Ubumenyi shingiro / Kuganira n'abantu

Kwirinda kwa Quantum

Ubutumwa bwihariye hamwe nitsinda ryibiganiro hagati yabakoresha Nymchat birashobora gushishoza kugirango ko kubandika uyumunsi ntacyo bigura igitero, nubwo mudasobwa ya kwant igeze.

Uru rupapuro rwahinduwe imashini kugirango byorohe. Umwimerere wicyongereza ni verisiyo ikoreshwa.

Ikibazo gikemura

Ibanga risanzwe rya Nostr - NIP-44, nicyo ubutumwa bwihariye na kuganira mu matsinda byubatswe kuri - bifite ibice bibiri. Kimwe cya kabiri mubyukuri asibanganya inyandiko (ChaCha20, HMAC-SHA256, HKDF) ifata neza kurwanya kwant mudasobwa. Igice cyemera urufunguzo ntabwo.

Ayo masezerano yingenzi ni elliptic-curve Diffie-Hellman kuri secp256k1, imibare imwe Bitcoin ikoresha. Algorithm ya Shor irabikemura rwose. Umuntu wese uyiyobora kurwanya urufunguzo rusange yakira urufunguzo rwihariye, kandi hamwe na buri banga risangiwe urufunguzo rwigeze rutanga.

Uburyo ikora

Nymchat idahindura imiterere y'ubutumwa bwa NIP-44 na busa. Uburyo bwo kwemeranya amashami bukoreshwa niyo busa ntibuhindurwa; uburyo bwa kabiri, butajyanye na ryo, bwongerwaho. Bityo, habaho guhinduranya amashami kabiri kuri buri butumwa aho kubikora rimwe:

• bisanzwe secp256k1 ECDH, neza nka mbere;
• ML-KEM-768, post-kwant algorithm algorithm NIST isanzwe nkuko FIPS 203. Umutekano wacyo ushingiye kubibazo bya lattice, algorithm ya Shor idakora.

Babiri ni Bishyizwe mu nzego, bitavanzweUbutumwa buhishwe hakoreshejwe NIP-44 nk'uko byari bimeze buri gihe, hanyuma iyo ciphertext yuzuye ifungirwa kabiri mu rwego rwa post-quantum — ChaCha20-Poly1305, ikoresha ML-KEM shared secret. Urugero rw'umutumira, urugero rw'uwakira, ciphertext y'encapsulation, n'urugero cwa ML-KEM cya uwakira byaganje mu buryo bwo kubikora nk'aho ari ibimenyetso (context), kugira ngo urwego rumwe rwakurwamo icyakoreshejwe mu miganire imwe rukakoreshwa nanone mu yindi.

Umuhuza nk’uw’ X-Wing cyangwa PQXDH ya Signal buhuza ibanga ryose mu muryango umwe (key) aho. Nymchat ntibukora ibyo, kandi impamvu ni iy’uburyo (practical) kuruta iy’ikoranabuhanga ry’ibanga (cryptographic): guhuza bisaba umusaruro w’ECDH w’umwimerere, kandi agahuzamugati ka browser (browser extension) cyangwa umushyitsi w’inyandiko (remote signer) ntazigera ubaha ibyo — uha umusaruro w’inyandiko yuzuye (ciphertext), ari na ko ari yo ntego nyamukuru yo kubika ijambo ry’ibanga aho porogaramu (app) itashobora kugeraho. Gushyira ibintu mu nzego (Layering) bituma NIP-44 ikomeye kandi ikorwa n’icyo ari cyo cyose gifite ijambo ry’imyirondoro (identity key), harimo n’umushyitsi w’inyandiko (signer), kugira ngo ibyo kwinjira (logins) bibe nk’abafatanyabikorwa b’abandi aho kuba abahagaritswe.

Imiterere y'ingenzi ni imwe mu buryo bwose: umusaruro ni nibura gikomeye nk'igice gikomeyeGusoma ubutumwa bivuze kurenga kuri buri ya mbiri zombi. Niba uburyo bwa lattice cryptography bwagaragaza ko bufite intege nke kurusha uko byari byitezwe, kurasira ML-KEM bituma ukuraho igice cy'inyuma gusa, maze hagashyiraho NIP-44 y'ubu. Niba secp256k1 isenyuka imbere ya quantum computer, igice cy'imbere kirfunguka ariko icy'inyuma ntikifunguke. Umugambanyi agomba kurasira zombi.

Ubutumwa bwose bubona post-kwant nshya, bityo kugarura urufunguzo rumwe rwerekana nta kintu na kimwe kijyanye n'abandi.

