Sei cryptography? Ini pachangu ndine ruzivo rwakanyanya pamusoro pazvo. Hongu, ndakaverenga basa rekare , asi kare-kare; Ehe, ndinonzwisisa musiyano uripo pakati pe symmetric uye asymmetric encryption, ndinonzwisisa kuti elliptic curves chii, asi ndizvozvo. Uyezve, makiriibhurari aripo ecryptographic, ane tsika yavo yakanaka yekusanganisira zita rakazara regorithm muzita rebasa rega rega uye boka rekutanga rinobuda kunze, rinondipa butthurt inotyisa semugadziri wepurogiramu.
Saka nei? Pamwe nekuti kana ndichiverenga mafungu azvino ezvinyorwa nezve kuchengetedzwa kwedata, ruzivo rwakavanzika, nezvimwe, ndinonzwa manzwiro ekuti tiri kuchera pane imwe nzvimbo munzvimbo isiriyo, kana zvakanyanya, tiri kuyedza kugadzirisa zvakanyanya matambudziko emagariro nerubatsiro rwehunyanzvi. zvinoreva (cryptography). Ngatitaure nezve izvi, ini handivimbise zvakawanikwa-epoch, pamwe nemazano ekongiri, pfungwa dzisina basa ndizvo chete: zvisina basa.
Zvishoma zvenhoroondo, zvishoma
Muna 1976, United States yakatora chiyero chemubatanidzwa chesymmetric encryption algorithms - DES. Yakanga iri yekutanga yeruzhinji uye yakamisikidzwa cryptographic algorithm yakagadzirwa mukupindura kuri kukura bhizinesi zvido zvekuchengetedza data.
Ndebvu kuda kuziva
Iyo algorithm yakaburitswa nekukanganisa. Yakagadziridzwa kuitira kushandiswa kwehardware uye yaionekwa seyakaomesesa uye isingashande pakuita software. Zvisinei, Mutemo waMoore wakakurumidza kuisa zvinhu zvose munzvimbo yazvo.
Zvinoita senge - kuguma kwenyaya, tora, encrypt, decrypt, kana zvichidikanwa, wedzera kureba kwekiyi. Zvichida iwe unonyatsoziva kuti maAmerican akasiya mabhukimaki mairi, saka pane analogue yeRussia kwauri - , iyo yaungangovimba nayo zvishoma. Zvadaro shandisa zvose, imwe pamusoro peimwe. Kana iwe uchitenda kuti FBI neFSB vakabatana nekuda kwako uye vakatsinhana mabhukimaki avo, saka ndine nhau dzakanaka kwauri - hausi paranoid, une banal kunyengera kwehukuru.
Symmetric encryption inoshanda sei? Vese vatori vechikamu vanoziva kiyi imwechete, inozivikanwawo sepassword, uye chii chakavharidzirwa nacho chinogonawo kudhindwa nacho. Chirongwa chacho chinoshanda zvakanaka kune vasori, asi hachina kukodzera zvachose kuInternet yemazuva ano, sezvo kiyi iyi inofanira kuendeswa kune imwe neimwe yevanopindira mberi. Kwenguva yakati, nepo makambani mashoma akadzivirira data ravo pakutaurirana nemumwe aimbozivikanwa, dambudziko rakagadziriswa nerubatsiro rwevatakuri uye tsamba dzakachengeteka, asi iyo Internet yakapararira uye yakauya mumufananidzo.
