Yakafambiswa VPN WireGuard rutsigiro kune Android musimboti

Google akawedzera mune huru Android codebase kodhi ine yakavakirwa-mukati VPN rutsigiro WireGuard. WireGuard kodhi yakaendeswa kugadziridzo Linux 5.4 kernels, iri kugadzirwa kuitira kuburitswa kwemberi kweiyo Android 12 papuratifomu, kubva kuLinux kernel huru 5.6, iyo yaisanganisira pakutanga kugamuchirwa WireGuard. Kernel-level WireGuard rutsigiro inogoneswa nekutadza.

Kusvika ikozvino, vagadziri veWireGuard ye Android suggested mobile application yatova yakabviswa neGoogle kubva kuGoogle Play katalogi nekuda kwe chinongedzo kune peji rekugamuchira mupiro pane webhusaiti yeprojekiti, iyo yakatyora mitemo yekubhadhara (mipiro inomakwa seisingagamuchirwe kana isina kuunganidzwa nesangano rakanyoreswa risingabatsiri).

Ngatikuyeuchidzei kuti VPN WireGuard inoshandiswa pahwaro hwemazuva ano encryption nzira, inopa yakanyanya kukwirira kuita, iri nyore kushandisa, isina matambudziko uye yakazviratidza mune akati wandei e deployments anogadzira mavhoriyamu makuru emotokari. Iyo purojekiti yanga ichikura kubva 2015, yakaongororwa uye formal verification encryption nzira dzakashandiswa. WireGuard inoshandisa iyo pfungwa ye encryption kiyi nzira, iyo inosanganisira kubatanidza yakavanzika kiyi kune yega yega network interface uye kuishandisa kusunga makiyi eruzhinji.

Makiyi eruzhinji anotsinhaniswa kuti amise chinongedzo nenzira yakafanana kune SSH. Kutaurirana makiyi uye kubatana pasina kumhanyisa daemon yakaparadzana munzvimbo yemushandisi, iyo Noise_IK michina kubva Noise Protocol Frameworkzvakafanana nekuchengetedza authorized_keys muSSH. Kuendesa data kunoitwa kuburikidza ne encapsulation muUDP mapaketi. Inotsigira kushandura IP kero yeVPN server (kutenderera) pasina kudzima kubatana neotomatiki mutengi kugadzirisa.

For encryption inoshandiswa ne stream cipher ChaCha20 uye meseji yekusimbisa algorithm (MAC) Poly1305, yakagadzirwa naDaniel Bernstein (Daniel J. Bernstein), Tanya Lange
(Tanja Lange) naPeter Schwabe. ChaCha20 nePoly1305 zvakamisikidzwa seanokurumidza uye akachengeteka analogues eAES-256-CTR neHMAC, iyo software yekumisikidza inobvumira kuwana yakatemwa yekuuraya nguva pasina kushandisa yakakosha Hardware rutsigiro. Kugadzira kiyi yakavanzika yakagovaniswa, iyo elliptic curve Diffie-Hellman protocol inoshandiswa mukuita Curve25519, zvakare yakakurudzirwa naDaniel Bernstein. Iyo algorithm inoshandiswa kune hashing ndeye BLAKE2s (RFC7693).

Source: opennet.ru