Igice cyo nyuma ya quantum gikeneye funguzo yacyo bwihariye, kandi aho iyo funguzo ituruka ho ni cyo kigenura niba ibyo byose bifite agaciro. Ni mu bwigunge ntabwo bikozwe muri uwawe nsec. Imashini ya kwamuntu iyivura igice gisanzwe isubiza ibyawe nsec kuva kuri public key yawe, n'ikintu cyose cyaturutse kuri nsec koresheje uburyo wasohoye bituma biba — imyuguzo ebyiri ifungurwa n'urugendo rumwe. Bityo Nymchat ikora itandukanye code nyuma ya quantum kuri buri konti, rimwe, biva muri bytes zitetereye (random) izituma nta kintu cyagaragazwa mu buryo bugaragara. Bisomeka nka nympq1… kandi aricara iruhande cyawe nsec mu makuru ya Nym yawe, yagaragajwe kandi akubye mu buryo bumwe. Si ijambo ry'ibanga kandi si uburyo bwo kwinjira bwa kabiri: ni amakuru y'urufunguzo ushobora kubika, nk'uko ari ryo nsec.

Nta kintu cyo gufungura

Ntabwo ari igenamiterere. Post-kwant encryption nuburyo Nymchat ivugana na Nymchat, the kimwe na encryption isanzwe nuburyo ivugana nibindi byose. Irakoreshwa mu buryo bwikora kuri buri butumwa bwihariye hamwe nitsinda ryitsinda hamwe nundi ukoresha Nymchat.

Imiyoborere $\rightarrow$ Ibanga n'Umutekano bibonye niba biri gukora n'umubare w'abantu uzi ugezeho ubu, ariko ni amakuru gusa — nta kantu ko kubikora (switch) kirimo.

Ibi bikora mu buryo bwose winjiramo. Kwinjira ukoresheje browser-extension (NIP-07) cyangwa remote-signer (NIP-46) ntibigera bibaha urufunguzo rw'indangagaciro (identity key) yawe, ari na ko ari intego y'ukoresha uburyo nk'ubu — kandi ntibakeneye kubikora. Ibice bibiri by'uburyo bwo gukomeza amakuru (encryption) bibikwa bihindukanye: uwizigamira (signer) wawe akora igice akora kenshi, naho porogaramu (app) ikora igice cy'uburyo bwa post-quantum ukoresheje urufunguzo rwawe rwo gusubiramo (recovery code), urwo porogaramu ifite mu ntoki. Kwinjira ukoresheje extension cyangwa remote-signer ni uburyo busanzwe bw'abafatanyabikorwa mu mpande zombi. Interuro y'amakuru (status line) muri Settings ivuga ibikwiriye wowe.

Icyo ufite byose ntacyo kigerwaho. Ubutumwa bwose muri amateka yawe buzakomeza gusomeka kuri buri gikoresho atari ibindi uretse... nsec, neza nk'uko byari bimeze mbere, kandi bigakomeza kuba uko mu gihe cyose konti izaba irimo. Icyo gikeneye nympq1… Ikode yo kugarura ibintu ni ibintu bitakoreshwa na quantum bwanditswe guhera ubu: ubutumwa bushya, hamwe n'izinganizo n'ububiko bikurikirana n'ubwo butumwa.

Bityo igikoresho kigomba kugira uwo mwandiko mbere y'uko gishobora gufungura ibyo, kandi kongeramo igikoresho ubu biba bisaba intambwe imwe y'inyongezo. Mu gace kansame kuri icyo gikoresho gishya, ucyinjizamo... nympq1… ikodi ivuye kuri gikoresho gifite cyo kera. Ni rimwe kuri buri gikoresho, si rimwe kuri buri kwinjira. Icyo gikorwa si inzitizi twatakaje kubikuraho: ikodi ishobora kugera kuri gikoresho gishya yonyine yari igomba kujya muri uwo muhanda binyuze mu butumwa busanzwe, kandi uwo muhanda ni wo nyine uwo muntu ushaka kwiba uyu mushinga ubarinda ari kwandika. Icyo gikorwa nibwo gituma uburinzi bw'ukuri bwaba bwuzuye.

Porogaramu ikora... nympq1… ikode yawe, bityo nta kintu ugomba guhitamo kandi nta kintu ugomba kuvumbura. Kugira ngo urebere: kanda kuri nym yawe kugira ngo ufungure. Reba cyangwa uhindure amakuru ya Nym, none Sura funguzo y'ibanga n'ikode yo gusubiramo iy'iyi nyamenvyi. Giherereye hasi ya wawe nsec, bafite utubuto twerekana no kwikopera tumwe. Ntabwo uba ugomba kubitekerezaho na rimwe kugeza ku munsi uzongeraho igikoresho cya kabiri.

