Kev paub hauv paus / Tham nrog neeg

Quantum-resistant encryption

Cov lus ntiag tug thiab pab pawg sib tham ntawm Nymchat cov neeg siv tuaj yeem raug encrypted li ntawd uas kaw lawv hnub no yuav ib tug attacker tsis muaj dab tsi, txawm tias ib zaug quantum computers tuaj txog.

Nplooj ntawv no yog tshuab txhais kom yooj yim. Cov lus Askiv thawj yog cov version uas siv.

Qhov teeb meem nws daws tau

Ordinary Nostr encryption - NPE-44, uas yog dab tsi cov lus ntiag tug thiab pawg sib tham yog tsim rau - muaj ob halves. Ib nrab ntawd tiag scrambles cov ntawv nyeem (ChaCha20, HMAC-SHA256, HKDF) tuav zoo tiv thaiv ib tug quantum lub computer. Ib nrab uas pom zoo rau tus yuam sij tsis.

Qhov kev pom zoo tseem ceeb yog elliptic-curve Diffie-Hellman ntawm secp256k1, tib yam lej Bitcoin siv. Shor's algorithm daws nws tam sim ntawd. Tus neeg twg uas khiav nws tawm tsam pej xeem tus yuam sij rov qab los tus yuam sij ntiag tug, thiab nrog nws txhua qhov kev qhia zais cia uas tus yuam sij puas tau tsim.

Nws ua haujlwm li cas

Nymchat tso cov NIP-44 message format tsis hloov pauv li. Qhov kev sib tham kom muaj chav (key agreement) uas nws siv txhij txhua lawm tsis hloov; muaj ib qho thib ob, uas tsis muaj kev sib txuas, ntxiv rau ntawm nws ntawm sab nraud. Yog li ntawd, muaj kev hloov pauv chav (key exchanges) ob zaug rau txhua txhua message vim tsis yog ib zaug:

• tus qauv secp256k1 ECDH, raws nraim li ua ntej;
• ML-KEM-768, post-quantum algorithm NIST standardized as FIPS 203. Nws txoj kev ruaj ntseg nyob ntawm cov teeb meem lattice, uas Shor's algorithm tsis kov.

Ob leeg ntawd yog tshav tshoov, tsis sib ntxuas. Lub xov xwm raug muab cia nrog NIP-44 ncaj qha li qub, thiab cov ciphertext tiav ntawd raug muab kaw zaug ob thib hauv chav post-quantum — ChaCha20-Poly1305, uas siv ML-KEM shared secret ua tus chaw tsim. Tus sender's key, tus recipient's key, cov encapsulation ciphertext, thiab tus recipient's ML-KEM key raug muab tso ua ke hauv qhov derivation ntawd ua context, kom tsis txhob muaj ib chav tswj tau muab ntawm ib qho kev sib tham mus siv dua rau lwm qhov kev sib tham.

Ib yam li X-Wing lossis Signal's PQXDH yuav sib txuas ob yam zais zov mus ua ib lub chav (key) xwb. Nymchat tsis ua li ntawd, thiab qhov cuam tush yog vim haujlwm tiag tiag tsis yog vim cryptographic: kev sib txuas yuav tsum tau cov ECDH output raw, tab sis ib lub browser extension lossis ib tus remote signer yuav tsis muab qhov ntawd rov qab rau — nws yuav xa ib yam ciphertext uas tiav lawm, uas yog lub hom phiaj ntawm kev tuav lub chav uas lub app tsis tuaj yeem mus txog. Kev tsim cov qab txhia (layering) yuav tswj tau NIP-44 kom tiav thiab tsim los ntawm txhua yam uas tuav lub chav npe (identity key), suav nrog tus signer, kom cov kev login ntawd ua ib tug neeg koom nrog tsis yog cov uas raug tshem tawm.

Qhov tseem ceeb yog zoo ib yam tsis hais yuav ua li cas: qhov tshwm sim yog npaum li muaj zog li feem uas muaj zog duaKev nyeem xov xwm txhais tias yuav tsum tau dhau los ntawm ob sab. Yog tias lattice cryptography qaug zog dua qhov peb xav tau, kev phá ML-KEM tsuas yog tshem tawm lub sab nrauv xwb thiab tso cia NIP-44 ntawm niaj hnub no nyob hauv qab. Yog tias secp256k1 poob rau lub hluav taws xob quantum computer, lub sab hauv yuav qhib tab sis lub sab nrauv tsis qhib. Ib tug neeg uas xav thab yuav tsum tau phá ob sab no.