Asymmetric cryptography
uko makiyi maviri anobatanidzwa: paruzhinji, iyo isingavanzirwe uye inotaurirwa kune chero munhu; Uye zvakavanzika, izvo chete muridzi wayo anoziva. Izvo zvakavharidzirwa nekiyi yeruzhinji zvinogona kungodzikiswa neakavanzika, uye zvinopesana. Saka, chero munhu anogona kutsvaga kiyi yeruzhinji yeanogamuchira uye kumutumira meseji, mugamuchiri chete ndiye achaiverenga. Zvingaita sekuti dambudziko ragadziriswa?
asi internet haishande nenzira iyoyo, dambudziko rinomuka nesimba rakazara authentication uye kunyanya, chokwadi chekutanga, uye neimwe nzira dambudziko rinopesana kusazivikanwa. Muchidimbu, ndingava sei nechokwadi chokuti munhu wandiri kutaura naye ndiye wandaida kutaura naye? uye kiyi yeruzhinji yandiri kushandisa ndeyemunhu wandanga ndichataura naye? Kunyanya kana iri nguva yangu yekutanga kutaura naye? Uye ungaisa sei chivimbo mumumwe wako uchichengeta kusazivikanwa? Kare pano, kana ukanyatsotarisisa, unogona kuona kupesana kwemukati.
Ngatitarisei mune zvakajairika maitiro ekudyidzana pakati pevatori vechikamu aripo uye anoshandiswa mukuita:
- server - server (kana bhizinesi - bhizinesi, mune ino mamiriro akafanana): iyi ndiyo yakapusa classical chirongwa, iyo symmetric cryptography yakakwana, vatori vechikamu vanoziva zvese nezve mumwe nemumwe, kusanganisira off-network contacts. Nekudaro, ndapota cherechedza kuti hatisi kana kutaura nezve chero kusazivikanwa pano, uye nhamba yevatori vechikamu inongogumira kune vaviri. Ndokunge, ichi chinenge chakanakira chirongwa cheyakanyanya kushomeka nhamba yekutaurirana uye, mune yakajairika, iri pachena yekushandiswa kushoma.
- server - anonymous (kana bhizinesi - mutengi): pane imwe asymmetry pano, iyo inobudirira kushandiswa neasymmetric cryptography. Chinhu chakakosha pano kushaikwa kwechokwadi chevatengi; sevha haina basa naani chaizvo yainotsinhanisa data; kana kamwe kamwe zvichidikanwa, sevha inoitisa yechipiri authentication uchishandisa password yakambobvumidzwa, uyezve zvese zvinouya kune yapfuura kesi. Kune rumwe rutivi, mutengi zvakakosha zvakanyanya server authentication, anoda kuve nechokwadi chekuti data rake rinosvika chaizvo kumunhu waakatumira kwaari, divi iri mukuita rinobva pane chitupa system. Kazhinji, chirongwa ichi chiri nyore uye zvakajeka chakafukidzwa ne https:// protocol, asi akati wandei mapoinzi anonakidza anomuka pamharadzano yecryptography uye sociology.
- Vimba neserver: kunyangwe ndikatumira rumwe ruzivo kuchamhembe nenzira yakachengeteka, nehunyanzvi vekunze vanogona kuiwana ikoko. Dambudziko iri riri kunze kwechiyero che encryption, asi ndinokumbira kuti uyeuke iyi poindi, ichauya gare gare.
- Vimba neserver setifiketi: iyo hierarchy yezvitupa yakavakirwa pachokwadi chekuti pane chimwe chinhu mudzi chitupa chakakodzera Mhedziso kuvimba. Nehunyanzvi, munhu anorwisa ane simba rakakwana [ndokumbira tarisa izwi rekurwisa sezwi rehunyanzvi, uye kwete sekutuka kana kutuka hurumende iripo] anogona kutsiva chitupa chechero nhanho yepasi, asi zvinofungidzirwa kuti certification system inodiwa nemunhu wese. zvakaenzana, i.e. uyu certifier anozoraswa nekukasira uye zvitupa zvake zvese zvichabviswa. Saka zvakadaro, asi zvakadaro cherechedza kuti iyo hurongwa haina kubva kune unyanzvi nzira, asi pane imwe mhando yekontrakiti yevanhu. Nenzira, pamusoro pekupisaSechikamu cheinotarisirwa zuva rekupedzisira pupation yeRuNet, pane munhu akaongorora zvinogona kuitika zvechiRussia mudzi chitupa uye mhedzisiro? Kana paine munhu akaverenga / anyora pane iyi nyaya, nditumire zvinongedzo, ini ndinozviwedzera, ndinofunga kuti musoro wacho unonakidza
- indirect de-anonymization pane sevha: zvakare inyaya inorwadza, kunyangwe sevha isina kunyoreswa / kusimbiswa, kune nzira dzakawanda dzekuunganidza ruzivo nezve mutengi uye pakupedzisira kumuziva. Zvinoratidzika kwandiri kuti mudzi wedambudziko uri mune iripo http: // protocol uye mamwe akafanana nawo, ayo, sezvaitarisirwa, angadai asina kufanoona kutsamwa kwakadaro; uye kuti zvingaite chaizvo kugadzira parallel protocol pasina aya punctures. Nekudaro, izvi zvinopesana nemaitiro ese aripo ekuita mari saka hazvigoneke. Ndichiri kushamisika, pane akazviedza here?
