Maziko a chidziwitso / Kulankhula ndi anthu

Quantum-resistant encryption

Mauthenga achinsinsi ndi macheza amagulu pakati pa ogwiritsa ntchito Nymchat akhoza kusungidwa choncho kuti kuwajambula lero sikugula chilichonse chowononga, ngakhale makompyuta amtundu wa quantum akafika.

Tsambali lamasuliridwa pamakina kuti zikhale zosavuta. Chingelezi choyambirira ndi chomwe chimagwira ntchito.

Vuto limathetsa

Kubisa kwa Nostr Wamba - NIP-44, chomwe ndi chiyani mauthenga achinsinsi ndi zokambirana zamagulu amamangidwa pa - ali ndi magawo awiri. Theka ilo amatsutsa mawuwo (ChaCha20, HMAC-SHA256, HKDF) amatsutsana ndi kuchuluka kompyuta. Theka lomwe limagwirizana pa fungulo silimatero.

Mgwirizano waukuluwu ndi elliptic-curve Diffie-Hellman pa secp256k1, masamu omwe Bitcoin amagwiritsa ntchito. Shor's algorithm imathetsa izi. Aliyense amene amayendetsa motsutsana ndi kiyi yapagulu amachira kiyi yachinsinsi, ndipo ndi chinsinsi chilichonse chogawana chomwe kiyiyo idatulutsapo.

Momwe zimagwirira ntchito

Nymchat imasiya ndondomeko ya uthenga wa NIP-44 popanda kuisinthanso. Mgwirizano wa makiyi womwe ukugwiritsidwa ntchito kale suusinidwa; wina wachiwiri, wodzipatula, akuwonjezeredwa pamenepo. Choncho pali kusinthana kwa makiyi awiri pa uthenga umodzi m'malo mwa mmodzi:

• muyezo Gawo la 256k1 ECDH, ndendende monga kale;
• ML-KEM-768, algorithm ya post-quantum NIST yokhazikika ngati FIPS 203. Chitetezo chake chimakhazikika pamavuto a lattice, omwe Shor's algorithm samakhudza.

Awiriwo ndi m'milingo, osakanizidwaUthenga wosungidwa ndi NIP-44 monga momwe amachitira nthawi zonse, ndipo ciphertext yomweyo imasungidwanso nthawi yaikeli mu kachidindo ka post-quantum — ChaCha20-Poly1305, yomwe imagwiritsidwa ntchito kuchokera ku chinsinsi cha ML-KEM. Kiyi wa womtumiza, kiyi wa wolandira, encapsulation ciphertext, ndi kiyi wa ML-KEM wa wolandira amaphatikizidwa m'ndondomekoyi ngati mfundo zozama, kuti kachidindo kamodzi kasathe kusamutsidwa kuchokera pa ulendo umodzi ndi kuonetsedwanso pa wina.

Kusakaniza kotsatira monga X-Wing kapena PQXDH ya Signal kumapangitsa kuti zinsinsi zonse zikhale yekhee imodzi m'malo mwake. Nymchat sichimachita zimenezi, ndipo chifukwa chake ndi chokhudza kagwiritsidwe ntchito m'malo mwa kaphunziridwe ka zinsinsi (cryptographic): kusakaniza kumafunika zotsatira za ECDH zosinthidwa (raw), ndipo extension ya browser kapena wosinya wotalikana sadzatipatsanso zimenezo — amapereka ciphertext yomaliza, yomwe ndiyo cholinga chachikulu chosunga yekhee pamalo kumene pulogalamu (app) sitingathe kufikapo. Kuphatikiza kumatitengera NIP-44 kukhala yonse ndipo imachokera kwa chilichonse chomwe chimasunga yekhee ya dzina, kuphatikizapo wosinya, choncho malogoni amenewa amakhala otenga nawo mbali monga ena onse m'malo mwa okonzedwa kukhala osaloledwa.

Makhalidwe ofunika ndi ofanana m'njira iliyonse: zotsatira ndi monga wamphamvu osacheza kuposa mbali yamphamvuKuwerenga uthenga kumatanthauza kupita m'mawatire awiriwa. Ngati lattice cryptography itapezeka kuti ndi yofooka kuposa zomwe zidakhulupiridwa, kuwononga ML-KEM kumangotsulira watire wam'pamwamba ndipo imasiya NIP-44 ya lero m'munsimo. Ngati secp256k1 ingagonjetsedwe ndi kompyuta ya quantum, watire wam'kati umatseguka koma wam'pamwamba sumatseguka. Wotsitsa ayenera kuwononga awiriwa.