Icyuma kitahujije ntacyibindurwa ngo kigire ibibazo muri uyu mwanya. Komeza gusoma ibyanditswe mu buryo bw'ubwirinzi bwa kera kandi kikomeza kohereza ubutumwa mu buryo busanzwe, hanyuma iyo ugihujije, kigera mu byanditswe byashize kikajura ubutumwa bufite uburyo bw'ubwirinzi bwa 'quantum' bwatari bwakirembere. Nta kintu kigenda mu guhuzanya nyuma.

Ninde ubona

Impande zombi zibikenera. Isikeli ya Nymchat yose itangaza itangazo rito ryashyizeho umukono kandi rifite igihe rishira rigaragaza ibyo, ikaba irimo n'urufunguzo rwayo rwa post-quantum iyo ruyifite. Kugira itangazo rishya ry'umuntu runaka ni byo bituma porogaramu ikoresha uburyo bw'itumanaho bw'imbaraga kurusha ubundi na we. Nta kiganiro kiba kigomba kubangamira: yaba urufunguzo ruriho cyangwa ntiruriho, kandi kubera ko itangazo ryashyizeho umukono ucyanditse, urufunguzo rwasimbuwe rwagusabye kwigiriza ubutwari aho gusangiza urufunguzo ruriho gusa.

Ni iki umutero ugenzura relay shobora icyo ushobora gukora ni ukuburira itangazo, ku buryo utumye uwo gitangira atagera ku rugero (key) maze akagaruka ku buryo busanzwe bwo guhisha amakuru (encryption). Icyo ni ikintu cyiza kivugwa mu buryo bugaragara. Bitwara uburyo bwo kubungabunga ubutumwa mu gihe cy'ikoranabuhanga rya post-quantum; ntibishobora gutuma umwandiko utasomwa, kandi ntibishobora kugusaba kwemera urugero rutari urwawe. Abakiriya babaza interote (relays) nyinshi, nuko guhagarika itangazo bisaba kugenzura zose muri zo.

Ibyamamamazo biba iminsi umunye kandi bikavugururwa buri munsi mu gihe ukoresha porogaramu. Niba utagiye igihe kirekire kuruta icyo, ibyawe birangira maze ugarukirwa nk'umukoresha wa Nostr usanzwe mu gihe gito: ubutumwa bugushyirirwa muri icyo gihe buhashywa mu buryo busanzwe aho kubikwa mu buryo buhangawe n'imbaraga za quantum. Bikomeza kugugeza, kandi ushobora kubasoma — kandi nta kintu wahawe mbere cyahinduka. Gufungura porogaramu bituma ibyamamazamwe byawe bishyirwa mu nshuro nshya, maze uburyo bukomeye bwo guhashya bukagaruka ubwiza. Nta kintu ukeneye gukora bushya.

Abandi bose bakomeza gukora neza nka mbere. Bitchat abakoresha n'andi client ya Nostr yose bakira iby'isanzwe NIP-17, bidahindutse. Nta kintu kimeneka iyo ubutumwa uwoherereje umuntu hanze ya Nymchat.

Ubutumwa bwa nyuma ya kwant Gusimbuza bisanzwe aho koherezwa kuruhande. Kohereza byombi ntacyo byaba bimaze: uwagabye igitero yamena kopi idakomeye.

Amakopi yandikiwe wowe kubibona kimwe - kimwe ibindi bikoresho byawe bisoma ,. ububiko inyuma yacyo, hamwe nigenamiterere ryawe, bigenda inzira imwe kandi bitwara ibyawe urutonde rwibiganiro, urufunguzo rwitsinda hamwe namateka yubutumwa bwawe. Kureka kimwe muri ibyo kuri kera encryption yaba yarabagize ikintu cyintege nke ubitse: gisomwa numuntu wese umena uyumunsi ya cryptography, nubwo ubutumwa ubwabwo bwashyizweho kashe.

Kuguma bisomwa na Bitchat

Bitchat ntishobora gusoma imiterere yubutumwa bwa Nymchat, kubwamateka rero Nymchat yohereje kopi ya kabiri ya buri butumwa buri muburyo bwa Bitchat kubantu bose bashobora kubikoresha - ibyo, kubantu utari warigeze wumva, bivuze abantu bose.

