I-Cloudflare yethule ijeneretha yenombolo esabalalisiwe

Inkampani ye-Cloudflare kwethulwe inkonzo Inhlangano ye-Entropy, ukuze kuqinisekiswe ukusebenza lapho kwakhiwe khona inhlanganisela yezinhlangano ezimbalwa ezinentshisekelo yokuhlinzeka ngezinombolo ezingahleliwe zekhwalithi ephezulu. Ngokungafani nezinhlelo ezikhona ezimaphakathi, i-League of Entropy ayinciki emthonjeni owodwa futhi isebenzisa i-entropy ukwenza ukulandelana okungahleliwe, yamukelwe kusuka kumajeneretha amaningana angahlobene alawulwa abahlanganyeli abahlukene bephrojekthi. Ngenxa yemvelo esabalalisiwe yephrojekthi, ukufaka engcupheni noma ukuphazamisa umthombo owodwa noma emibili ngeke kuholele ekulimaleni kwenombolo yokugcina engahleliwe.

Kufanele kuqashelwe ukuthi izinombolo ezingahleliwe ezikhiqizwayo zihlukaniswa njengokulandelana okutholakala esidlangalaleni okungenakusetshenziselwa ukukhiqiza okhiye bokubethela nasezindaweni lapho inombolo engahleliwe kufanele igcinwe iyimfihlo. Le sevisi ihlose ukuhlinzeka ngezinombolo ezingahleliwe ezingakwazi ukubikezelwa kusengaphambili, kodwa uma seziqediwe, lezi zinombolo zitholakala esidlangalaleni, okuhlanganisa nokuhlola ukufaneleka kwamanani angahleliwe adlule.

Izinombolo zomphakathi ezingahleliwe zikhiqizwa njalo ngemizuzwana engama-60. Inombolo ngayinye ihlotshaniswa nenombolo yayo yokulandelana (umjikelezo), okuthi noma nini nanoma iyiphi iseva ebambe iqhaza ungathola inani elake lakhiqizwa. Izinombolo ezinjalo ezingahleliwe zingasetshenziswa ezinhlelweni ezisabalalisiwe, ama-cryptocurrencies kanye nama-blockchains, lapho ama-node ahlukene kufanele abe nokufinyelela ku-generator eyodwa yenombolo engahleliwe (isibonelo, lapho ukhiqiza ubufakazi bomsebenzi owenziwe), kanye nalapho kuqhutshwa ilotho ehlukahlukene kanye nokukhiqiza okungahleliwe. amasampula ohlelweni lokucwaningwa kwamabhuku okhetho.

Ukuze usebenze nesevisi futhi usebenzise amanodi akho ehlongozwayo amathuluzi I-Drand, ebhalwe ku-Go futhi yakhululwa ngaphansi kwelayisense ye-MIT. I-Drand isebenza ngendlela yenqubo yangemuva exhumana namajeneretha angaphandle abamba iqhaza kunethiwekhi esabalalisiwe futhi ngokuhlangene akhiqize inani elifingqiwe elingahleliwe. Inani lesifinyezo likhiqizwa kusetshenziswa izindlela i-cryptography и ukuhlanganiswa kwe-bilinear. Ukukhiqizwa kwesifinyezo senani elingahleliwe kungenziwa kusistimu yomsebenzisi ngaphandle kokubandakanyeka kwezihlanganisi ezimaphakathi.

I-Drand ingase futhi isetshenziselwe ukuletha izinombolo eziyimfihlo ezingahleliwe ezikhiqizwa endaweni kumakhasimende. Ukudlulisa inombolo engahleliwe, uhlelo lokubethela lwe-ECIES lusetshenziswa, lapho iklayenti likhiqiza khona ukhiye oyimfihlo nowomphakathi. Ukhiye osesidlangalaleni udluliselwa kuseva usuka kwa-Drand. Inombolo engahleliwe ibethelwa kusetshenziswa ukhiye osesidlangalaleni onikeziwe futhi ingabukwa kuphela iklayenti elingumnikazi wokhiye oyimfihlo. Ukuze ufinyelele amaseva, ungasebenzisa insiza ethi “drand” (isibonelo, “drand get public group.toml”, lapho i-group.toml iwuhlu lwama-node okumele avotelwe) noma i-Web API (isibonelo, ungasebenzisa okuthi “ curl https://drand.cloudflare.com/api/public" noma finyelela ku-JavaScript usebenzisa umtapo wolwazi I-DrandJS). Imethadatha yesicelo ithunyelwa ngefomethi ye-TOML, futhi impendulo ibuyiselwa nge-JSON.

Njengamanje, izinkampani ezinhlanu nezinhlangano zijoyine isinyathelo se-League of Entropy futhi zinikeza ukufinyelela kumajeneretha azo we-entropy. Abahlanganyeli abafakwe kuphrojekthi batholakala emazweni ahlukene futhi basebenzisa izindlela ezahlukene zokuthola i-entropy:

• i-cloudflare, I-LavaRand, amanani angahleliwe kwakhiwa ngokusekelwe ekugelezeni koketshezi okungalindelekile izibani ze-lava, izithombe zazo ezinikezwa njenge-entropy yokufaka ye-CSPRNG (Cryptographically Secure PseudoRandom Number Generator);
• I-EPFL (Ecole Polytechnique Federale de Lausanne), URand,
  kusetshenziswa ijeneretha yendawo ejwayelekile /dev/urandom, esebenzisa okokufaka kwekhibhodi, ukunyakaza kwegundane, ukugeleza kwethrafikhi, njll. njengemithombo ye-entropy.

• Inyuvesi yaseChile, UChile, inethiwekhi yezinzwa zokuzamazama komhlaba isetshenziswa njengomthombo we-entropy, kanye nedatha evela ekusakazweni komsakazo, umsebenzi we-Twitter, izinguquko ku-Ethereum blockchain kanye ne-hardware RNG generator eyenziwe ekhaya;
• I-Kudelski Security, i-ChaChaRand, inikeza i-CRNG (i-Cryptographic Random Number Generator) esekelwe ku-ChaCha20 cipher;
• I-Protocol Labs, i-InterplanetaryRand, idatha engahleliwe ikhishwa kuzibambi zomsindo futhi ihlanganiswe ne-Linux PRNG kanye nejeneretha yenombolo-mbumbulu eyakhelwe ku-CPU.

Okwamanje, ababambiqhaza abazimele bethule izindawo zokufinyelela zomphakathi eziyi-8 ku-API, lapho ungathola khona kokubili inombolo yamanje yesifinyezo engahleliwe (isibonelo, “curl https://drand.cloudflare.com/api/public”) futhi unqume inani ngesikhathi esithile esikhathini esidlule (“curl https://drand.cloudflare.com/api/public?round=1234”):

• https://drand.cloudflare.com:443
• https://random.uchile.cl:8080
• https://drand.cothority.net:7003
• https://drand.kudelskisecurity.com:443
• https://drand.lbarman.ch:443
• https://drand.nikkolasg.xyz:8888
• https://drand.protocol.ai:8080
• https://drand.zerobyte.io:8888

Source: opennet.ru