Kuburitswa kweNNCP 8.8.0, zvishandiso zvekufambisa mafaera/mirairo muchitoro-uye-mberi maitiro

Kuburitswa kweNode-to-Node CoPy (NNCP), seti yezvishandiso zvekutumira zvakachengeteka mafaera, email, uye mirairo yekuitwa muchitoro-uye-mberi modhi. Inotsigira kushanda paPOSIX-inoenderana masisitimu anoshanda. Izvo zvinoshandiswa zvakanyorwa muGo uye zvakagoverwa pasi peGPLv3 rezinesi.

Zvishandiso zvinonangana nekubatsira kuvaka diki-kune-vezera shamwari-kune-shamwari network (mazhinji emanodhi) ine static routing yeyakachengeteka moto-uye-kukanganwa kufambisa faira, zvikumbiro zvefaira, email, uye zvikumbiro zvekuraira. Ese mapaketi anofambiswa akavharidzirwa (kumagumo-kusvika-kumagumo) uye anosimbiswa zvakajeka uchishandisa anozivikanwa makiyi eshamwari. Onion (sezviri muTor) encryption inoshandiswa kune ese epakati mapaketi. Imwe neimwe node inogona kuita semutengi uye sevha uye kushandisa ese ari maviri ekusundidzira uye poll maitiro emhando.

Musiyano uripo pakati peNNCP neUUCP neFTN (FidoNet Technology Network) mhinduro, kuwedzera kune yambotaurwa encryption uye huchokwadi, ndeye kunze-kwe-bhokisi rutsigiro rwefloppinet network nemakomputa akaparadzaniswa nenyama (air-gapped) kubva munzvimbo isina kuchengeteka uye. veruzhinji network. NNCP zvakare inoratidzira kusanganisa kuri nyore (pamwe neUUCP) nemaseva etsamba azvino akadai sePostfix uye Exim.

Nzvimbo dzinobvira dzekunyorera NNCP dzinosanganisira kuronga kutumira / kugamuchira tsamba kumidziyo isina kubatana zvachose kuInternet, kuendesa mafaera mumamiriro ekusagadzikana kwetiweki yekubatanidza, kuendesa zvakachengetedzeka data rakawanda kwazvo pamidhiya yemuviri, kugadzira ega ega ekufambisa data network akadzivirirwa kubva. MitM inorwisa, ichipfuura network censorship uye kuongorora. Sezvo kiyi ye decryption iri mumaoko emugamuchiri chete, zvisinei nekuti iyo packet inounzwa pamusoro petiweki kana kuburikidza nevezvenhau, wechitatu haagone kuverenga zviri mukati, kunyangwe iyo package yakabatwa. Nekudaro, kutendeseka uchishandisa siginecha yedhijitari hakutenderi kugadzira meseji yekunyepedzera pasi pechiratidziro chemumwe mutumi.

Pakati pezvinhu zvitsva zveNNCP 8.8.0, zvichienzaniswa nenhau dzakapfuura (vhezheni 5.0.0):

