Iyo TFC chirongwa chinogadzira paranoid yakachengeteka messaging system

Mumiganhu yeprojekti TFC (Tinfoil Chat) kuedza kwakaitwa kugadzira prototype yeparanoid-yakachengetedzwa messaging system iyo yaizochengetedza kuvanzika kwetsamba kunyangwe zvigadziriso zvikakanganiswa. Kurerutsa kuongororwa, kodhi yeprojekiti yakanyorwa muPython uye inowanikwa ane rezinesi pasi peGPLv3.

Parizvino akapararira mameseji masisitimu anoshandisa kuguma-kusvika-kumagumo encryption anobvumidza iwe kuchengetedza tsamba kubva pakubata pamaseva epakati uye kubva pakuongorora kwetraffic traffic, asi usadzivirire pamatambudziko padivi pemutengi mudziyo. Kukanganisa masisitimu anoenderana nekuguma-kusvika-kumagumo encryption, zvakakwana kukanganisa sisitimu yekushandisa, firmware kana messenger application pane yekupedzisira mudziyo, semuenzaniso, kuburikidza nekushandiswa kwekusazivikanwa kwaimbove kusazivikanwa, kuburikidza nekutanga kuiswa kwesoftware kana hardware mabhukumaki. mumudziyo, kana kuburikidza nekuunza yemanyepo yekuvandudza ine backdoor (semuenzaniso, kana uchipa kumanikidza kumugadziri nemasevhisi ehungwaru kana mapoka ematsotsi). Kunyangwe kana makiyi encryption ari pane imwe tokeni, kana iwe uine kutonga pamusoro peiyo mushandisi sisitimu, zvinogara zvichigoneka kutsvaga maitiro, kubata data kubva kukhibhodi, uye kutarisa kuburitsa skrini.

TFC inopa software uye hardware yakaoma inoda kushandiswa kwemakomputa matatu akaparadzana uye yakakosha kupatsanura Hardware kudivi revatengi. Yese traffic panguva yekudyidzana kwevatori vechikamu memeseji inofambiswa kuburikidza neisingazivikanwe yeTor network, uye zvirongwa zvekutumira mameseji zvinogadzirwa nenzira yakavanzika yeTor masevhisi (vashandisi vanoonekwa neakavanzika sevhisi kero uye makiyi pakuchinjana mameseji).

Iyo TFC chirongwa chinogadzira paranoid yakachengeteka messaging system

Yekutanga komputa inoita segedhi rekubatanidza kunetiweki uye kumhanyisa Tor yakavanzika sevhisi. Iyo gedhi rinoshandisa chete iyo yakatovharwa data, uye mamwe maviri makomputa anoshandiswa encryption uye decryption. Yechipiri komputa inogona kungo shandiswa kutsikisa uye kuratidza yakagamuchirwa mameseji, uye yechitatu chete encrypt uye kutumira mameseji matsva. Saizvozvo, komputa yechipiri ine chete decryption kiyi, uye yechitatu chete encryption makiyi.

Yechipiri uye yechitatu makomputa haana chakananga chinongedzo kunetiweki uye akapatsanurwa kubva pagedhi komputa neyakasarudzika USB splitter inoshandisa iyo "data diode” uye inotumira data nenzira imwe chete. Iyo splitter inobvumira chete kutumira data kune yechipiri komputa uye kungogamuchira chete data kubva kune yechitatu komputa. Iyo nzira yedata mu splitter inogumira kushandisa optocouplers (kutyora kuri nyore mumitsara yeTx neRx mutambo haina kukwana, sezvo kutyora kusingabatanidzi kutapurirana data kune yakatarisana uye hakuvimbisi kuti mutsara weTx hauzoshandiswe kuverenga, uye Rx mutsara wekutapurirana. ) Iyo splitter inogona kuunganidzwa kubva kune zvimedu zvikamu, madhayagiramu akabatanidzwa (PCB) uye anowanikwa pasi peGNU FDL 1.3 rezinesi.

Iyo TFC chirongwa chinogadzira paranoid yakachengeteka messaging system

Nechirongwa chakadaro, gedhi rinokanganiswa haibvumiri kuwana makiyi encryption uye hazvikubvumire iwe kuti uenderere mberi nekurwiswa pamidziyo yasara. Kana komputa iyo iyo makiyi ekunyorera anowanikwa akakanganiswa, ruzivo kubva kwairi harugone kuendeswa kune kunze kwenyika, sezvo kuyerera kwe data kunogumira nekugamuchira ruzivo, uye reverse kuendesa kunovharwa neiyo data diode.

Iyo TFC chirongwa chinogadzira paranoid yakachengeteka messaging system

Encryption yakavakirwa pa256-bit kiyi paXChaCha20-Poly1305, inononoka hashi basa rinoshandiswa kuchengetedza makiyi nepassword. Argon2id. Kuchinjana kwakakosha kunoshandiswa X448 (Diffie-Hellman protocol yakavakirwa paCurve448) kana makiyi ePSK (pre-yakagoverwa) Mharidzo yega yega inofambiswa mune chakavanzika pamberi chakakwana (PFS, Yakakwana Yekuvanzika Kunze) yakavakirwa paBlake2b hashes, umo kukanganiswa kweimwe yenguva refu makiyi haabvumiri decryption yechikamu chakambobatwa. Iyo yekushandisa interface iri nyore kwazvo uye inosanganisira hwindo rakakamurwa kuita nzvimbo nhatu - kutumira, kugamuchira uye mutsara wekuraira ine log yekudyidzana negedhi. Kutungamira kunoitwa kuburikidza neakakosha command set.

Iyo TFC chirongwa chinogadzira paranoid yakachengeteka messaging system

Source: opennet.ru

Voeg