Txhua cov lus tau txais kev sib pauv tshiab tom qab quantum, yog li rov qab ib qho lus tseem ceeb nthuav tawm tsis muaj dab tsi txog lwm tus.

Qhov feem post-quantum xav tau ib lub kauj ruam ntawm nws tus kheej, thiab qhov uas lub kauj ruam ntawd tuaj ntawm qhov twg yog qhov uas yuav txiav txim siab tias tag nrho qhov ntawd puas muaj nqi dab tsi. Nws yog qhov uas tau tsim tseg... tsis yog tsib tau los ntawm koj nsec. Ib lub computer quantum uas cuam qhov pua ntawm qhov qub yuav rov kho koj nsec los ntawm koj lub public key, thiab txhua yam uas tsim los ntawm nsec los ntawm ib lub qauv uas tau tshaj tawm tuaj nws tshwm sim nrog nws — ob lub qhov xov xau raug qhib los ntawm ib qhov kev tawg. Yog li ntawd, Nymchat tsim ib yam uas txawv code tom qab quantum rau txhua lub account, ib zaug, los ntawm cov bytes uas tsis raws li qauv uas tsis muaj dab tsi qhia rau pej xeem pom. Nws nyeem tau li nympq1… thiab zaum ntawm ib sab koj nsec hauv koj cov ntaub ntawv ntawm Nym, qhia tawm thiab copy kom zoo ib yam li ntawd. Nws tsis yog ib lo lus zais thiab tsis yog kev nkag mus thib ob: nws yog cov ntaub ntawv tseem ceeb uas koj tuaj yeem khaws cia tau, zoo nkaus li... nsec.

Tsis muaj dab tsi tig rau

Qhov no tsis yog kev teeb tsa. Post-quantum encryption tsuas yog yuav ua li cas Nymchat tham rau Nymchat, tus tib txoj kev zoo tib yam encryption yog li cas nws tham nrog txhua yam. Nws siv tau rau txhua cov lus ntiag tug thiab pab pawg sib tham nrog lwm tus neeg siv Nymchat.

Kev teeb tsa › Kev cun lus & Kev ruaj ntseg qhia tias nws puas ua hauj lwm thiab nws nrog koj cov neeg hu tau ntau npaum li cas tam sim no, tab sis yog tsuas yog qhov ntaub ntawv xwb — tsis muaj lub khawm hloov.

Qhov no ua hauj lwm txhua yam txoj kev uas koj nkag mus. Kev nkag mus siv browser-extension (NIP-07) lossis remote-signer (NIP-46) yuav tsis muab koj tus identity key rau lub app, uas yog lub hom phiaj tseem ceeb ntawm kev siv ib yam li ntawd — thiab nws tsis tas yuav ua li ntawd. Ob feem ntawm kev encryption raug tseg sib txawv: koj tus signer ua feem uas nws tau ua txhua lub sij hawm, thiab lub app ua feem post-quantum nrog koj lub recovery code, uas nws tuav ncaj qha. Kev nkag mus siv Extension thiab remote-signer yog cov uas koom tes ib yam xwb rau ob sab. Kab xov xwm (status line) hauv Settings yuav qhia tias dab tsi yog ntawm koj.

Tsis muaj dab tsi uas koj muaj raug cuam tshuam. Txhua kab lus hauv koj cov lus uas koj tau sau tseg tseem lees tau nyeem tau ntawm txhua lub tshuab tsis muaj dab tsi ntxiv ntawm koj nsec, zoo li ua ntej, thiab yuav nyob li ntawd mus rau tag nrho lub neej ntawm tus account. Dab tsi yuav tsum tau nympq1… Code rov kho yog cov ntaub ntawv uas tiv thaiv tau qhov quantum uas yuav raug sau los ntawm tam sim no mus rau tom ntej: cov lus tshiab, thiab cov kev teeb tsa uas raug txuas nrog thiab cov ntaub ntawv tseg cia uas mus nrog lawv.

