{"id":56034,"date":"2020-02-03T00:00:00","date_gmt":"2020-02-02T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami"},"modified":"2020-02-18T14:04:12","modified_gmt":"2020-02-18T11:04:12","slug":"proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","title":{"rendered":"Projekt TFC razvija paranoi\u010dno za\u0161ti\u0107eni sistem za razmenu poruka","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

U okviru projekta TFC<\/a><\/noindex> (Tinfoil Chat) preduzeta je poku\u0161aj stvaranja prototipa paranoi\u010dno za\u0161ti\u0107enog sistema za razmenu poruka, koji bi \u010duvao tajnost prepiske \u010dak i u slu\u010daju kompromitacije krajnjih ure\u0111aja. Radi pojednostavljenja sprovo\u0111enja audita, kod projekta je napisan na jeziku Python i je na voljo<\/a><\/noindex> pod GPLv3 licencom.<\/p>\n

Sada\u0161nje \u0161iroko kori\u0161\u0107ene platforme za razmenu poruka, koje koriste end-to-end enkripciju, omogu\u0107avaju za\u0161titu prepiske od presretanja na posredni\u010dkim serverima i od analize tranzitnog saobra\u0107aja, ali ne \u0161tite od problema na strani klijentskog ure\u0111aja. Za kompromitaciju sistema koji se oslanjaju na end-to-end enkripciju dovoljno je na kraju ure\u0111aja kompromitovati operativni sistem, firmver ili aplikaciju za razmenu poruka, na primer, putem eksploatacije prethodno neotkrivenih ranjivosti, po\u010detnog ubacivanja softverskih ili hardverskih backdoora ili putem isporuke la\u017enog a\u017euriranja sa backdoorom (na primer, pod pritiskom slu\u017ebi bezbednosti ili kriminalnih grupa). \u010cak i ako su klju\u010devi za enkripciju sme\u0161teni na posebnom tokenu, u prisustvu kontrole sistema korisnika uvek postoji mogu\u0107nost pra\u0107enja procesa, presretanja podataka sa tastature i pra\u0107enja izlaza na ekranu.<\/p>\n

TFC nudi hardversko-softverski paket koji zahteva upotrebu tri odvojena ra\u010dunara na strani klijenta i specijalnog hardverskog splitter-a. Sav saobra\u0107aj tokom interakcije u\u010desnika u razmeni poruka prolazi kroz anonimnu mre\u017eu Tor, a programi za razmenu poruka su realizovani u obliku skrivenih Tor servisa (korisnici se prilikom razmene poruka identifikuju prema adresama skrivenih servisa i klju\u010devima). <\/p>\n

\"Projekt<\/a><\/noindex><\/center><\/p>\n

Prvi ra\u010dunar slu\u017ei kao pristupna ta\u010dka za povezivanje na mre\u017eu i pokretanje skrivenog Tor servisa. Pristupna ta\u010dka manipuli\u0161e samo ve\u0107 enkriptovanim podacima, dok se za enkripciju i dekripciju koriste dva preostala ra\u010dunara. Drugi ra\u010dunar se mo\u017ee koristiti samo za dekripciju i prikazivanje primljenih poruka, dok tre\u0107i mo\u017ee koristiti samo za enkripciju i slanje novih poruka. Shodno tome, drugi ra\u010dunar ima samo klju\u010deve za dekripciju, a tre\u0107i samo klju\u010deve za enkripciju. <\/p>\n

\u0412\u0442\u043e\u0440\u043e\u0439 \u0438 \u0442\u0440\u0435\u0442\u0438\u0439 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b \u043d\u0435 \u0438\u043c\u0435\u044e\u0442 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0442\u0438 \u0438 \u043e\u0442\u0434\u0435\u043b\u0435\u043d\u044b \u043e\u0442 \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430-\u0448\u043b\u044e\u0437\u0430 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u043c USB-\u0441\u043f\u043b\u0438\u0442\u0442\u0435\u0440\u043e\u043c, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u043c \u043f\u0440\u0438\u043d\u0446\u0438\u043f «dioda za podatke<\/a><\/noindex>» \u0438 \u043f\u0440\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u043c \u0434\u0430\u043d\u043d\u044b\u0435 \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u0432 \u043e\u0434\u043d\u043e\u043c \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0438. \u0421\u043f\u043b\u0438\u0442\u0442\u0435\u0440 \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0443 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u0443 \u0432\u0442\u043e\u0440\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430 \u0438 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438\u0451\u043c \u0434\u0430\u043d\u043d\u044b\u0445 \u043e\u0442 \u0442\u0440\u0435\u0442\u044c\u0435\u0433\u043e \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u0430. \u041d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0434\u0430\u043d\u043d\u044b\u0445 \u0432 \u0441\u043f\u043b\u0438\u0442\u0442\u0435\u0440\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 optroni<\/a><\/noindex> (preprosto prekinitev linij Tx in Rx v kablu ni dovolj, saj prekinitev ne izklju\u010duje prenosa podatkov v obratni smeri in ne zagotavlja, da linija Tx ne bo uporabljena za branje, Rx pa za prenos). Razdelilnik je mogo\u010de sestaviti iz razpolo\u017eljivih delov, sheme so prilo\u017eene<\/a><\/noindex> (PCB<\/a><\/noindex>) in so na voljo pod licenco GNU FDL 1.3. <\/p>\n