- asingazivikanwe - asingazivikanwe: vanhu vaviri vanosangana online, (sarudzo - ichangobva kusangana), (sarudzo - kwete mbiri asi zviuru zviviri), uye vanoda kukurukura nezvezvinhu zvavo, asi nenzira yekuti Mukoma haana kunzwa (chisarudzo: amai havana kuziva, munhu wose ane zvaanokoshesa). Unogona kunzwa manyemwe muinzwi rangu, asi imhaka yekuti ndizvo zvazviri. Ngatishandise Schneier's postulate kune dambudziko (chero algorithm inogona kutsemuka kana zviwanikwa zvakakwana zvakaiswa, ndiko kuti, mari nenguva). Kubva pakuona uku, kupinda muboka rakadaro nenzira dzevanhu hakurevi dambudziko, tisingatauri mari, ndiko kuti, simba rekrisptographic regorgorithm. zero neyakaomesesa encryption nzira.
Nekudaro, kune iyi kesi tine yechipiri bastion - kusazivikanwa, uye tinoisa tariro yedu yose paari, kunyange kana munhu wose achitiziva, asi hapana angatiwana. Zvisinei, nenzira dzazvino uno dzounyanzvi dzokudzivirira, unofunga zvakakomba here kuti une mukana? Rega ndikuyeuchidze kuti ikozvino ndiri kungotaura nezve kusazivikanwa; zvinoita sekunge isu takatopedza zvinogutsa kuchengetedza data. Kuti zvive pachena, ngatibvumirane kuti kana zita rako rikazivikanwa kana kero yepamba kana IP kero, kubuda kwakundikana zvachose.
Kutaura nezve ip, apa ndipo panopinda zviri pamusoro apa vimba neserver, anoziva IP yako pasina mubvunzo. Uye pano zvese zvinotamba zvichipokana newe - kubva pakuda kuziva kwevanhu uye zvisina maturo, kusvika kumapato emakambani uye kuita mari kwakafanana. Ingo yeuka kuti VPS neVPN zvakare maseva; kune cryptography theorists, aya mapfupiso haana basa neimwe nzira; Hongu, uye hutongi hwesevha hahuna kuita basa kana paine kudiwa kukuru. Izvi zvinosanganisirawo kupera-kusvika-kumagumo encryption - inonzwika yakanaka uye yakasimba, asi sevha ichiri kufanira kutora izwi rayo pazviri.
Ndeipi basa rese reserver munhume yakadai? Chekutanga, hazvina basa kuti postman, kana mugamuchiri asiri pamba, auye zvakare gare gare. Asi zvakare, uye izvi zvakanyanya kukosha, iyi ndiyo nzvimbo yemusangano, haugone kutumira tsamba yacho zvakananga kune anogamuchira, unoitumira kune server kuti ienderere mberi. Uye zvinonyanya kukosha, sevha inoitisa chokwadi chinodiwa, kusimbisa kumunhu wese kuti ndiwe, uye kwauri - kuti interlocutor wako ndiye chaiye waunoda. Uye anoita izvi achishandisa foni yako.