Uthenga uliwonse umalandira kusinthana kwatsopano kwa post-quantum, kotero kubwezeretsa chinsinsi cha uthenga umodzi kumawulula kanthu za enawo.

Gawo la post-quantum likufuna kiyi yake yokha, ndipo kumachokera kwa kiyi imeneyo ndiko kumapereka chosankha ngati chinthu chonsecho chili ndi phindu kapena ayi. Ndi kofunitsitsa... ayi zopezeka kuchokera ku anu nsec. Kompyuta ya quantum yomwe imaphwanya gawo la classical imabwezeretsa zanu nsec kuchokera ku public key yanu, ndipo chilichonse chomwe chachokera ku nsec mwa fomu yofalitsidwa imatuluka nayo — mitengo iwiri yotsegulidwa ndi kuthululidwa kumodzi. Choncho Nymchat imapanga chinthu chosiyanasiyana makodi a pambuyo pa quantum Kwa akaunti iliyonse, kamodzi, kuchokera ku bytes osiyanasiyana omwe palibe chinthu chawewu chomwe chingawasonyeze. Zikuoneka ngati nympq1… ndipo amakhala kumbali ya ako nsec m'matsatanetsatane a Nym anu, ozindikika komanso kofotokozedwa m'njira imodzi. Si password komanso si login yachiwiri: ndi zinthu za kiyi zomwe mungathe kusunga, mofanana ndi... nsec.

Palibe choyatsa

Izi si zoikamo. Kubisa kwa Post-quantum ndi momwe Nymchat amalankhulira ndi Nymchat, the momwemonso kubisa wamba ndi momwe amalankhulira ndi china chilichonse. Zimagwira ntchito zokha uthenga uliwonse wachinsinsi komanso kucheza kwamagulu ndi wogwiritsa ntchito wina wa Nymchat.

Zosintha › Chinsinsi ndi Chitetezo imasonyeza ngati ikugwira ntchito komanso kuti imafikira anthu angati amene muli nawo panopa, koma monga uthenga okha — palibe batani lotsegulira kapena kutsekerako.

Izi zimagwira ntchito mosiyanasiyana malinga ndi mmene mungalowelere. Kulowera kudzera mu browser-extension (NIP-07) kapena remote-signer (NIP-46) sikumapatsa app kiyi yanu ya chidziwitso, chomwe ndicho cholinga chachikulu chogwiritsira ntchito izi — ndipo sikuyenera kutero. Mitundu iwiri ya encryption imasungidwa m'mbali: sigini yanu imachita gawo limene imachita nthawi zonse, ndipo app imachita gawo la post-quantum pogwiritsa ntchito kodi yanu yotsatira (recovery code), yomwe imasunga mwachindunji. Kulowera kudzera mu extension kapena remote-signer ndi njira zaumwini m'mbali zonse ziwiri. Ndontho ya mmene zinthu ziliri m'Settings imauza zomwe zikukukhudzani.

Zomwe muli nazo kale sizikhudzidwa. Uthenga uliwonse m'mbuyo mwanu umakhala wowoneka pa chida chilichonse popatula za inu nsec, monga kale, ndipo imakhala choncho pa nthawi yonse yomwe akauntiyo ikukhala. Chomwe chikufunika nympq1… Kodi yochitira kubwezera ndi chinthu chomwe chidzatetezedwa ku luso la quantum chomwe chimalembedwa kuyambira tsopano: uthenga watsopano, komanso kusinthika komwe kwatsindika komanso kachitidwe komwe kamayenda nawo.

Choncho chida chiyenera kusunga kodi imeneyo kuti chitha kuzitsegula zinthu zimenezo, ndipo kuwonjezera chida tsopano kumafuna ndondomeko imodzi yowonjezereka. Mu pulani yofanana ndi imeneyo pa chida chatsopano, mumata... nympq1… kodi kuchokera ku chida chomwe chinalicho ndi kodi. Ndi kamodzi pa chida chilichonse, osati kamodzi pa nthawi iliyonse yolowera. Gawo limeneli si zopinga zomwe tinalephera kuchotsa: kodi yomwe ingafike pa chida chatsopano yokha idayenera kutumizidwa kudzera m'uthenga wamba, ndipo uthenga umenewo ndiye umene wotsimikiza amene chinthu chimenechi chidachitira kuti achitidwe akukumata. Gawo limeneli ndiye chifukwa chomwe chitetezo chake chili chenechani.