\"Projekt<\/a><\/noindex><\/center><\/p>\n

Pri tak\u0161ni shemi kompromitacija prehodnika ne bo omogo\u010dila<\/a><\/noindex> dostopa do klju\u010dev za \u0161ifriranje in ne bo dal mo\u017enosti za nadaljevanje napada na preostale naprave. V primeru kompromitacije ra\u010dunalnika, na katerem so shranjeni klju\u010di za de\u0161ifriranje, informacij z njega ni mogo\u010de prenesti v zunanji svet, saj je pretok podatkov omejen le na prejemanje informacij, obratni prenos pa blokira dioda za podatke.<\/p>\n

\"Projekt<\/a><\/noindex><\/center><\/p>\n

\u0160ifriranje je izvedeno na osnovi 256-bitnih klju\u010dev na XChaCha20-Poly1305, za za\u0161\u010dito klju\u010dev s geslom pa se uporablja po\u010dasna hash funkcija Argon2id<\/a><\/noindex>. Za izmenjavo klju\u010dev se uporablja X448<\/a><\/noindex> (\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b \u0414\u0438\u0444\u0444\u0438 — \u0425\u0435\u043b\u043b\u043c\u0430\u043d\u0430 \u043d\u0430 \u0431\u0430\u0437\u0435 Curve448) \u0438\u043b\u0438 PSK-\u043a\u043b\u044e\u0447\u0438 (pre-shared<\/a><\/noindex>). Vsako sporo\u010dilo se prena\u0161a v na\u010dinu popolne neposredne skrivnosti (PFS, Perfect Forward Secrecy<\/a><\/noindex>) \u043d\u0430 \u0431\u0430\u0437\u0435 \u0445\u044d\u0448\u0435\u0439 Blake2b, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u044f \u043e\u0434\u043d\u043e\u0433\u043e \u0438\u0437 \u0434\u043e\u043b\u0433\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u043d\u0435\u0435 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0441\u0435\u0430\u043d\u0441. \u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f \u043f\u0440\u0435\u0434\u0435\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442 \u0438 \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 \u043e\u043a\u043d\u043e, \u0440\u0430\u0437\u0431\u0438\u0442\u043e\u0435 \u043d\u0430 \u0442\u0440\u0438 \u043e\u0431\u043b\u0430\u0441\u0442\u0438 — \u043e\u0442\u043f\u0440\u0430\u0432\u043a\u0430, \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u0435 \u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u0430\u044f \u0441\u0442\u0440\u043e\u043a\u0430 \u0441 \u043b\u043e\u0433\u043e\u043c \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0441\u043e \u0448\u043b\u044e\u0437\u043e\u043c. \u0423\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u0447\u0435\u0440\u0435\u0437 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0439 niza ukazov<\/a><\/noindex>.<\/p>\n

\"Projekt<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Izvor: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 TFC (Tinfoil Chat) \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e-\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043e\u0445\u0440\u0430\u043d\u044f\u043b\u0430 \u0431\u044b \u0442\u0430\u0439\u043d\u0443 \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0438 \u0434\u0430\u0436\u0435 \u043f\u0440\u0438 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432. \u0414\u043b\u044f \u0443\u043f\u0440\u043e\u0449\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0434\u0438\u0442\u0430 \u043a\u043e\u0434 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Python \u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv3. \u0420\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0435 \u043d\u044b\u043d\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0441\u043a\u0432\u043e\u0437\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043f\u0435\u0440\u0435\u043f\u0438\u0441\u043a\u0443 \u043e\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u043d\u0430 \u043f\u0440\u043e\u043c\u0435\u0436\u0443\u0442\u043e\u0447\u043d\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-56034","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Projekt TFC razvija paranoi\u010dno za\u0161\u010diten sistem za izmenjavo sporo\u010dil | ProHoster","description":"V okviru projekta TFC (Tinfoil Chat) je bil poskus ustvariti prototip paranoi\u010dno za\u0161\u010ditene sistema za izmenjavo sporo\u010dil, ki.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 TFC \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u0442 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u0443\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u0443 \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438 | ProHoster","og:description":"\u0412 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 TFC (Tinfoil Chat) \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u043d\u044f\u0442\u0430 \u043f\u043e\u043f\u044b\u0442\u043a\u0430 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043f\u0440\u043e\u0442\u043e\u0442\u0438\u043f\u0430 \u043f\u0430\u0440\u0430\u043d\u043e\u0438\u0434\u0430\u043b\u044c\u043d\u043e-\u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u043e\u0431\u043c\u0435\u043d\u0430 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u044f\u043c\u0438, \u043a\u043e\u0442\u043e\u0440\u0430\u044f.","og:url":"https:\/\/prohoster.info\/sl\/blog\/news\/proekt-tfc-razvivaet-paranoidalno-zashhishhyonnuyu-sistemu-obmena-soobshheniyami","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-02T21:00:00+00:00","article:modified_time":"2020-02-18T11:04:12+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"56034","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 19:32:32","updated":"2022-10-06 03:45:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/56034","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=56034"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/56034\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=56034"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=56034"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=56034"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}