Amatangazo yavuzwe haruguru atuma ibyo gukeka bitari ngombwa. Niba hari umuntu wasohoye imwe, ni ikoresha Nymchat, kopi ya Bitchat rero iramanikwa kandi ubutumwa bukomeye gusa bwoherejwe. Niba aribyo ntabwo, ntacyahindutse: baracyakira format zombi, neza nka mbere, ntakintu rero wohereje birashobora guhinduka bidasomeka kuko porogaramu yatekereje nabi kubyerekeye umukiriya umuntu akoresha.

Kimwe na encryption ubwayo, ibi birikora kandi nta gushiraho.

Muganira mumatsinda

Ubutumwa bwitsinda bumaze kubikwa ukwe kuri buri munyamuryango, bityo itsinda rishobora kuvanga ubwoko bwombi mwisanzure - abanyamuryango abakiriya bayo babishyigikiye babona encryption ikomeye, abasigaye bakabona isanzwe imwe, kandi itsinda rikora muburyo bumwe.

Kubera iyo mpamvu, itsinda ryubutumwa ryerekanwe gusa kwant-irwanya iyo buri umunyamuryango yakiriye muri ubwo buryo. Niba na kopi imwe yakoresheje guhana bisanzwe, iyo kopi itwara kimwe ubutumwa, ubutumwa rero muri rusange burinzwe gusa nka kopi yayo idakomeye. Porogaramu ivuga "kwant-irwanya 8 kubanyamuryango 10" aho guhuriza hamwe.

Kuganira mu matsinda nabyo bikomeza ibyabo kuzunguruka urufunguzo rumwe, bihisha abari mu itsinda kubantu bose bareba relay. Ubwo burinzi ntacyo butwaye kandi bukora neza nkuko byagenze.

Gusoma ikirango

Buri butumwa bwite n'ubutumwa bw'itsinda burimo ikintu gito ingabo hafi y'icyumu. Gukanda kuri bumwe mu bimenyetso bivuga icyo kerekana.

Ingabo ihari igihe cyose ku butumwa bwafunzwe, kandi ikerekana mu buryo bugaragara iyo igisubizo ari 'o'. Ikimenyetso kitariho byashobora gutuma umuntu agira amakemwa — byashobora kwerekana ko 'bitarinda uburyo bwa quantum', cyangwa ko 'uburyo buhagarara bwa kera cyane', cyangwa ko 'ikimenyetso cyangiritse' — kandi ikimenyetso cy'umutekano kitashobora gutandukanywa n'icyangiritse ntikukubwira kintu na kimwe.

Bihereye iruhande ry'icyumu aho kugihindura kuko ibi bibaza ibibazo bitandukanye, kandi ubutumwa bushobora kuba kimwe kitari ikindi — bushobora kuba burinda uburyo bwa quantum ariko buturuka ku mutumwa utaremewe, cyangwa bwemejwe ariko bukoresheje uburyo busanzwe bwo gukomeza amakuru.

Ubutumwa bwo hambere bugumana ingabo ifite umurongo ukiyongera iteka ryose. Icyo ari cyo cyose cyabonewe mbere y'uko impande zombi zaba ziri ku miterere irinda uburyo bwa quantum (quantum-resistant build) cyari cyafunzwe ukoresheje uburyo busanzwe bwo gusangira amakuru, kandi ya ciphertext ubwo asanzwe urimo muri ba relay — ntushobora gufunzwa nanone nyuma y'uko byabaye. Ibi ni byo neza uburyo bwo "kubika ubu hanyuma ugahungabanya nyuma" (harvest-now-decrypt-later) bwari bwoze bwafungwa n'icyongeranyamubano (upgrade) mu gihe kizaza, bityo, ikimenyetso kigaragaza ibyo ni igisubizo nyakuri aho kuba ikosa.

Ibyo idakora

Kurinda Uwiteka ibirimo y'ubutumwa bwawe. Ntabwo ikora buri gice cya Nostr kwant-yerekana, kandi birakwiye ko tumenya neza itandukaniro.