Pulogalamu imapanga nympq1… kaodi kwa inu, choncho palibe choti musankhe komanso palibe choti mupange. Kuti muone: dinani pa nym yanu kuti mutsegule Onani kapena Kusintha Zambiri za Nym, kenako Onetsani kiyi ya chinsinsi ndi kodi yobwezera ya dzina la chimbwanga la munthu uyu.. Zili pansi pano pa anu nsec, ndi mabatani zamasonyeza ndi kokopera zomwezi. Simufunika kuganizira za izoz mpaka tsiku lomwe muwonjezera chida chachiwiri.

Chida chomwe sichilumikizidwa sichimidwa panthawiyo. Chimapitiriza kuwerenga chilichonse chomwe chinalembedwa pogwiritsa ntchito njira yakale yobisetsa ndipo chimapitiriza kutumiza mwachibadwa, ndipo mukalilumikiza, chimabwereranso m'mbuyo ndipo chimathera kuwerenga mauthenga amene anali olimbana ndi quantum amene sinkathe kuwawerenga kale. Palibe chimene chimatayika chifukwa chotumikiza pambuyo.

Yemwe mumapeza naye

Mbali zonse zikufuna izi. Client aliyense wa Nymchat amapereka chilengezo chochepa chomwe chadalitsidwa ndi sigini ndipo chimatha nthawi yake chomwe chimati zimenezi, komanso amaphatikizapo kiyi yake ya post-quantum ngati ali nayo. Kukhala ndi chilengezo chovomerezeka cha munthu wina ndicho chimapangitsa pulogalamuyi kugwiritsa ntchito njira yosinthana yamphamvu ndi iwo. Palibe makambirano omwe angasokonezeke: kapena kiyi ilipo kapena palibe, ndipo chifukwa chilengezocho chadalitsidwa ndi wolemba wake, kiyi yosinthidwayo idayenera kukhala yonyenga m'mene imapangidwira m'malo moti ingofunika kuikidwa chabe.

Mtsalakiti yemwe amalamulira relay otha chingachitike ndi kusunga chilengezo, kuti wotumiza asawone kiyi ndipo amabwerera ku njira zofala zofunika chinsinsi. Zimenezi ziyenera kunena mwachindunji. Zimenezi zimayambitsa kutayika kwa chitetezo cha post-quantum pa uthengawo; zingatheke kuti uthenga usawerengeke, ndipo zingatheke kuti mukabulire kiyi yomwe si yanu. Makasitomala amafunsa ma relay angapo, choncho kusunga chilengezochi kumafuna kuti muwalame onsewa.

Zilengezo zimenezo zimakhala ndi sabata ndipo zimadzitsitsimutsa tsiku lililonse pamene mukugwiritsa ntchito app imeneyi. Ngati muli kutali kwa nthawi yayitali kuposa imeneyo, yanu imatha ndipo mumawonetsedwa ngati mthandizi wamba wa Nostr kwa nthawi pang'ono: mauticiti omwe atumizidwa kwa inu pa nthawi imeneyo amakhazikitsidwa ndi chinsinsi m'njira yomwe ili chizolowezi m'malo mwa njira yoteteza ku quantum. Amadza ndipo mutha kuwapenda — ndipo chilichonse chomwe mwalandira kale sichikhudzidwa. Kutsegula app kumabwereza chilengezo chanu, ndipo chinsinsi champhamvu chimayamba kugwira ntchito okha. Palibe chomwe chiyenera kuchichita kachiwiri.

Aliyense akugwirabe ntchito monga kale. Bitchat ogwiritsa ntchito komanso makono ena alionse a Nostr amalandira ndondomeko NIP-17, sinasinthe. Palibe chomwe chimawonongeka mukautumiza uthenga kwa munthu amene ali kunja kwa Nymchat.

Uthenga wa post-quantum m'malo wokhazikika m'malo motumizidwa pambali pake. Kutumiza zonsezo sikungakhale kwachabechabe: wowukirayo amangophwanya kope locheperako.

Makope omwe adatumizidwa ku inu pezanso - zomwe zida zanu zina zimawerenga, the archive kumbuyo kwake, ndi zoikamo anu synced, amene kuyenda njira yomweyo ndi kunyamula wanu mndandanda wa zokambirana, makiyi a gulu lanu ndi mbiri ya uthenga wanu. Kusiya iliyonse ya izo pa yakale kubisa kukanawapangitsa kukhala chinthu chofooka kwambiri chomwe mumasunga: chowerengedwa ndi aliyense amene akuswa cryptography yamasiku ano, ngakhale kuti mauthengawo adasindikizidwa mosamala bwanji.

