ọnụ

Site n'echiche nchekwa ozi, a tụlere mwakpo ndị a na Town Crier:

1. Rogue smart-kọntaktsị koodu injection na TEE ọnụ.
   Ihe kachasị mkpa nke mwakpo ahụ: ịnyefe koodu nkwekọrịta smart na-ezighi ezi na TEE, yabụ, onye na-awakpo nke nwetara ohere ịbanye na ọnụ ga-enwe ike ịme nkwekọrịta smart nke ya (aghụghọ) na data decrypted. Agbanyeghị, ụkpụrụ nloghachi ga-eji igodo nzuzo ezoro ezo, naanị otu ụzọ ị ga-esi nweta data dị otú ahụ bụ ịwụsa ciphertext na nloghachi/mpụta.
   Nchedo megide mbuso agha a nwere oghere na-enyocha izi ezi nke koodu dị na adreesị ugbu a. Enwere ike nweta nke a site na iji atụmatụ adreesị ebe a na-ekpebi adreesị nkwekọrịta site na hashing koodu nkwekọrịta.

2. Nkwekọrịta steeti ciphertext na-agbanwe ihicha.
   Ihe kachasị mkpa nke mwakpo ahụ: Ndị nwe ọnụ nke a na-eme nkwekọrịta smart nwere ohere ịbanye na steeti nkwekọrịta n'ụdị ezoro ezo n'èzí. Onye na-awakpo, ebe ọ nwetala akara ọnụ, nwere ike iji ọnọdụ kọntaktị tụnyere tupu na mgbe azụmahịa ahụ gasịrị ma nwee ike ikpebi nke arụmụka banyere na nke usoro nkwekọrịta smart ejiri, ebe ọ bụ na koodu nkwekọrịta smart n'onwe ya na nkọwapụta ya dị n'ihu ọha.
   Nchedo n'ịhụ na ntụkwasị obi nke ọnụ n'onwe ya.

3. Mwakpo akụkụ ọwa.
   Ụdị ọgụ pụrụ iche nke na-eji nleba anya nke ebe nchekwa nchekwa na ohere cache n'ọnọdụ dị iche iche. Ihe atụ nke mwakpo dị otú ahụ bụ Prime na Probe.
   
   Usoro mbuso agha:

   • t0: Onye na-awakpo ahụ na-ejupụta cache data niile nke usoro onye ahụ tara ahụhụ.
   • t1: Onye a tara ahụhụ na-eme koodu site na ịnweta ebe nchekwa dabere na data nwere mmetụta nke onye ahụ metụtara (igodo cryptographic). A na-ahọrọ ahịrị cache dabere na uru igodobit. N'ihe atụ dị na ọnụ ọgụgụ a, a na-agụ keybit = 0 na adreesị X dị na cache akara 2. A na-ebunye data echekwara na X n'ime cache, na-ewepụ data nke dị na mbụ.
   • t2: Onye mwakpo ahụ na-enyocha ahịrị cache ya ewepụrụ - ahịrị nke onye ahụ tara. A na-eme nke a site na ịlele oge nnweta. Site n'ịmeghachi ọrụ a maka igodo ọ bụla, onye mwakpo ahụ na-enweta igodo ahụ dum.

Nchedo Mwakpo: Intel SGX nwere nchebe megide mwakpo ọwa n'akụkụ nke na-egbochi nlekota ihe omume metụtara cache, mana ọgụ Prime na Probe ka ga-arụ ọrụ n'ihi na onye na-awakpo ahụ na-enyocha ihe omume cache nke usoro ya ma kesaa ihe nchekwa ahụ na onye ahụ.

Ya mere, n'oge a enweghị nchebe a pụrụ ịdabere na ya megide mwakpo a.

Mwakpo dị ka Specter na Foreshadow (L1TF), yiri Prime na Probe, ka amarakwara. Ha na-enye gị ohere ịgụ data sitere na ebe nchekwa cache site na ọwa ndị ọzọ. Enyere nchebe megide adịghị ike Specter-v2, nke na-arụ ọrụ megide mwakpo abụọ a.

N'ihe gbasara DECO, aka n'ụzọ atọ na-enye nkwa nke nchekwa:

1. Prover iguzosi ike n'ezi ihe: Onye na-agba ọsọ enweghị ike ịgha ụgha ozi sitere na nkesa na enweghị ike ime ka sava ahụ nabata arịrịọ na-ezighi ezi ma ọ bụ zaghachi ezighi ezi maka arịrịọ dị mma. A na-eme nke a site na usoro arịrịọ n'etiti ihe nkesa na prover.
2. Nnwale iguzosi ike n'ezi ihe: Onye nkwubatara mbanye anataghị ikike ime ka onye nyocha nweta azịza na-ezighi ezi.
3. Nzuzo: Nyochaa hacked na-enyocha naanị ozi ọha (arịrịọ, aha nkesa).