Yog li, ib lub tshuab yuav tsum muaj lub code ntawd ua ntej nws tuaj yeem qhib tau cov ntawd, thiab kev ntxiv ib lub tshuab tam sim no yuav tsum tau ua ntxiv ib kauj ruam. Hauv lub panel tib yam ntawd ntawm lub tshuab tshiab, koj yuav tsum paste lub... nympq1… Tus code los ntawm ib lub tshuab uas muaj nws lawm. Nws yog ib zaug rau txhua lub tshuab, tsis yog ib zaug rau txhua zaum nkag mus. Lub kauj ruam ntawd tsis yog kev nyuaj uas peb tsis tau tshem tawm: ib lub code uas tuaj ntawm ib lub tshuab tshiab ntawm nws tus kheej yuav tsum tau mus los ntawm ib tsab xov xwm (message) tsis tshua tshwj xeeb, thiab lub xov xwm ntawd yog yam uas tus neeg uas lub feature no tsim los tiv thaiv tab tom saib/suav. Lub kauj ruam ntawd yog qhov uas ua rau kev tiv thaiv ntawd yog qhov tseeb tiag.

Lub app tsim tawm... nympq1… code rau koj, yog li ntawd tsis muaj dab tsi yuav xaiv thiab tsis muaj dab tsi tsim tshiab. Yuav pom nws: tap koj nym txhawm rau qhib Saib lossis Kho Nym cov ntaub ntawv ntxaws, tom qab ntawd Qhia tus private key thiab recovery code ntawm lub npe ntxuav no.. Nws nyob ncaj qha hauv qab ntawm koj nsec, nrog cov pob show thiab copy uas zoo li qub. Koj yuav tsis tas yuav xav txog nws mus txog hnub uas koj ntxiv lub tshuab thib ob.

Ib lub cuav uas tsis tau txuas tsis raug kaw rau lub sijhawm ntawd. Nws tseem nyeem tau txhua yam uas sau rau hauv lub encryption qub thiab tseem xa tau li qub, thiab thaum koj txuas nws rau, nws yuav rov mus qhib cov lus quantum-resistant uas nws tsis tau nyeem tau ua ntej. Tsis muaj dab tsi poob los ntawm kev txuas tom qab.

Koj tau nrog leej twg

Ob sab laug xav tau nws. Txhua Nymchat client tawm tshaj ib tsab xov tshaj tawm me me uas muaj kos thiab yuav tsis muaj ntev uas qhia txog qhov ntawd, thiab muaj nrog nws tus pqwj post-quantum thaum nws muaj. Kev tuav ib tsab xov tshaj tawm uas tseeb rau ib tug neeg yog qhov uas ua rau lub app siv kev sib tham uas muaj zog dua nrog lawv. Tsis muaj kev sib tham uas yuav interfere tau: tsis yog tus pqwj nyob ntawd los yog tsis muaj, thiab vim tias lub xov tshaj tawm raug kos los ntawm tus sau nws, yog muaj kev hloov tus pqwj, ces yuav tsum tau ua dag thiaj li yuav tau, tsis yog tsuas yog muab mus rau xwb.

Dab tsi yog tus neeg tsim txom uas tswj hwm ib lub relay tau ua yog tsis qhia cov tshaj tawm, kom tus xa ntaub ntawv tsis tau pom lub chaw tswj (key) thiab rov mus siv cov kev encryption qub. Qhov ntawd yog ib yam uas yuav tsum tau piav kom meej. Nws yuav ua rau cov ntaub ntawv ntawd tsis muaj kev tiv thaiv post-quantum; nws tsis tuaj yeem ua rau lwm tus tsis nyeem tau, thiab nws tsis tuaj yeem yuav kom koj txais ib lub chaw tswj uas tsis yog koj li. Cov neeg siv (clients) nug rau ntau lub relay, yog li ntawd kev tsis pub nws tshwm sim yuav tsum tau tswj hwm txhua lub.