Haufungi here kuti mutumwa wako anoziva zvakawanda nezvako? Kwete, kwete, chokwadi tinomutenda (uye nenzira, foni yedu panguva imwe chete, hmm), asi vanyori vekunyora vanotivimbisa kuti izvi hazvina maturo, kuti hatigoni kuvimba nemunhu zvachose.
Hauna kugutsikana? Asi kune zvakare imwechete yeinjiniya yemagariro, kana uine zana vanopindirana muboka, iwe unongofunga kuti 50% yavo vavengi, 49% vangave vasina maturo, mapenzi, kana kungoita hanya. Uye chikamu chimwe muzana chasara, zvisinei kuti wakasimba sei munzira dzekuchengetedza ruzivo, iwe ungangove usingakwanise kuramba nyanzvi yakanaka yepfungwa mukutaura.
Iyo chete nzira yekudzivirira inoita kunge yekurasika pakati pemamiriyoni emapoka akafanana, asi izvi hazvisisiri nezvedu, zvakare nezvevamwe vasori-magandanga vasingadi mukurumbira wepamhepo kana kuita mari.
Zvakanaka, zvinoratidzika kwandiri kuti neimwe nzira ndakatsigira (kwete, handina kuratidza, ndakangosimbisa) pfungwa dzangu dzakaoma pamusoro pekuchengetedzwa kwemashoko mumuenzaniso wemazuva ano wevanhu. Mhedziso iri nyore asi inosuruvarisa - isu hatifanirwe kuvimba nerubatsiro rwakawanda kubva kune data encryption kupfuura yatatova nayo, cryptography yaita zvese zvaigona, uye yaita nemazvo, asi muenzaniso wedu weInternet unopesana zvachose nechishuwo chedu chekuvanzika uye unobvisa zvese zvatinoedza kuita. . Muchokwadi, ini handisi munhu asina tariro uye ndinoda chaizvo kutaura chimwe chinhu chakajeka ikozvino, asi ini handizivi kuti chii.
Edza kutarisa muchikamu chinotevera, asi ndinokuyambira - kune fungidziro dzisiri dzesainzi dzakatsvuka, asi dzinogona kuvimbisa mumwe munhu, uye kungoseka mumwe munhu.
Zvinoita here kuita chero chinhu zvachose?
Zvakanaka, semuenzaniso, funga nezvenyaya iyi, zviri nani nekusunungura kuziva kwako uye kurasa rusaruro. Semuenzaniso, ngatitorei zvachose zvachose ngatibaire kusazivikanwa, pasinei nokuti zvingaita sei. Rega munhu wese apiwe kiyi yeruzhinji yakasarudzika kubva pakuzvarwa, uye kiyi yakavanzika inoenderana, hongu. Hapana chikonzero chekudanidzira kwandiri uye kutsika tsoka dzako, nyika yakanaka izvi zviri nyore kwazvo - pano une pasipoti yako, nhamba yekuzivikanwa yemutero, uye kunyange nhamba yefoni mubhodhoro rimwe. Uyezve, kana iwe ukawedzera chitupa chega kune izvi, unowana wepasirese authenticator/login; uyewo muchengeti wehomwe ane simba rekusimbisa chero magwaro. Iwe unogona kuita iyo system yakawanda-level - chete kiyi yeruzhinji uye chitupa zvinowanikwa pachena, kune shamwari (iyo rondedzero yemakiyi akabatanidzwa pano) unogona kuita kuti foni yako ivepo uye chii chimwe chavanovimba neshamwari, panogona kunge paine zvakadzika. mazinga, asi izvi zvinotoreva kuvimba kusingakoshi museva .
