{"id":56034,"date":"2020-02-03T00:00:00","date_gmt":"2020-02-02T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami"},"modified":"2020-02-18T14:04:12","modified_gmt":"2020-02-18T11:04:12","slug":"proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","title":{"rendered":"Proiectul TFC dezvolt\u0103 un sistem de mesagerie protejat paranoid.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u00cen cadrul proiectului TFC<\/a><\/noindex> (Tinfoil Chat) a fost \u00eencercarea de a crea un prototip al unui sistem de mesagerie paranoic \u0219i securizat, care ar p\u0103stra secretul coresponden\u021bei chiar \u0219i \u00een cazul compromisului dispozitivelor finale. Pentru a facilita auditul, codul proiectului este scris \u00een limbajul Python \u0219i disponibil<\/a><\/noindex> sub licen\u021ba GPLv3.<\/p>\n

Sistemele de mesagerie comune, care utilizeaz\u0103 criptarea de la un cap\u0103t la altul, permit protejarea coresponden\u021bei \u00eempotriva intercept\u0103rii pe serverele intermediare \u0219i \u00eempotriva analizei traficului de tranzit, dar nu protejeaz\u0103 de problemele de pe dispozitivul client. Pentru a compromite sistemele bazate pe criptarea de la un cap\u0103t la altul, este suficient s\u0103 se compromit\u0103 sistemul de operare, firmware-ul sau aplica\u021bia de mesagerie pe dispozitivul final, de exemplu, prin exploatarea unor vulnerabilit\u0103\u021bi anterior necunoscute, prin infiltrarea ini\u021bial\u0103 \u00een dispozitiv cu backdoor-uri software sau hardware sau prin livrarea unei actualiz\u0103ri false cu un backdoor (de exemplu, sub presiunea exercitat\u0103 asupra dezvoltatorului de c\u0103tre agen\u021biile de securitate sau grup\u0103rile criminale). Chiar dac\u0103 cheile pentru criptare se afl\u0103 pe un token separat, ori de c\u00e2te ori exist\u0103 un control asupra sistemului utilizatorului, r\u0103m\u00e2ne \u00eentotdeauna posibilitatea de a urm\u0103ri procesele, de a intercepta datele de la tastatur\u0103 \u0219i de a monitoriza ie\u0219irea pe ecran.<\/p>\n

TFC ofer\u0103 un complex software \u0219i hardware, care necesit\u0103 utilizarea a trei computere separate pe partea clientului \u0219i a unui splitter hardware special. Tot traficul \u00een timpul interac\u021biunii participan\u021bilor la schimbul de mesaje este transmis prin re\u021beaua anonim\u0103 Tor, iar aplica\u021biile pentru mesagerie sunt realizate sub form\u0103 de servicii ascunse Tor (utilizatorii la schimbul de mesaje sunt identifica\u021bi prin adresele serviciilor ascunse \u0219i chei). <\/p>\n

\"Proiectul<\/a><\/noindex><\/center><\/p>\n

Primul computer ac\u021bioneaz\u0103 ca un gateway pentru conectarea la re\u021bea \u0219i lansarea serviciului ascuns Tor. Gateway-ul manipuleaz\u0103 doar datele deja criptate, iar pentru criptare \u0219i decriptare sunt utilizate celelalte dou\u0103 computere. Al doilea computer poate fi folosit doar pentru decriptarea \u0219i afi\u0219area mesajelor primite, iar al treilea doar pentru criptarea \u0219i trimiterea de noi mesaje. Prin urmare, al doilea computer are doar cheile pentru decriptare, iar al treilea are doar cheile pentru criptare. <\/p>\n

