Nheyo yezivo Kutaura nevanhu

Quantum-resistant encryption

Mameseji akavanzika uye hurukuro dzeboka pakati pevashandisi veNymchat dzinogona kuvharirwa saizvozvo kuti kuvarekodha nhasi hakutengi anorwisa hapana, kunyangwe kamwe quantum makomputa asvika.

Peji ino yakaturikirwa nemuchina kuti zvirerukire. ChiRungu chepakutanga ndiyo shanduro inoshanda.

Dambudziko rinogadzirisa

Zvakajairika Nostr encryption - NIP-44, zvinova izvo mameseji epachivande uye group chats inovakwa pamusoro - ine mahafu maviri. Hafu iyoyo inonyatso kukwenya zvinyorwa (ChaCha20, HMAC-SHA256, HKDF) inomira zvakanaka inopesana nehuwandu kombiyuta. Hafu inobvumirana pane kiyi haidaro.

Chibvumirano ichi chakakosha ndeye elliptic-curve Diffie-Hellman pa secp256k1, masvomhu akafanana anoshandiswa neBitcoin. Shor's algorithm inoigadzirisa zvachose. Chero ani anomhanyisa achipesana neruzhinji kiyi anodzosera iyo kiyi yakavanzika, uye nayo chakavanzika chega chega chakagovaniswa kiyi yakamboburitsa.

Kohwa izvozvi, decrypt gare gare

Iri harisi dambudziko rinotanga kana quantum makomputa asvika. Mudzivisi ane zvakakwana kuchengetedza kunogona kurekodha encrypted traffic nhasi, garai pairi, uye moinyora papera makore. Chese chaunotumira manje icho chichiri chakakosha ipapo chatofumurwa. Ndizvo chaizvo kurwisa chimiro ichi kunokunda.

Zvinoshanda sei

Nymchat inosiya mhando yemashoko yeNIP-44 isina kubatwa zvachose. Chibvumirano chemakiyi icho chava kushandisa hachisiushandurwa; chimwe chechipiri, chisiri chekuti, chinowekeredzwa pachacho. Saka pane kutaurirana kwemakiyi kaviri pamashoko mumwe chete pane mumwe:

mwero secp256k1 ECDH, sezvakangoita kare;
ML-KEM-768, iyo post-quantum algorithm NIST yakamisikidzwa se FIPS 203. Kuchengetedzeka kwayo kunogara pamatambudziko e lattice, iyo Shor's algorithm isingabatike.

Vaviri ndivo akagadzirwa nemapanda, asina kusanganiswaShoko racho rino rwakachengetwa neNIP-44 sezvaigara zvichiitwa, uye rimashoko ariko racho rinozopedzisira rwakavharwa zvakare mukati mematanu emu-post-quantum — ChaCha20-Poly1305, inoshandisa ML-KEM shared secret. Chìfambiso chekutuma, chìfambiso chekupihwa, ciphertext yeencapsulation, uye chìfambiso cheML-KEM chekupihwa zvakabatidzwa mukubatanidzwa ikoko sematanu ekuzivisa, kuitira kuti mutani mumwe usatandurwe kubva pane rimwe kuti ushandiswe pane rimwe zvakare.

Mubatanidzwa akaita seX-Wing kana PQXDH yeSignal anosanganisa zvakavanzika zvose kuita kiyi imwe chete. Nymchat haasi iro, uye chikonzero chacho chiri pane zvinoitika (practical) pane zvematematiki ekuvhara (cryptographic): kusanganisa kunoda ECDH output isina kugadziriswa, uye browser extension kana remote signer havazombobudisa izvozvo — inodzorera ciphertext yakapera, izvo ndizvo chinangwa chikuru chekuviga kiyi panzvimbo isingakwanisi kusvika nayo app. Layering inochengetedza NIP-44 yakazara uye inobuda pane chero chinhu chinochengetedza kiyi yedama (identity key), kusanganisira signer, kuitira kuti login idzi dzive vashanyi vezvakajairika pane kuti dzive dzakaiswa kunze.

Hunhu hunokosha hwakafanana mune mamwe matanho ose: mhedzisiro ndeyokuti akasimba zvakafanana nechikamu chakasimba kupfuuraKuverenga shoko kunoreva kupinda mumapoka maviri. Kana lattice cryptography ikawanikwa ichive yakasimba zvishoma pane zvakatarisirwa, kuparadza ML-KEM kunobvisa chete mukana wekunze uye kuunza NIP-44 yanhasi pasi pezvo. Kana secp256k1 ikakundwa nequantum computer, mukana wemukati unovhurika asi wekunze hauvhuriki. Munhu anoda kukuvadza anofanira kuparadza maviri ese.