Nechirongwa ichi, kuvanzika kweruzivo rwunofambiswa kunowanikwa otomatiki (kunyangwe kune rimwe divi, sei, munyika yakanaka?), Alice anonyora chimwe chinhu kuna Bob, asi hapana anombochiverenga kunze kwaBob pachake. Vese vatumwa vanongogashira kumagumo-kusvika-kumagumo encryption, basa ravo rakaderedzwa kusvika kumabhokisi etsamba uye, musimboti, hapagone kuve nekunyunyuta pamusoro pezviri mukati. Uye maseva pachawo anochinjana, unogona kutumira kuburikidza neimwe, kana kuburikidza neimwe, kana kunyangwe kuburikidza neketani yemaseva, senge email. Iwe unogona zvakare kuitumira zvakananga kune anogamuchira kana IP yake ichizivikanwa, pasina kubata chero vamiririri zvachose. Hazvina kunaka here? Zvinongosiririsa kuti isu hatifanirwe kurarama munguva ino yakanaka - kwete kwandiri kana iwe. Nn-hongu, zvakare ndiri kutaura pamusoro pezvinhu zvinosuruvarisa.
Tevere, kupi kuchengeta zvese izvi? Zvakanaka, kubva pamusoro pemusoro wangu, gadzira yakavhurika hierarchical system, chimwe chinhu senge yazvino DNS, ine simba chete uye yakakura. Kuti urege kuremedza midzi DNS maneja neakawedzera uye negadziriso, unogona kuita kunyoresa mahara, cheki inodiwa chete ndeyekusiyana. Like >> " Mhoro, isu tiri vanhu vashanu, mhuri yeIvanov. Heano mazita edu/mazita edu, heano makiyi eruzhinji. Kana pane anobvunza, ndapota titumire kwatiri. Uye heino runyoro rwemazana nemazana mashanu ambuya kubva munharaunda yedu nemakiyi avo, kana vakabvunzwa, titumirewo kwatiri.Β«
Iwe unongoda kuita kuisirwa uye kumisikidzwa kweiyo sevha yemba yakapusa uye iri nyore, kuitira kuti chero munhu azvione kana achida, zvakare, hapana anozorodha chero maseva ehurumende ehurumende.
Mira!, asi nyika inei chokuita nazvo ipapo?
Asi ikozvino iwe unogona kunyatso kudzorera kusazivikanwa. Kana paine munhu anogona kuzvigadzirira kiyi yavo pachavo uye nekuisimbisa nechitupa chega uye kuisa yakaderera-level CA server ivo, kana kubvunza muvakidzani, kana kune imwe sevha yeruzhinji, nei zvese izvi zviri pamutemo zvichidikanwa? Uye ipapo hapana chikonzero chekubatanidzwa kune hunhu chaihwo, kuvanzika kwakazara, kuchengetedzeka uye kusazivikanwa. Zvakakwana kuti pakutanga kwehutungamiri kune mumwe munhu akavimbika, zvakanaka, isu tinotenda muTM kana Let's Encrypt, uye anozivikanwa neruzhinji DNSs haasati atumira chero munhu kune steppe. Zvinoita sekuti hapafanirwe kuve nekunyunyuta kubva kuvakuru vehurumende kana, ndiko kuti, chokwadi pachava nekunyunyuta, asi kusvika papi?
Zvichida rimwe zuva hurongwa hwakadaro, kana chimwe chinhu chakafanana, chichagadzirwa. Uye zvechokwadi, isu hatina wekuvimba naye kunze kwedu isu; hapana imwe yenyika dzinozivikanwa kwandiri ichavaka system yakadai. Neraki, iyo yatovepo Telegraph, i2p, Tor, uye pamwe mumwe munhu wandakanganwa, anoratidza kuti hapana chinhu chisingagoneke. Iyi ndiyo network yedu, uye isu tinofanirwa kuishongedza kana tisina kugutsikana nemamiriro ezvinhu aripo.
Brrr, ndakangoerekana ndaguma pane zvinosiririsa. Muchokwadi, ini handizvide izvi, ini neimwe nzira ndinofarira kutsvinya.
PS: izvi zvose, hongu, pink snot uye girlish hope
PPS: asi kana mumwe munhu akangoerekana afunga kuzviedza, ndichengetere zita remadunhurirwa ndapota ndajaira
PPPS: uye kuita sekunge kuri nyore nenzira
Source: www.habr.com