• Imikono iracyari secp256k1. Indangamuntu ya Nostr isinyana na Schnorr kuri umurongo umwe. Umwanzi wari usanzwe afite mudasobwa ikora ikora ashobora guhimba a umukono no kwigira umuntu mugihe nyacyo. Icyo kuvangavanga bivanze ni ugusoma ibinyabiziga byanditse - ibanga, ntabwo ari ibyemeza.
• Nta buryo bwo kurengera amakuru mu gihe cyashize buhari. Imfunguzo zose ibiri zikamara igihe kirekire: NIP-44 ikura imfunguzo yayo mu ryawe nsec, kandi urwego rwa post-quantum cyungura ku funguzo ya ML-KEM inyuma ya yawe nympq1… code. Ubutumwa bwose buhabwa uburyo bushya bwo kubihindura, ku buryo funguzo y'ubutumwa bumwe itazura iy'ubundi — ariko uwo ari we wese azagira izo funguzo z'igihe kirekire ashobora gusoma ibyo yose yari yanditse, si ibyo yakurikiyeho gusa. Icyo ni icyo Ubutumwa bushira kugabanya, kandi ni yo impamvu ubu buryo bugamije gukusanya amakuru ubu hanyuma kuyasesa nyuma aho kugamije funguzo izibwa.
• Metadata ntabwo ihinduka. Icyerekezo kiracyabona ko ibyabaye byavuzwe urufunguzo, kandi hafi iyo. Ibyo bikemurwa na gupfunyika impano nurufunguzo rwigihe kimwe, ntabwo iyi.
• Bluetooth mesh ntagerwaho. Ubutumwa bwagezwe kuhandi urushobo Bigenda muri 'Noise XX session', ikaba ifite uburyo bwo guhisha amakuru (encryption) bukomeye kandi bukoreshwa ubu, ariko ikoresha uburyo bwa kera bwo guhawe amakuru y'ibanga (classical key exchange) — bityo ntibigira urwego rwo kurwanya ikoranabuhanga rya 'post-quantum', ndetse no hagati y'abakoresha babiri ba Nymchat. Ikimenyetso (badge) cyerekana ibi: ubutumwa bwagiye muri 'mesh' ntibugaragaza ko rwanzura 'quantum-resistant'. Kubishyiramo bivuze guhindura uburyo bwo gufungura ikubiri (handshake) ubwacyo, icyo abantu babiri (peers) bagomba gukora icyarimwe, nta mbuga (relay) bafite yo gusubiramo, kandi biba bigomba kuba bikiri bishobora gusomwa na Bitchat.
• Code yawe yo kwibukiriza ni ikindi kintu cyo kubika. Bitangira na nympq1 kandi uzabibona mu Amakuru ya Nym yawe, muri agapaji nk'akawe nsec — kanda ku nym yawe, hanyuma ukande “Garagaza private key n'imfunguzo yo gusubiramo (recovery code) by'iyi nym”. Yawe nsec ubwayo ntibuvugurura funguzo yanyu ya post-quantum — ari na ko biterwa n'uko bikora — bityo niba nta gikoresho cyaba gifite uwo mwandiko kandi ntukaba ufite kopi yacyo, ibyafunzitse kuri wo ntibishobora kuzongera gufungurwa. Nta buryo bwo kubisubiza kandi nta muntu ushobora kubaza. Bikore aho wari washyize... nsec.
• Ntishobora kurinda ibyo urundi ruhande rukora. Uyahawe arashobora kwerekana amashusho, gukoporora cyangwa kubika ubutumwa.

Numwanya umwe Ikimenyetso gifata hamwe na post-kwant kuzamura: gukosora urufunguzo rwo guhana ubungubu, kubera ko aricyo gice uwagabye igitero ashobora gukora asubira inyuma, kandi agafata imikono nka a gutandukanya ikibazo mugihe ibipimo byafashwe.

Kugenzura akazi

Imikorere ya ML-KEM igeragezwa hakurikijwe uburyo bw'ukuri viktori z'ibigeragezo NIST isohora ku bw' FIPS 203, bityo biragereranywa n'amategeko agenga uburyo (standard) ubwacyo aho kugereranya na cyo gusa. App ya web n'iyo ya telefone kandi zigereranywa ku bimenyetso by'igenekurwa bihuriyeho, ibyo nibyo bishimangira ko ubutumwa bwanditswe n'imwe bushobora gusomwa n'indi.

Bose ni Inkomoko ifunguye munsi ya AGPL-3.0, kandi ubwubatsi bw'ikoranabuhanga rya web bushobora kwisubirwamo — reba kugenzura inyubako.

Kwinjira mu buryo bwimbitse: Kumvikana ku mfunguzo nyuma ya Quantum muri Nymchat — inyandiko y'ubumenyi bwihariye ivuga kuri uko urufunguzo rwa ML-KEM ruzasangizwa nta rubuga rw'amatsiko rurimo, imiterere nyayo ihuriza hamwe uburyo bubiri bwo guhinduranya amfunguzo, ndetse n'imigambi yari irasubijwe.