Yese meseji inowana nyowani post-quantum exchange, saka kudzoreredza meseji kiyi inoburitsa hapana pamusoro pevamwe.

Chikamu chepost-quantum chinoda kiyi yacho pachacho, uye kuti kiyi iyoyo inobva kupi ndiko kunotsanangura kuti chinhu chote ichi chine kukosha here. Inoitwa nenzira yakarongwa kwete yakabva kubva yako nsec. Kompyuta yequantum inopedza chikamu checlassical inodzorera zvako nsec kubva kune public key yako, uye chero chinhu chinobva pane nsec nekushandiswa kweformula yakamboburitswa inobuda nayo — makonye maviri akavhurwa nekupaza rimwe chete. Saka Nymchat inogadzira imwe yakasiyana kodi ye-post-quantum kune akaunti imwe neimwe, kamwe chete, kubva kune mabhayiti akashata asingaratidzwe nechimwe chinhu chiri pachena. Inoti nympq1… uye anogara pedyo na yako nsec mune tsananguro dzeNym yenyu, zvakaratidzwa uye zvakandurwa nenzira imwe chete. Haisi password uye haisi kupinda kwechipiri: inzvimbo yemashoko ekiyi mungazochengetedza, sezvazviri sez... nsec.

Hapana chekubatidza

Iyi haisi mamiriro. Post-quantum encryption ingori matauriro aNymchat naNymchat, iyo nenzira imwechete yakajairwa encryption matauriro aanoita kune zvimwe zvese. Inoshanda otomatiki kune meseji yega yega uye kukurukurirana kweboka nemumwe mushandisi weNymchat.

Settings > Chiremera neKuchengetedzeka kunoratidza kana zviri kushanda uye kuti unodyidzana nevanhu vangani parizvino, asi izvi zvinobuda semashoko chete — hapana bhatani rekuzvimisa.

Izvi zvinoshanda munguva yose yaungapinda. Kupinda nekushandisa browser-extension (NIP-07) kana remote-signer (NIP-46) hakuzopi app kiyi yemazita ako (identity key), izvo ndizvo chinangwa chikuru chekushandisa mumwe — uye hachidi kuti zvito. Madimbu maviri ekukunda (encryption) anochengetedzwa akasiyana: signer yako inoita chikamu chayo chamakamboita, uye app inoita chikamu chepost-quantum neshoko rekudzorerera (recovery code) rako, riripo mairi mairi. Kupinda nekushandisa extension kana remote-signer inzvimbo dzakajairika kumativi ose. Mutsetse westatus muSettings unotaura zvinokubata iwe.

Hapana chamunenge mave nacho chakanjauka. Meseji dzese dziri mumagadzirirwo enyu dzinoramba dzichiverengeka pamudziyo woga woga pasina chimwe kunze kwe... nsec, sezvakaranga, uye zvinoramba zvakadaro kwenguva yose akavereni iyoyo ichiri kushanda. Chii chinoda... nympq1… Kodi yekudzorerera ndeyezvinhu zvinodzivirirwa nequantum zvakanyorwa kubva iyezvino: mameseji matsva, nezvimiro zvakabatana nezvakachengetwa zvinofamba nazvo.

Saka chidimbu chinofanira kuva neiyi kodi kuti chikwanise kuvhura izvo, uye kuwedzera chidimbu iyezvino kunotora chiito chimwe chete chekuwedzera. Mumapeni imwe chete pane chidimbu chitsva unopinza... nympq1… koodi kubva pane chishandiso chakatova nacho kare. Inowanikwa kamwe chete pachiishandiso, kwete kamwe chete panguva yekupinda. Danho iroro harisi chidambudziko chatinotadza kuchibvisa: koodi inogona kusvika pane chishandiso chitsva yega yaiva nekuenda ikati mumashoko anowanikwa zvakajairika, uye mashoko acho ndiyo chaizvo ari kurekodhwa nekuvengwa kuri kudzivirirwa nechinangwa ichi. Danho iroro ndiro chinopa kuti dziviriro ive chaiyo.