Cov tshaj tawm ntawd nyob tau ib limt thiab hloov tshiab txhua hnub thaum koj siv lub app. Yog tias koj tsis siv nws ntev tshaj li ntawd, koj qhov tshaj tawm yuav raug tshem tawm thiab koj yuav raug suav ua ib tug Nostr client thaud xwb rau ib lub sij hawm: cov lus uas xa rau koj hauv lub sij hawm ntawd yuav raug khaws cia (encrypted) li txoj kev thaud xwb, tsis yog txoj kev tiv thaiv quantum (quantum-resistant). Lawv tseem yuav nkag los, thiab koj tseem tuaj yeem nyeem tau lawv — thiab tsis muaj dab tsi uas koj tau txais dhau los raug cuam tshuam. Thaum qhib lub app, nws yuav tso koj qhov tshaj tawm tshiab dua, thiab txoj kev khaws cia uas muaj zog dua yuav pib ua dua nws tus kheej. Tsis muaj dab tsi yuav tsum tau ua dua.

Txhua leej txhua tus ua haujlwm raws nraim li yav dhau los. Bitchat cov neeg siv thiab txhua lwm Nostr client tau txais qauv NPE-17, tsis hloov. Tsis muaj dab tsi teeb meem thaum koj xa xov rau lwm tus sab nraum Nymchat.

Cov lus tom qab quantum hloov tus txheej txheem es tsis xa nrog nws. Xa ob qho tib si yuav tsis muaj txiaj ntsig: tus neeg tawm tsam tsuas yog rhuav tshem cov ntawv tsis muaj zog.

Cov ntawv luam tau hais rau koj tau txais nws ib yam nkaus — tus uas koj lwm yam khoom siv nyeem, tus archive qab nws, thiab koj synced chaw, uas taug kev tib txoj kev thiab nqa koj Cov npe sib tham, koj cov yuam sij pab pawg thiab koj cov lus keeb kwm. Tso ib qho ntawm cov laus encryption yuav ua rau lawv qhov tsis muaj zog tshaj plaws uas koj khaws: nyeem tau los ntawm txhua tus neeg uas tawg niaj hnub no cryptography, tsis muaj teeb meem npaum li cas kom zoo zoo cov lus lawv tus kheej raug kaw.

Nyob twj ywm nyeem tau los ntawm Bitchat

Bitchat tsis tuaj yeem nyeem Nymchat cov lus hom ntawv, yog li keeb kwm Nymchat xa daim ntawv thib ob ntawm txhua cov lus hauv Bitchat hom rau txhua tus neeg uas yuav siv nws - uas, rau ib tus neeg koj yeej tsis tau hnov los ntawm, txhais tau tias sawv daws.

Cov lus tshaj tawm saum toj no ua rau kev kwv yees tsis tsim nyog. Yog ib tug tau luam tawm ib qho, lawv yog khiav Nymchat, yog li daim ntawv theej Bitchat poob thiab tsuas yog xa cov lus muaj zog. Yog lawv tsis tau, tsis muaj dab tsi hloov: lawv tseem tau txais ob hom ntawv, raws nraim li ua ntej, yog li tsis muaj dab tsi koj xa tuaj yeem ua tsis tau vim tias lub app twv tsis raug txog tus neeg siv khoom siv.

Zoo li lub encryption nws tus kheej, qhov no yog tsis siv neeg thiab tsis muaj teeb meem.

Hauv pab pawg sib tham

Cov lus pab pawg twb tau encrypted cais rau txhua tus tswv cuab, yog li ib pab pawg tuaj yeem sib xyaw ob hom dawb do - cov tswv cuab uas nws cov neeg txhawb nqa nws tau txais kev encryption muaj zog dua, tus so tau txais tus qauv ib, thiab cov pab pawg ua haujlwm ib txwm ua ob qho tib si.

Vim li ntawd, pawg lus tsuas yog cim quantum-resistant thaum txhua tus tswv cuab tau txais li ntawd. Yog tias txawm tias ib daim qauv siv tus qauv pauv, daim ntawv luam ntawd yog tib yam lus, yog li cov lus tag nrho tsuas yog raws li kev tiv thaiv raws li nws cov ntawv tsis muaj zog tshaj plaws. Lub app hais tias "quantum-resistant rau 8 ntawm 10 tus tswv cuab" ntau dua li kev sib sau.