Na DECO, naanị adịghị ike ịgbanye okporo ụzọ ga-ekwe omume. Nke mbụ, site na iji aka ụzọ atọ, onye nyocha nwere ike igosipụta njirimara nke ihe nkesa site na iji nonce ọhụrụ. Agbanyeghị, ka emechara aka ahụ, onye nyocha ga-adabererịrị na ihe ngosi oyi akwa netwọkụ (adreesị IP). Ya mere, nkwurịta okwu n'etiti verifier na ihe nkesa ga-echebe site na ntụtụ okporo ụzọ. A na-enweta nke a site na iji Proxy.

Ntụle nke ọnụ

Obodo Crier gbadoro ụkwụ na-arụ ọrụ na enclave dị na akụkụ nkesa, ebe DECO na-enye gị ohere ịchọpụta izi ezi nke mmalite data site na iji aka atọ na izo ya ezo data na igodo cryptographic. A na-eme ntụle nke okwu ndị a dịka njirisi ndị a: arụmọrụ, nchekwa, ọnụ ahịa na ihe bara uru.

Obodo Crier
Deco

arụmọrụ
Ọsọ (0.6s ka emechaa)
Ji nwayọọ nwayọọ (10.50s iji mechaa protocol)

nchekwa
Obere nchekwa
Nchekwa karịa

na-eri
Ọ dị oke ọnụ
Dị ọnụ ala karịa

ịdị irè
Na-achọ ngwaike pụrụ iche
Na-arụ ọrụ na ihe nkesa ọ bụla na-akwado TLS

Ngwa ọsọ: Iji rụọ ọrụ na DECO, a chọrọ ntugharị aka ụzọ atọ, mgbe ị na-edozi site na LAN ọ na-ewe 0.37 sekọnd, maka mmekọrịta mgbe emechara njikọ ahụ, 2PC-HMAC dị irè (0,13 s kwa dee). Arụmọrụ DECO dabere na TLS cipher suites dị, nha data nkeonwe, yana mgbagwoju anya nke akaebe maka otu ngwa. Iji ọnụọgụ nhọrọ ọnụọgụ abụọ sitere na IC3 dịka ọmụmaatụ: imecha protocol site na LAN na-ewe ihe dịka 10,50 sekọnd. Site na ntụnyere, Town Crier na-ewe ihe dịka 0,6 sekọnd iji mechaa ngwa yiri ya, nke dị ihe dị ka ugboro iri abụọ ngwa ngwa karịa DECO. Ihe niile hà nhata, TC ga-adị ngwa ngwa.

Nche: Mwakpo na Intel SGX enclave (akụkụ-ọwa ọgụ) na-arụ ọrụ na nwere ike ime ka ezigbo mmebi na sonyere nke smart nkwekọrịta. Banyere DECO, ọgụ metụtara ịgba ọgwụ mgbochi okporo ụzọ ga-ekwe omume, mana iji proxy na-ebelata ọgụ dị otú ahụ ka ọ bụrụ ihe efu. Ya mere DECO dị mma.

-eri nke: Ọnụ ego nke ngwá ọrụ na-akwado Intel SGX dị elu karịa ọnụahịa nke ịtọlite ​​​​protocol na DECO. Ọ bụ ya mere TC ji dị oke ọnụ.

Omume: Iji rụọ ọrụ na Town Crier, a chọrọ akụrụngwa pụrụ iche na-akwado TEE. Dịka ọmụmaatụ, a na-akwado Intel SGX na ọgbọ nke isii Intel Core processor ezinụlọ na emechaa. DECO na-enye gị ohere iji akụrụngwa ọ bụla rụọ ọrụ, n'agbanyeghị na enwere ntọala DECO site na iji TEE. Dị ka usoro nhazi ahụ si dị, aka atọ nke DECO nwere ike were oge, ma nke a abụghị ihe ọ bụla ma e jiri ya tụnyere njedebe ngwaike nke TC, ya mere DECO bara uru karị.

nkwubi

N'ileghachi anya n'ọnụ okwu abụọ ahụ iche iche ma jiri ha tụnyere ụkpụrụ anọ, o doro anya na Town Crier dị ala na DECO na atọ n'ime isi anọ. DECO bụ ihe a pụrụ ịdabere na ya site na echiche nchekwa ozi, dị ọnụ ala ma dị irè karị, ọ bụ ezie na ịtọlite ​​​​protocol atọ nwere ike iwepụta oge ma nwee ọghọm ya, dịka ọmụmaatụ, ọrụ ndị ọzọ na igodo nzuzo. TC dị ngwa karịa DECO, mana adịghị ike ịwakpo ọwa n'akụkụ na-eme ka ọ bụrụ ihe efu na nzuzo. A ghaghị iburu n'uche na ewebata DECO na Jenụwarị 2020, na oge agafebeghị iji tụlee na ọ dị mma. A na-awakpo obodo Crier maka afọ 4 ma gafere ọtụtụ ule, ya mere ejiri ya mee ihe n'ọtụtụ ọrụ ziri ezi.

isi: www.habr.com