Chirongwa chinogadzira nympq1… kodi kwauri, saka hapana zvekuzosarudza uye hapana zvekugadzira. Kuti uone: bata nym yako kuti uvhure Ona kana kuti Gadziridza Zvakatsanangurwa zva Nym, ndobva Vhunura kodyu yakavanzika yezita rino nekodyu yekudzosa. Zvinogara pasi pe... yako zvakananga nsec, nembatano dzekuratidza nadzo nedzekukopa dzakafanana. Haubvunzi kufunga nezvazvo kusvikira zuva rauchawedzera chishandiso chechipiri.

Chishandiso chisingasanganisidzwa hachivharirwi panguva iyoyo. Chinoramba chichiverenga zvose zvakanyorwa nekuvhura kwekare uye chinoramba chichitumira zvakajairika, uye kana mukasanganisa, chinodzoka chinovhura mameseji akachengetedzwa nekuvhura kwequantum ausingakwanisa kuverenga kare. Hapana chinorasika nekusanganisa nguva yakareba.

Zvimwe zvishandiso zvako

Chishandiso chechipiri chinoda zvinhu zviviri: chikamu chiri kushandiswa iye zvino cheapp, uye nympq1… kodi. Chimwe chishandiso chekare chiri kuramba chichiita — hachina kumiswa — asi hachikwanisi kuverenga zviri kushandiswa iye zvino, saka sezvo chiri mupenyu paaccount, zvinyorwa zvavanochengetedza pachavo zvinodzosa kune chekare chachinokwanisa kuverenga. Chishandiso chitsva chisingambosanganiswa (linked) kazhinji chinoverenga nhoroondo yako yekare ndokukumbira kodi. Vese havakwanisi kutibata kuti chiripo, ndosaka uyu uri mharidzo pane kuti ingave chinhu chatinogona kuziva nekuzvimirira nekuda kwako.

Waunowana naye

Mativi ose anoda izvi. Client weNymchat wese anoburitsa chiziviso chikuru, chakatsigirwa nemunamato, chine nguva yekupedzisira chinotaura izvo, uye chinobatanidza kiyi yake ye-post-quantum kana iine imwe. Kuva nechiziviso chakabvumidzwa kwemunhu ndiko kunoita kuti app ishambidze kubatana kwakasimba kwazvo navo. Hapana kukurukura kunogona kupindwa nawo: kiyi iri kana isiri, uye nekuti chiziviso ichi chakatsigirwa nemunamato nemunyori wacho, kiyi inotsivaiwa ingadai yakagadzirwa nenzira yekunyengedza pane kungopiwa chete.

Munhu anorwisa anotonga relay. gona chimanjira ndechekuvanda ziviso, kuitira kuti mutumiri asabvona kiyi uye adzoke kushandisa encryption yenguva dzose. Izvi zvakakosha kuzviudza pachena. Zvinoreva kuti mameseji acho anorasikirwa nekuvhara kwe-post-quantum; hazvikwanisi kuita kuti mameseji asaverengeke, uye hazvikwanisi kukurudzira kuti ugamuchire kiyi isiri yako. Vashandisi vanobvunza relays dzakawanda, saka kuderedza ziviso uku kunoda kuti uine kontrola yadzose dzese.

Maziviso acho anogara svondo rimwe chete uye anozvigadziridza mazuva ose panguva yaunoshandisa app iyi. Kana ukasabvunza kwenguva refu kupfuura iyoyo, rako rinopera uye unenge uchionekwa semushandisi weNostr wezvakajairika kwenguva pfupi: mameseji inokutumirwa panguva iyoyo inochengetedzwa nenzira dzakajairika pane nzira inodzivirira quantum. Inosvikawo, uye unokwanisa kuzovirenga — uye hapana chimwe chawakagamuchira kare chinobatikana. Kuvhura app iyi kunozvugadziridza zvakare maziviso ako, uye kuchengetedzwa kwakasimba kunotanga zvakare zvoga. Hapana chimwe chinoda kuitwa zvakare.

Vamwe vese vanoramba vachishanda sepakutanga. Bitchat vashandisi nezvimwe zvishandiso zveNostr vanogamuchira standard NIP-17, kusasanduka. Hapana chinokanganisika kana ukatumira shoko kumunhu ari kunze kweNymchat.

A post-quantum meseji anotsiva mwero pane kutumirwa pamwe chete nawo. Kutumira zvese zviri zviviri hazvina maturo: munhu anorwisa anongotyora kopi isina kusimba.