Kukhala wowerengeka ndi Bitchat

Bitchat sangathe kuwerenga mtundu wa mauthenga a Nymchat, choncho mbiri yakale Nymchat adatumiza buku lachiwiri la uthenga uliwonse mumtundu wa Bitchat kwa aliyense amene atha kugwiritsa ntchito - womwe, kwa wina simunamvepo, kutanthauza aliyense.

Chilengezo chomwe chili pamwambachi chimapangitsa kuti kulingalira kumeneko kukhala kosafunika. Ngati wina wasindikiza imodzi, ali kuthamanga Nymchat, kotero kopi ya Bitchat imatsitsidwa ndipo uthenga wamphamvu wokha umatumizidwa. Ngati iwo alibe, palibe chomwe chasintha: amalandilabe mafomu onsewa, chimodzimodzi monga kale, kotero palibe zomwe mumatumiza zitha kukhala zosawerengeka chifukwa pulogalamuyo idangoganiza zolakwika za kasitomala yemwe amagwiritsa ntchito.

Monga kubisa komweko, izi zimangochitika zokha ndipo zilibe zoikamo.

Mumacheza amagulu

Mauthenga amagulu asungidwa kale padera kwa membala aliyense, kotero gulu likhoza kusakaniza mitundu yonse iwiri momasuka - mamembala omwe makasitomala awo amathandizira amapeza kubisa kwamphamvu, ena onse amapeza wamba, ndipo gulu limagwira ntchito mwanjira iliyonse.

Chifukwa chake, uthenga wa gulu umangodziwika kuti sunamvepo ngati iliyonse membala analandira choncho. Ngati ngakhale kope limodzi linagwiritsa ntchito kusinthana kokhazikika, kopelo limakhala lofanana uthenga, kotero kuti uthenga wonsewo ndi wotetezedwa monga kope lofooka kwambiri. Pulogalamuyo imatero "quantum-resistant kwa mamembala 8 mwa 10" m'malo mongomaliza.

Macheza amagulu amasunganso awo kutembenuza makiyi anthawi imodzi, amene amabisa amene ali pagulu kuchokera kwa aliyense amene amawonera kanema wawayilesi. Chitetezo chimenecho sichimakhudzidwa ndipo chimagwira ntchito monga momwe chinachitira.

Kuwerenga baji

Uthenga uliwonse wa pakhomo komanso wa m'gulu uli ndi pang'ono chishango pafupi ndi kidulala. Kugwida chizindikiro chilichonse kumafotokoza zomwe zikuonetsa.

Chizindikiro cha chitetezo chimakhala nthawi zonse pa uthenga wa chinsinsi, ndipo chimauza mosavuta ngati yankho ndi hopala. Kusowa kwa chizindikiro kumatengera tanthauzo lachilendo — kungatanthauze kuti “sikutetezeka ku quantum”, “kapangidwe kaku kuli kakale kwambiri”, kapena “chizindikirochi chawonongeka” — ndipo chizindikiro cha chitetezo chomwe chimene chingathe kusiyanitsidwa ndi chawonongeka sichikuuzani chilichonse.

Imakhala pafupi ndi chilolani m'malo mochenjera kuchisinthira chifukwa chilichonse chimayankha mafunso osiyana, ndipo uthenga ukhoza kukhala umodzi popanda wina — wotetezedwa ku quantum koma kuchokera kwa wotumiza yemwe sanatsimikizidwe, kapena wotsimikizidwa koma wosefukira m'njira zachikhalidwe.

Uthenga wakale umapitiliza kukhala ndi chitetezo chomwe chakhudzedwa mpaka kalekale. Chilichonse chomwe chinatumizidwa musanayambe kugwiritsa ntchito njira za quantum-resistant chinatsekeredwa ndi njira zakale, ndipo uthenga umene uli ndi chinsinsi uli kale pa ma relay — sungathe kusinthidwanso pambuyo pake. Izi ndizo zoopsa za 'harvest-now-decrypt-later' zomwe kusintha kumeneku kumaphepha m'tsogolo, choncho chizindikiro chomwe chikusonyeza zimenezi ndi yankho lenileni m'malo mwa kulakwitsa.

Zomwe sichichita

Izi zimateteza thupi zamkati za mauthenga anu. Sizimapanga gawo lililonse la Nostr quantum-proof, ndipo ndiyenera kunena molondola za kusiyana kwake.