A doua \u0219i a treia computere nu au o conexiune direct\u0103 la re\u021bea \u0219i sunt separate de computerul-gateway printr-un splitter USB special, care folose\u0219te principiul \u201ediod\u0103 de date<\/a><\/noindex>\u201d \u0219i permite transmiterea datelor fizic doar \u00eentr-o singur\u0103 direc\u021bie. Splitterul permite doar trimiterea de date c\u0103tre al doilea computer \u0219i doar primirea de date de la al treilea computer. Direc\u021bia datelor \u00een splitter este limitat\u0103 prin intermediul optoizolatoare<\/a><\/noindex> (simpla rupere a liniilor Tx \u0219i Rx \u00een cablu nu este suficient\u0103, deoarece ruptura nu exclude transmiterea datelor \u00een direc\u021bia opus\u0103 \u0219i nu garanteaz\u0103 c\u0103 linia Tx nu va fi folosit\u0103 pentru citire, iar Rx pentru transmitere). Splitterul poate fi asamblat din piese disponibile, diagramele sunt ata\u0219ate<\/a><\/noindex> (PCB<\/a><\/noindex>) \u0219i sunt disponibile sub licen\u021ba GNU FDL 1.3. <\/p>\n

\"Proiectul<\/a><\/noindex><\/center><\/p>\n

\u00cen cazul acestei scheme, compromiterea gateway-ului nu va permite<\/a><\/noindex> accesul la cheile de criptare \u0219i nu va permite continuarea atacului asupra celorlalte dispozitive. \u00cen cazul compromiterii computerului pe care sunt stocate cheile de decriptare, informa\u021biile de pe acesta nu pot fi transmise \u00een exterior, deoarece fluxul de date este restric\u021bionat doar la primirea informa\u021biilor, iar transmiterea invers\u0103 este blocat\u0103 de dioda de date.<\/p>\n

\"Proiectul<\/a><\/noindex><\/center><\/p>\n

Criptarea este realizat\u0103 pe baza cheilor de 256 de bi\u021bi folosind XChaCha20-Poly1305, iar pentru protec\u021bia cheilor este utilizat\u0103 o func\u021bie hash lent\u0103 Argon2id<\/a><\/noindex>. Pentru schimbul de chei se utilizeaz\u0103 X448<\/a><\/noindex> (protocolul Diffie-Hellman bazat pe Curve448) sau chei PSK (pre-shared<\/a><\/noindex>). Fiecare mesaj este transmis \u00een modul de secret perfect de avansare (PFS, Perfect Forward Secrecy<\/a><\/noindex>) bazate pe hash-uri Blake2b, \u00een care compromiterea uneia dintre cheile pe termen lung nu permite decriptarea unei sesiuni anterior interceptate. Interfa\u021ba aplica\u021biei este extrem de simpl\u0103 \u0219i include o fereastr\u0103 \u00eemp\u0103r\u021bit\u0103 \u00een trei zone \u2013 trimitere, primire \u0219i linie de comand\u0103 cu log-uri de interac\u021biune cu gateway-ul. Controlul se realizeaz\u0103 printr-un set special de comenzi<\/a><\/noindex>.<\/p>\n

\"Proiectul<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 TFC (Tinfoil Chat) \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e-\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u043b\u0430 \u0431\u044b \u0442\u0430\u0439\u043d\u0443 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0438 \u0434\u0430\u0436\u0435 \u043f\u0440\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv3. \u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0435 \u043d\u044b\u043d\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0441\u043a\u0432\u043e\u0437\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u043e\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043d\u0430 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-56034","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Proiectul TFC dezvolt\u0103 un sistem de schimb de mesaje cu protec\u021bie paranoic\u0103 | ProHoster","description":"\u00cen cadrul proiectului TFC (Tinfoil Chat) a fost f\u0103cut\u0103 o \u00eencercare de creare a unui prototip de sistem de schimb de mesaje cu protec\u021bie paranoic\u0103, care.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 TFC \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 | ProHoster","og:description":"\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 TFC (Tinfoil Chat) \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e-\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-02T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"56034","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:32:32","updated":"2022-10-06 03:45:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/56034","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=56034"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/56034\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=56034"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=56034"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=56034"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}