{"id":56034,"date":"2020-02-03T00:00:00","date_gmt":"2020-02-02T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami"},"modified":"2020-02-18T14:04:12","modified_gmt":"2020-02-18T11:04:12","slug":"proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/nl\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","title":{"rendered":"Het TFC-project ontwikkelt een parano\u00efde beveiligd berichtenuitwisselingssysteem","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

In het kader van het project TFC<\/a><\/noindex> (Tinfoil Chat) is an attempt to create a prototype of a paranoid-secure messaging system that preserves the confidentiality of correspondence even when the end devices are compromised. To simplify auditing, the project's code is written in Python and beschikbaar is<\/a><\/noindex> onder GPLv3-licentie.<\/p>\n

Currently prevalent messaging systems using end-to-end encryption protect correspondence from interception on intermediate servers and from transit traffic analysis, but do not safeguard against issues on the client device side. Compromising end-to-end encrypted systems requires only that the operating system, firmware, or messaging application on the end device be compromised, for example, through the exploitation of previously unknown vulnerabilities, through the initial embedding of software or hardware backdoors in the device, or through the delivery of a fake update with a backdoor (for instance, under pressure from developers by security services or criminal groups). Even if the encryption keys reside on a separate token, if there is control over the user's system, there always remains the possibility of tracing processes, intercepting data from the keyboard, and monitoring output on the screen.<\/p>\n

TFC offers a software-hardware complex that requires the use of three separate computers and a special hardware splitter on the client side. All traffic during the interaction of messaging participants is transmitted through the anonymous Tor network, and the messaging programs run as hidden Tor services (users are identified by hidden service addresses and keys during messaging). <\/p>\n

\"Het<\/a><\/noindex><\/center><\/p>\n

The first computer acts as a gateway for connecting to the network and launching the hidden Tor service. The gateway only manipulates already encrypted data, while the remaining two computers are used for encryption and decryption. The second computer can only be used for decryption and displaying received messages, while the third one is solely for encrypting and sending new messages. Accordingly, the second computer has only the keys for decryption, and the third only has the keys for encryption. <\/p>\n

De tweede en derde computer hebben geen directe verbinding met het netwerk en zijn gescheiden van de gatewaycomputer door een speciale USB-splitter die het principe van «gegevensdiode<\/a><\/noindex>» volgt en gegevens fysiek slechts in \u00e9\u00e9n richting doorlaat. De splitter staat alleen de verzending van gegevens naar de tweede computer toe en alleen de ontvangst van gegevens van de derde computer. De gegevensstroom in de splitter wordt beperkt door middel van opto's<\/a><\/noindex> (een eenvoudige onderbreking van de Tx- en Rx-lijnen in de kabel is niet voldoende, omdat een onderbreking niet uitsluit dat gegevens in omgekeerde richting worden verzonden en niet garandeert dat de Tx-lijn niet zal worden gebruikt voor lezen en de Rx-lijn voor verzenden). De splitter kan worden samengesteld uit beschikbare onderdelen, de schema's zijn bijgevoegd<\/a><\/noindex> (PCB<\/a><\/noindex>) en zijn beschikbaar onder de GNU FDL 1.3-licentie. <\/p>\n

\"Het<\/a><\/noindex><\/center><\/p>\n

Bij een dergelijk schema maakt compromittering van de gateway niet toelaat<\/a><\/noindex> het onmogelijk om toegang te krijgen tot de versleuteling sleutels en voorkomt verdere aanvallen op de overige apparaten. In het geval van compromittering van de computer waarop de decryptiesleutels zijn opgeslagen, zullen de gegevens niet naar de externe wereld kunnen worden verzonden, omdat de gegevensstroom alleen beperkt is tot het ontvangen van informatie en de terugzending wordt geblokkeerd door de gegevensdiode.<\/p>\n

\"Het<\/a><\/noindex><\/center><\/p>\n

Versleuteling is uitgevoerd op basis van 256-bits sleutels met XChaCha20-Poly1305, voor de beveiliging van de sleutels wordt een langzame hash-functie gebruikt, Argon2id<\/a><\/noindex>. Voor het uitwisselen van sleutels wordt gebruikgemaakt van X448<\/a><\/noindex> (het Diffie-Hellman-protocol op basis van Curve448) of PSK-sleutels (pre-shared<\/a><\/noindex>). Elk bericht wordt verzonden in de modus van perfecte voorwaartse geheimhouding (PFS, Perfect Forward Secrecy<\/a><\/noindex>) op basis van Blake2b-hashes, waarbij de compromittering van een van de langdurige sleutels voorkomt dat eerder onderschepte sessies kunnen worden ontsleuteld. De interface van de applicatie is uiterst eenvoudig en omvat een venster, verdeeld in drie gebieden - verzenden, ontvangen en een opdrachtregel met een logboek van de interactie met de gateway. Besturing gebeurt via een speciale commando-set<\/a><\/noindex>.<\/p>\n

\"Het<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Bron: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 TFC (Tinfoil Chat) \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e-\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u043b\u0430 \u0431\u044b \u0442\u0430\u0439\u043d\u0443 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0438 \u0434\u0430\u0436\u0435 \u043f\u0440\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv3. \u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0435 \u043d\u044b\u043d\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0441\u043a\u0432\u043e\u0437\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u043e\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043d\u0430 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-56034","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Het TFC-project ontwikkelt een parano\u00efde beveiligd berichtensysteem | ProHoster","description":"Binnen het TFC-project (Tinfoil Chat) is een poging gedaan om een prototype te cre\u00ebren van een parano\u00efde beveiligd berichtensysteem dat.","canonical_url":"https:\/\/prohoster.info\/nl\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nl_NL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 TFC \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 | ProHoster","og:description":"\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 TFC (Tinfoil Chat) \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e-\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f.","og:url":"https:\/\/prohoster.info\/nl\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-02T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"56034","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:32:32","updated":"2022-10-06 03:45:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/56034","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/comments?post=56034"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/56034\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media?parent=56034"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/categories?post=56034"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/tags?post=56034"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}