Kudelski Security, kambani inoongorora kuchengetedza kuchengetedza, yakaburitsa Oramfs faira system nekuita kweORAM (Oblivious Random Access Machine) tekinoroji, iyo inovhara iyo data yekuwana maitiro. Iyo purojekiti inopa FUSE module yeLinux nekumisikidzwa kweiyo faira system layer isingatenderi kuteedzera chimiro chekunyora uye kuverenga mashandiro. Iyo Oramfs kodhi yakanyorwa muRust uye ine rezinesi pasi peGPLv3.
ORAM tekinoroji inosanganisira kusikwa kweimwe layer mukuwedzera kune encryption, iyo isingatenderi munhu kuti atarise chimiro chezvino chiitiko kana uchishanda nedata. Semuenzaniso, kana encryption ichishandiswa pakuchengeta data mune yechitatu-bato sevhisi, varidzi vesevhisi iyi havagone kuziva iyo data pachayo, asi vanogona kuona kuti ndeapi mabhuroki anowanikwa uye kuti ndeapi mavhisi anoitwa. ORAM inovanza ruzivo rwekuti ndezvipi zvikamu zveFS zviri kuwanikwa uye rudzii rwekushanda kuri kuitwa (kuverenga kana kunyora).
Oramfs inopa yepasirese faira system layer iyo inokutendera iwe kurerutsa iyo sangano rekuchengetedza data pane chero kunze kwekuchengetera. Data inochengeterwa encrypted ine sarudzo yechokwadi. ChaCha8, AES-CTR uye AES-GCM algorithms inogona kushandiswa encryption. Mapeteni mukunyora uye kuverenga kuwana akavanzwa uchishandisa iyo Path ORAM chirongwa. Mune ramangwana, zvimwe zvirongwa zvakarongwa kuti zviitwe, asi muchimiro chazvino, budiriro ichiri padanho reiyo prototype, isingakurudzirwe kushandiswa mumagadzirirwo ekugadzira.
Oramfs inogona kushandiswa nechero faira system uye haienderane nerudzi rwekunangwa kwekunze kuchengetedza - zvinokwanisika kuwiriranisa mafaera kune chero sevhisi inogona kukwikwidzwa muchimiro chenzvimbo dhairekitori (SSH, FTP, Google Drive, Amazon S3 , Dropbox, Google Cloud Storage, Mail.ru Cloud , Yandex.Disk uye mamwe mabasa anotsigirwa murclone kana kuti kune maFUSE modules ekusimudza). Saizi yekuchengetedza haina kugadzikiswa uye kana imwe nzvimbo ichidikanwa, saizi yeORM inogona kuwedzerwa zvine simba.
Kumisikidza Oramfs kunouya pasi pakutsanangura madhairekitori maviri - eruzhinji uye akavanzika, anoita sevhavha uye mutengi. Iyo yeruzhinji dhairekitori inogona kuve chero dhairekitori mune yemuno faira system yakabatana kune ekunze storages nekuiisa kuburikidza neSSHFS, FTPFS, Rclone uye chero mamwe maFUSE modules. Iyo yakavanzika dhairekitori inopihwa neOramfs FUSE module uye yakagadzirirwa kushanda zvakananga nemafaira akachengetwa muORM. Iyo ORAM mufananidzo faira iri mune yeruzhinji dhairekitori. Chero mashandiro ane dhairekitori yakavanzika anokanganisa mamiriro eiyi faira remufananidzo, asi faira iri rinotarisa kune wekunze anocherekedza sebhokisi dema, shanduko isingagoni kubatana nekuita mudhairekitori yakavanzika, kusanganisira kana kunyora kana kuverenga kwaitwa. .
Oramfs inogona kushandiswa munzvimbo dzinodiwa huwandu hwepamusoro hwekuvanzika uye kuita kunogona kubayirwa. Kuita kunodzikira nekuti mashandiro ese ekuchengetedza, kusanganisira kuverenga data, anotungamira mukuvakwazve kwemabhuraki mumufananidzo wefaira system. Semuenzaniso, kuverenga faira re10MB kunotora sekondi imwe, uye 1MB inotora masekonzi matatu. Kunyora 25MB kunotora masekonzi gumi nemashanu, uye 3MB inotora masekondi makumi mashanu. Panguva imwecheteyo, Oramfs inokwana ka10 nekukurumidza pakuverenga uye 15 nguva nekukurumidza kana ichinyora ichienzaniswa neUtahFS faira system, yakagadziridzwa neCloudflare uye nekusarudza inotsigira ORAM modhi.
Source: opennet.ru