{"id":56034,"date":"2020-02-03T00:00:00","date_gmt":"2020-02-02T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami"},"modified":"2020-02-18T14:04:12","modified_gmt":"2020-02-18T11:04:12","slug":"proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","title":{"rendered":"Projekt TFC rozv\u00edja paranoidne chr\u00e1nen\u00fd syst\u00e9m v\u00fdmeny spr\u00e1v","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

V r\u00e1mci projektu TFC<\/a><\/noindex> (Tinfoil Chat) bola podniknut\u00e1 snaha o vytvorenie prototypu paranoidne chr\u00e1nen\u00e9ho syst\u00e9mu v\u00fdmeny spr\u00e1v, ktor\u00fd by zachoval tajnos\u0165 konverz\u00e1cie aj pri kompromit\u00e1cii koncov\u00fdch zariaden\u00ed. Pre zjednodu\u0161enie auditu bol k\u00f3d projektu nap\u00edsan\u00fd v jazyku Python a je dostupn\u00fd<\/a><\/noindex> je pod licenciou GPLv3.<\/p>\n

Be\u017en\u00e9 syst\u00e9my v\u00fdmeny spr\u00e1v, ktor\u00e9 vyu\u017e\u00edvaj\u00fa end-to-end \u0161ifrovanie, umo\u017e\u0148uj\u00fa chr\u00e1ni\u0165 konverz\u00e1cie pred odpo\u010d\u00favan\u00edm na medzi\u010dl\u00e1nkov\u00fdch serveroch a anal\u00fdzou tranzitn\u00e9ho prenodu, ale nechr\u00e1nia pred probl\u00e9mami na strane klientsk\u00e9ho zariadenia. Na kompromit\u00e1ciu syst\u00e9mov s end-to-end \u0161ifrovan\u00edm sta\u010d\u00ed na koncovom zariaden\u00ed skompromitova\u0165 opera\u010dn\u00fd syst\u00e9m, firmv\u00e9r alebo aplik\u00e1ciu-messenger, napr\u00edklad pomocou zneu\u017eitia predt\u00fdm nezn\u00e1mych zranite\u013enost\u00ed, p\u00f4vodn\u00e9ho nasadenia softv\u00e9rov\u00fdch alebo hardv\u00e9rov\u00fdch zadn\u00fdch vr\u00e1tok, alebo dodan\u00edm falo\u0161nej aktualiz\u00e1cie s backdoorom (napr\u00edklad pri tlaku na v\u00fdvoj\u00e1ra zo strany tajn\u00fdch slu\u017eieb alebo krimin\u00e1lnych skup\u00edn). Dokonca aj ak s\u00fa k\u013e\u00fa\u010de pre \u0161ifrovanie ulo\u017een\u00e9 na samostatnom tokene, pri kontrole nad syst\u00e9mom pou\u017e\u00edvate\u013ea v\u017edy zost\u00e1va mo\u017enos\u0165 sledova\u0165 procesy, odpo\u010d\u00fava\u0165 d\u00e1ta z kl\u00e1vesnice a monitorova\u0165 v\u00fdstup na obrazovke.<\/p>\n

TFC pon\u00faka hardv\u00e9rovo-softv\u00e9rov\u00fd komplex, ktor\u00fd vy\u017eaduje vyu\u017eitie na strane klienta troch samostatn\u00fdch po\u010d\u00edta\u010dov a \u0161peci\u00e1lneho hardv\u00e9rov\u00e9ho splitteru. Cel\u00fd prenos d\u00e1t v procese interakcie \u00fa\u010dastn\u00edkov v\u00fdmeny spr\u00e1v prebieha prostredn\u00edctvom anonymnej siete Tor, a aplik\u00e1cie na v\u00fdmenu spr\u00e1v s\u00fa implementovan\u00e9 vo forme skryt\u00fdch slu\u017eieb Tor (pou\u017e\u00edvatelia s\u00fa pri v\u00fdmene spr\u00e1v identifikovan\u00ed pod\u013ea adries skryt\u00fdch slu\u017eieb a k\u013e\u00fa\u010dov). <\/p>\n

\"Projekt<\/a><\/noindex><\/center><\/p>\n

Prv\u00fd po\u010d\u00edta\u010d sl\u00fa\u017ei ako br\u00e1na na pripojenie k sieti a spustenie skryt\u00e9ho servisu Tor. Br\u00e1na manipuluje iba s u\u017e za\u0161ifrovan\u00fdmi \u00fadajmi, a na \u0161ifrovanie a de\u0161ifrovanie sa pou\u017e\u00edvaj\u00fa dva ostatn\u00e9 po\u010d\u00edta\u010de. Druh\u00fd po\u010d\u00edta\u010d m\u00f4\u017ee by\u0165 pou\u017eit\u00fd len na de\u0161ifrovanie a zobrazenie prijat\u00fdch spr\u00e1v, zatia\u013e \u010do tret\u00ed sl\u00fa\u017ei iba na \u0161ifrovanie a odosielanie nov\u00fdch spr\u00e1v. Pod\u013ea toho m\u00e1 druh\u00fd po\u010d\u00edta\u010d len k\u013e\u00fa\u010de na de\u0161ifrovanie, a tret\u00ed iba k\u013e\u00fa\u010de na \u0161ifrovanie. <\/p>\n