  • Panzvimbo peiyo BLAKE2b hash, iyo inonzi MTH: Merkle Tree-based Hashing, inoshandisa iyo BLAKE3 hash, inoshandiswa kutarisa kuvimbika kwemafaira. Izvi zvinokutendera kuti uverenge kutendeseka kwechikamu chakavharidzirwa chepakiti panguva yekurodha, usingade kuti iverengerwe mune ramangwana. Izvi zvinobvumirawo kuenzana kusingagumi kwekutarisa kwekuvimbika.
  • Iyo nyowani yakavharidzirwa packet fomati inotenderera-inoshamwaridzika kana saizi yedata isingazivikanwe pamberi. Iyo siginecha yekupedzwa kwekutamisa, nehukuru hwakatenderwa, inoenda zvakananga mukati meiyo encrypted rukova. Pakutanga, kuti uwane saizi ye data yakatamiswa, zvaive zvakafanira kuichengeta kune faira renguva pfupi. Saka iyo "nncp-exec" yekuraira yakarasa iyo "-use-tmp" sarudzo sezvo isingaite zvachose.
  • Iwo BLAKE2b KDF uye XOF mabasa akatsiviwa neBLAKE3 kudzikisa huwandu hwekriptographic primitives inoshandiswa uye kurerutsa kodhi.
  • Izvozvi zvinogoneka kuona mamwe ma node pane yemuno network kuburikidza nemulticasting kune kero "ff02::4e4e:4350".
  • Mapoka eMulticast akaonekwa (anofanana neFidoNet echo makonferensi kana Usenet mapoka enhau), achibvumira pakiti imwe kutumira data kunhengo dzeboka dzakawanda, uko imwe neimwe inodzosera pakiti kune vamwe vese vanosaina. Kuverenga multicast packet kunoda ruzivo rwemakiyi maviri (iwe unofanirwa kuve nhengo yeboka), asi relaying inogona kuitwa chero node.
  • Ikozvino kune rutsigiro rwekusimbisa kwakajeka kwepaketi risiti. Iye anotumira anogona kusadzima packet mushure mekutumira, achimirira kusvika yawana yakakosha ACK packet kubva kune anogamuchira.
  • Yakavakirwa-mukati tsigiro yeYggdrasil overlay network: madhimoni epamhepo anogona kuita sevakazara vakazvimiririra network vatori vechikamu, pasina kushandisa yechitatu-bato Yggdrasil kuita uye pasina kushanda zvizere neiyo IP stack pane chaiyo network interface.
  • Panzvimbo petambo dzakarongwa (RFC 3339), irogi rinoshandisa recfile entries, iyo inogona kushandiswa neiyo GNU Recutils utilities.
  • Sarudzo, misoro yepakiti yakavharidzirwa inogona kuchengetwa mumafaira akaparadzana mu "hdr/" subdirectory, ichimhanyisa zvakanyanya kudzoreredza rondedzero yemapaketi pamafaira masisitimu ane hukuru hwebhuroka, seZFS. Pakutanga, kudzoreredza musoro wepacket kwaida kuverenga chete 128KiB block kubva kudhisiki nekukasira.
  • Kutarisa mafaera matsva unogona kusarudza kushandisa iyo kqueue uye inotify kernel subsystems, kuita mashoma system mafoni.
  • Zvishandiso zvinochengeta mashoma akavhurika mafaera uye kuvhara uye kuavhura zvishoma kazhinji. Nenhamba yakakura yemapakeji, kare zvaigoneka kumhanya mukupikiswa pahuwandu hwehuwandu hwemafaira akazaruka.
  • Zvikwata zvakawanda zvakatanga kuratidza kufambira mberi uye kumhanya kwekuita sekudhawunirodha / kurodha, kukopa uye kugadzirisa (kukanda) mapakeji.
  • Iyo "nncp-faira" yekuraira inogona kutumira kwete chete mafaera, asiwo madhairekitori, kugadzira pax archive ine zvirimo panhunzi.
  • Zvishandiso zvepamhepo zvinogona kusarudza nekukasira kudaidza kukanda kwepaketi mushure mekunge pasuru yanyatso kudhawunirodha, pasina kumhanyisa yakaparadzana "nncp-toss" daemon.
  • Kufona kwepamhepo kune mumwe mutori wechikamu kunogona kuita sarudzo kwete chete kana timer yatangwa, asiwo kana pakiti inobuda ichioneka mudhairekitori re spool.
  • Inovimbisa kushanda pasi peNetBSD uye OpenBSD OS, mukuwedzera kune yaimbotsigirwa FreeBSD uye GNU/Linux.
  • "nncp-daemon" inoenderana zvizere neiyo UCSPI-TCP interface. Yakabatana nekwaniso yekupinda kune yakatsanangurwa faira descriptor (semuenzaniso nekuisa "NNCPLOG=FD:4"), zvine hushamwari zvachose kumhanya pasi pemadaemontools-sezvishandiso.
  • Musangano weprojekiti wakaendeswa zvachose kune redo system.

Source: opennet.ru

Voeg