Pawg chats kuj khaws lawv tig cov yuam sij ib zaug, uas zais leej twg nyob hauv ib pab pawg los ntawm leej twg saib ib tug relay. Qhov kev tiv thaiv ntawd tsis cuam tshuam thiab ua haujlwm raws nraim li nws tau ua.

Nyeem daim paib

Txhua cov lus xov ntawm tus kheej thiab txhua cov lus xov hauv pab pawg muaj ib qho me daim ntaub thaiv nyob ntawm lub khov. Ntaus ib lub cim twg los yuav piav qhia tias nws tab tom qhia dab tsi.

Lub tshaj lij tiv thaiv nyob ntawm txhua lub xov xwm uas raug encrypt, thiab qhia meej tias thaum tsis tau. Yog tias tsis pom lub cim, nws yuav ua rau tsis meej pem — nws tuaj yeem txhais tau tias “tsis muaj kev tiv thaiv sab quantum”, “lub version no qub dhau lawm”, lossis “lub cim qhia ntawd tsis ua hauj lwm” — thiab ib lub cim qhia kev nyab xeeb uas tsis txawv ntawm ib lub uas tsis ua hauj lwm, nws yuav tsis qhia tau dab tsi rau koj li.

Nws nyob ntawm lub pobล็oc (padlock) tsis yog hloov nws, vim tias ob yam ntawd teb cov lus nug uas txawv ntawm ib leeg thiab ib leeg, thiab ib tsab xov xwm tuaj yeeb muaj ib yam tab sis tsis muaj qib lwm yam — uas yog tiv thaiv tau kev tshuaj xyuas quantum tab sis los ntawm tus xa uas tsis tau lees paub, lossis tau lees paub lawm tab sis siv cov txoj kev kaw lus (encryption) qub.

Cov lus laus tseg lub tiv thaiv uas muaj kab tshem mus ib txhis. Txhua yam uas xa mus ua ntej ob sab tau hloov mus siv qhov kev tiv thaiv quantum (quantum-resistant), nws raug kaw nrog cov kev sib tham qub, thiab cov ciphertext ntawd twb muaj lawm hauv cov relays — nws tsis tuaj yeem kaw tshiab dua tom qab ntawd. Qhov no yog qhov kev thauj ntaub ntawv tseg kom txog thaum muaj peev xwm qhib tau tom qab (harvest-now-decrypt-later) uas qhov kev hloov kho tshiab no yuav tiv thaiv tau rau yav tom ntej, yog li ntawd, lub cim qhia qhov ntawd yog ib qho lus tseeb tsis yog ib qho kev ua yuam kev.

Dab tsi nws tsis ua

Qhov no tiv thaiv cov cov ntsiab lus ntawm koj cov lus. Nws tsis ua txhua feem ntawm Nostr quantum-pov thawj, thiab nws tsim nyog ua qhov tseeb ntawm qhov sib txawv.