Druh\u00fd a tret\u00ed po\u010d\u00edta\u010de nemaj\u00fa priame pripojenie k sieti a s\u00fa oddelen\u00e9 od po\u010d\u00edta\u010da-br\u00e1ny \u0161peci\u00e1lnym USB splitterom, ktor\u00fd vyu\u017e\u00edva princ\u00edp «di\u00f3du d\u00e1t<\/a><\/noindex>» a pren\u00e1\u0161a d\u00e1ta fyzicky iba jedn\u00fdm smerom. Splitter umo\u017e\u0148uje len odosielanie d\u00e1t smerom k druh\u00e9mu po\u010d\u00edta\u010du a prij\u00edmanie d\u00e1t len od tretieho po\u010d\u00edta\u010da. Smerovanie d\u00e1t v splitteri je obmedzen\u00e9 pomocou optronov<\/a><\/noindex> (oby\u010dajn\u00e9 preru\u0161enie liniek Tx a Rx v k\u00e1bli nesta\u010d\u00ed, preto\u017ee preru\u0161enie nevylu\u010duje prenos d\u00e1t v opa\u010dnom smeru a nezaru\u010duje, \u017ee l\u00ednia Tx nebude pou\u017eit\u00e1 na \u010d\u00edtanie, a Rx na prenos). Rozbo\u010dova\u010d mo\u017eno zostavi\u0165 z dostupn\u00fdch komponentov, sch\u00e9my s\u00fa prilo\u017een\u00e9<\/a><\/noindex> (PCB<\/a><\/noindex>) a s\u00fa k dispoz\u00edcii pod licenciou GNU FDL 1.3. <\/p>\n

\"Projekt<\/a><\/noindex><\/center><\/p>\n

Pri takejto sch\u00e9me kompromit\u00e1cia br\u00e1ny neumo\u017en\u00ed<\/a><\/noindex> z\u00edska\u0165 pr\u00edstup k \u0161ifrovac\u00edm k\u013e\u00fa\u010dom a ned\u00e1 mo\u017enos\u0165 pokra\u010dova\u0165 v \u00fatoku na zost\u00e1vaj\u00face zariadenia. V pr\u00edpade kompromit\u00e1cie po\u010d\u00edta\u010da, na ktorom s\u00fa umiestnen\u00e9 k\u013e\u00fa\u010de na de\u0161ifrovanie, inform\u00e1cie z neho nebude mo\u017en\u00e9 prenies\u0165 do vonkaj\u0161ieho sveta, preto\u017ee tok d\u00e1t je obmedzen\u00fd iba na z\u00edskavanie inform\u00e1ci\u00ed, a sp\u00e4tn\u00fd prenos blokuje di\u00f3da d\u00e1t.<\/p>\n

\"Projekt<\/a><\/noindex><\/center><\/p>\n

\u0160ifrovanie je realizovan\u00e9 na z\u00e1klade 256-bitov\u00fdch k\u013e\u00fa\u010dov s XChaCha20-Poly1305, na ochranu k\u013e\u00fa\u010dov sa pou\u017e\u00edva pomal\u00e1 hashovacia funkcia Argon2id<\/a><\/noindex>. Na v\u00fdmenu k\u013e\u00fa\u010dov sa pou\u017e\u00edva X448<\/a><\/noindex> (protokol Diffie-Hellman zalo\u017een\u00fd na Curve448) alebo PSK k\u013e\u00fa\u010dov (pre-shared<\/a><\/noindex>). Ka\u017ed\u00e1 spr\u00e1va sa pren\u00e1\u0161a v re\u017eime dokonal\u00e9ho predn\u00e9ho utajenia (PFS, Perfect Forward Secrecy<\/a><\/noindex>) zalo\u017een\u00fdch na he\u0161och Blake2b, pri ktor\u00fdch kompromit\u00e1cia jedn\u00e9ho z dlhodob\u00fdch k\u013e\u00fa\u010dov neumo\u017e\u0148uje de\u0161ifrova\u0165 predt\u00fdm zachyten\u00fa rel\u00e1ciu. Rozhranie aplik\u00e1cie je maxim\u00e1lne jednoduch\u00e9 a obsahuje okno rozdelen\u00e9 do troch oblast\u00ed — odosielanie, prij\u00edmanie a pr\u00edkazov\u00fd riadok s logom interakcie so br\u00e1nou. Ovl\u00e1danie sa vykon\u00e1va prostredn\u00edctvom \u0161peci\u00e1lneho s\u00fabor pr\u00edkazov<\/a><\/noindex>.<\/p>\n

\"Projekt<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 TFC (Tinfoil Chat) \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e-\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u043b\u0430 \u0431\u044b \u0442\u0430\u0439\u043d\u0443 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0438 \u0434\u0430\u0436\u0435 \u043f\u0440\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv3. \u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0435 \u043d\u044b\u043d\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0441\u043a\u0432\u043e\u0437\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u043e\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043d\u0430 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-56034","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Projekt TFC rozv\u00edja paranojne chr\u00e1nen\u00fd syst\u00e9m v\u00fdmeny spr\u00e1v | ProHoster","description":"V r\u00e1mci projektu TFC (Tinfoil Chat) bola podniknut\u00e1 snaha o vytvorenie prototypu paranojne chr\u00e1nen\u00e9ho syst\u00e9mu v\u00fdmeny spr\u00e1v, ktor\u00fd.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 TFC \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 | ProHoster","og:description":"\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 TFC (Tinfoil Chat) \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e-\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-02T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"56034","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:32:32","updated":"2022-10-06 03:45:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/56034","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=56034"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/56034\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=56034"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=56034"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=56034"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}