• Ma signature akadali secp256k1. Chizindikiro cha Nostr ndi Schnorr pa kupindika komweko. Mdani yemwe anali kale ndi kompyuta yogwira ntchito amatha kupanga a siginecha ndikutengera munthu mu nthawi yeniyeni. Chomwe hybrid exchange imasiya ndikuwerenga magalimoto ojambulidwa - chinsinsi, osati kutsimikizika.
• Palibe chitetezo cha chinsinsi cham'tsogolo. Makiyi onse awiri amakhala nthawi yaitali: NIP-44 imachokera makiyi ake mwa inu nsec, ndipo gawo la post-quantum limaphatikiza chiwongozero cha ML-KEM chomwe chili pambuyo pa nympq1… makani. Uthenga uliwonse umapeza kapezedwe katsopano, kuti kiyi wa uthenga umodzi usatsegule wina wakesati — koma aliyense amene adzakhale ndi ma kiyiwo a nthawi yaitali atha kuwerenga chilichonse chomwe anajambula, osati zomwe zinabwera pambuyo pake okha. Ndi zimenezo zomwe mauthenga akutha kuchepetsa, ndipo ndi chifukwa chake mbali imeneyi ikunjenjetsera pa njira yoti kusunga tsopano kuti muzitsegula m'tsogolo m'malo mokhudza kiyi yomwe imachitidwa kuba.
• Metadata sinasinthidwe. Relay akuwonabe kuti chochitika chinayankhidwa fungulo, ndipo pafupifupi liti. Izo zimayendetsedwa ndi kukulunga mphatso ndi makiyi anthawi imodzi, si pa izi.
• Bluetooth mesh siikusakwatiwa. Uthenga womwe waperekedwa Nkhavu Zikuyendera m'mkatire wa Noise XX session, yomwe ili ndi encryption yamphamvu yamakono koma imagwiritsa ntchito classical key exchange — choncho siili ndi post-quantum layer, ngakhale pakati pa ogwiritsa ntchito awiri a Nymchat. Chizindikiro chikuonetsa izi: uthenga womwe waperekedwa kudzera mu mesh sukulembedwa kuti ndi quantum-resistant. Kuwonjezera izo kumatanthauza kusintha handshake imodzi, zomwe ogwiritsa ntchito awiri ayenera kuchita pa nthawi imodzi, popanda relay yomwe ingawathandize komanso pamene zikuyenera kukhala zomveka ndi Bitchat.
• Kodi yanu yopezerera zinthu ndi chinthu chachiwiri chomwe muyenera kusunga. Zimayamba ndi nympq1 ndipo mudzapeza mu matsatanetsatane a Nym anu, mu papaneli yofanana ndi yanu nsec — dinani nym yanu, kenako “Onetsani private key ya nym imeneyi ndi kodi yochitira recovery”. Yanu nsec pa mawonekedwe ake sikumanganso kiyi yanu ya post-quantum — ndicho chimene chimapangitsa kuti igwire ntchito — choncho ngati palibe chida chomwe chili ndi kodi imeneyo ndipo mulibe nako chitsanzo, zomwe zinali zotsekedwa nazo sizingatheke kutsegulidwa kachiwiri. Palibe njira yobwezerera ndipo palibe munthu yemwe mungafunse. Isungeni kumene munasungira anu nsec.
• Sizingateteze zomwe mbali inayo imachita. Wolandira akhozabe kujambula skrini, koperani kapena sungani uthenga.

Awa ndi malo omwewo Signal amatenga ndikukweza kwake kwa post-quantum: konzani kusinthana kofunikira tsopano, chifukwa ndi gawo wowukira angachite pa retroactively, ndi kuchitira siginecha monga vuto losiyana la pamene miyezo ikufika.

Kuyang'ana ntchito

Kugwiritsa ntchito kwa ML-KEM kuli kuyesedwa poyerekeza ndi yovomerezeka zitsanzo zoyezera NIST imasindikiza kwa FIPS 203, choncho chimayezedwa malinga ndi ndondomeko yeniyeni m'malo moti chimayezedwe mwa chinthucho chokha. Pulogalamu ya pa webu ndi pulogalamu ya pa foni zimayezedwanso ndi njira zoyezera zomwe zili limodzi, zomwe zimatsimikizira kuti uthenga wolembedwa ndi imodzi ukhoza kuwerengedwa ndi imodzi ina.

Onse awiri ndi Pulogalamu yotseguka pansi pa AGPL-3.0, ndipo zomangidwa za web app zitha kubwerezedwa — onani kutsimikizira kumanga.

Kupita mozama: Kukambirana kwa kiyi ya Post-Quantum mu Nymchat — bukhu la teknoloje la momwe kiyi ya ML-KEM amapatsidwa popanda directory, kachitidwe kamene kamasonkhanitsa kusembetsana kwa makiyi awiri, komanso mapulani amene anakanidwa.