• Kos npe tseem yog secp256k1. Nostr cov cim kos npe nrog Schnorr ntawm lub tib nkhaus. Ib tus yeeb ncuab uas twb muaj lub computer ua haujlwm quantum tuaj yeem tsim ib qho kos npe thiab dag ib tus neeg hauv lub sijhawm tiag tiag. Dab tsi hybrid pauv nres yog nyeem ntawv sau tseg kev khiav tsheb - tsis pub leej twg paub, tsis muaj kev lees paub.
• Tsis muaj kev zais cia rau yav dhau los. Ob lub tes tswj yog siv tau ntev: NIP-44 tsim nws lub tes tswj los ntawm koj nsec, thiab qauv post-quantum muab tso nkao rau lub ML-KEM key tom qab koj nympq1… code. Txhua lo lus tau txais ib qho kev tiv thaiv tshiab, yog li ntawd tus qauv ntawm ib lo lus tsis qhib tau lo lus tom ntej — tab sis tus twg uas muaj cov qauv nyob mus ntev ntawd tuaj yeem nyeem tau txhua yam uas tau sau tseg, tsis yog tsuas yog qhov tom qab xwb. Qhov ntawd yog qhov uas cov lus uas yuav kawg txo, thiab nws yog qhov uas lub hom phiaj no tsom rau kev khaws cia tam sim no thiab qhib tom qab, tsis yog rau ib lub chaw (key) uas raug coj mus.
• Metadata tsis hloov. Ib tug relay tseem pom tias muaj ib qho xwm txheej tau hais rau ib qho tseem ceeb, thiab roughly thaum. Uas yog tuav los ntawm khoom plig qhwv thiab cov yuam sij ib zaug, tsis yog qhov no.
• Bluetooth mesh tsis raug koom cov. Ib zaj lus raug nqa mus lub ntaub nplooj Mus hauv ib qho Noise XX session, uas yog kev encryption uas zoo thiab tshiab tab sis yog kev hloov pauv lub tswv yim qub (classical key exchange) — yog li ntawd nws tsis muaj qhov tiv thaiv tom qab quantum (post-quantum layer), txawm yog ntawm ob tus neeg siv Nymchat los xij. Lub cim qhia txog qhov no: ib tsab lus uas xa dhau ntawm lub mesh tsis yog qhov uas tiv thaiv tau quantum. Kev ntxiv nws rau ntawm ntawd txhais tias yuav tsum hloov pauv lub handshake nws tus kheej, uas ob sab neeg yuav tsum ua tib lub sijhawm, tsis muaj lwm qhov (relay) yuav mus ntxiv thiab txhawm rau kom Bitchat tseem nyeem tau.
• Koj qhov recovery code yog ib yam ntxiv uas yuav tsum khaws cia. Nws pib nrog nympq1 thiab koj yuav nrhiav tau nws hauv koj Nym cov ntsiab lus, nyob rau hauv lub chaw tib yam nkaus li koj nsec — tsoo koj lub nym, ces “Qhib qhia tus nym no tus private key thiab recovery code”. Koj... nsec Nws tus kheej tsis tsim rov qab koj lub post-quantum key — qhov ntawd yog qhov tseem ceeb uas ua rau nws ua haujlwm — yog li ntawd yog tias tsis muaj tshuab twg muaj lub code ntawd thiab koj tsis muaj daim copy ntawm nws, yam uas raug khaws rau ntawm nws yuav tsis tau qhib rov qab ntxiv. Tsis muaj kev reset thiab tsis muaj leej twg yuav nug tau. Khaws nws rau qhov twg koj tau khaws koj... nsec.
• Nws tsis tuaj yeem tiv thaiv qhov uas lwm sab ua. Tus neeg txais kev pabcuam tseem tuaj yeem screenshot, luam lossis khaws cov lus.

Qhov no yog tib txoj hauj lwm Signal yuav siv sij hawm nrog nws tus kheej post-quantum upgrade: kho qhov tseem ceeb pauv tam sim no, vim hais tias qhov ntawd yog ib feem ntawm tus neeg tawm tsam tuaj yeem ua rau retroactively, thiab kho kev kos npe raws li a cais teeb meem rau thaum tus qauv ntes tau.

Tshawb xyuas cov haujlwm

Kev tsim ML-KEM yog raug sim nrog lub uas raug cov tswv yim sim NIST tso tawm rau FIPS 203, yog li ntawd nws raug tshawb xyuas nrog lub hauv paus lus (standard) nws tus kheej, tsis yog tshawb xyuas nrog nws tus kheej xwb. Lub web app thiab lub mobile app tseem raug siv ib pab cov test vector uas zoo ib yam rau ob loog, uas yog qhov uas tswj xyuas kom ib tsab xov uas sau los ntawm ib lub tuaj yeem nyeem tau los ntawm lub zoo li ntawd.

Ob leej yog qhib chaw pib hauv cov cai AGPL-3.0, thiab cov kev tsim ntawm lub web app tuaj yeem tsim rov qab tau — saib txheeb xyuas qhov tsim.

Mus rau qhov tob dua: Kev sib tso siab txog cov chaw tswj tom qab Quantum hauv Nymchat — ib daim ntawv tshawb fawb txog qhov kev technical ntawm kev faib ML-KEM key yam tsis siv directory, qhov kev tsim uas muab ob yam kev hloov pauv key sib tham los ua ke, thiab cov tswv yim uas raug tsis txais yuav.