Makopi akanyorerwa iwe tora zvakare - iyo iyo mimwe michina yako inoverenga, iyo chengetedza kumashure kwayo, uye yako yakawiriraniswa marongero, ayo anofamba nenzira imwechete uye anotakura yako rondedzero yekukurukurirana, makiyi eboka rako uye nhoroondo yako yemeseji. Kusiya chero ipi zvayo pane yekare encryption ingadai yakaita kuti ive chinhu chisina kusimba chaunochengeta: chinoverengwa nemunhu wese anotyora yanhasi cryptography, zvisinei kuti iwo mameseji acho akaiswa chisimbiso zvakadii.

Kugara uchiverengeka neBitchat

Bitchat haigone kuverenga meseji yeNymchat, saka nhoroondo Nymchat yakatumira kopi yechipiri ye meseji yese mufomati yeBitchat kune chero angave ari kuishandisa - izvo, kune mumwe munhu wakanga usati wambonzwa kubva, zvichireva munhu wose.

Chiziviso chiri pamusoro apa chinoita kuti kufungidzira kusava nebasa. Kana mumwe munhu akaburitsa imwe, ndizvo inomhanya Nymchat, saka Bitchat kopi inodonhedzwa uye chete meseji yakasimba inotumirwa. Kana ivo handina, hapana chakachinja: vachiri kugamuchira ese mafomati, sezvakangoita kare, saka hapana yaunotumira inogona kusaverengeka nekuti app yakafungidzira zvisizvo nezvekuti ndeupi mutengi anoshandisa.

Kufanana neiyo encryption pachayo, izvi zvinongoitika uye hazvina marongero.

Wadii kungofembera kubva kumabasa eruzhinji

Nymchat inogona kufungidzira kuti ndiani arikumhanyisa izvo kubva kuruzhinji chiteshi chiitiko, uye yaigona kuona vanhu nokukurumidza. Asi fungidziro iyi dzimwe nguva haina kururama, uye kutadza apa kunoreva kutumira mumwe munhu meseji iyo app yavo haigone kuvhura, isina kukanganisa uye hapana kuedza zvakare. A rakabudiswa chiziviso chakasainwa nemunyori wacho uye hachigone kunyengedzwa, saka chinoshandiswa pachinzvimbo.

Mugroup chats

Mameseji eboka akatovharirwa zvakasiyana kunhengo yega yega, saka boka rinogona kusanganisa marudzi ese vakasununguka - nhengo dzine vatengi vanoitsigira vanowana iyo yakasimba encryption, vamwe vese vanowana iyo chiyero chimwe, uye boka rinoshanda zvakajairika chero nzira.

Nekuda kweizvozvo, meseji yeboka inongonyorwa quantum-resistant kana zvese nhengo akazvigamuchira saizvozvo. Kana kopi imwe chete yakashandisa shanduko yakajairwa, kopi iyoyo inotakura zvakafanana meseji, saka meseji yacho yese inongodzivirirwa sekopi yayo isina kusimba. App inoti "quantum-resistant kune 8 yenhengo gumi" pane kuunganidza.

Chats dzemagroup dzinochengetawo dzavo kutenderedza makiyi enguva imwe chete, izvo zvinovanza kuti ndiani ari muboka kubva kune ani zvake anotarisa relay. Dziviriro iyoyo haina kukanganiswa uye inoshanda sezvayakaita.

Kuverenga bheji

Mameseji ese akavanzika nemamameseji emapoka anotakura kadiki nhovo pedyo nepadhoku. Kudzvanya chimwe nechimwe chiratidzo kunotsanangura zviri kuratidzwa.

Mark	Meaning
Padlock	Ndiani akaitumira - kana siginicha inoenderana neanonzi munyori.
Shield	Zvinodzivirira quantum. Madivi ose aive nekodi yavo yechipost-quantum, uye kushandiswa kwehybrid exchange kwaishandiswa kumaverengero ose emashoko aya.
Dashed shield	Inodzivirira kune quantum pakati nepakati — shoko remapoka racho rine kudzivirirwa kune vamwe mamember chete. Nekuti vamwe vari kutaridza mashoko akafanana, regara shoko iri sezvakachengetedzwa nenzira dzakajairika.
Chivharo chakakwatiwa	Hazvisingodzivirirwi nequantum. Encryption yeNIP-44 yechajairika — ichiri kugarira end-to-end encrypted, uye ichiri kusaverengeki kuanumbe kunze kwevashandisi vacho nhasi.
Hapana nhovo	Haisiri shoko rakavigwa. Zvinobuda mumakondo akavhurika zvinogona kuverengwa pa-relay nekuda kwekurongwa kwazvo, saka hapana chiratidzo chekuchiviga chinoshandiswa.

Chitunhu chekudzivirira chinogara chiri pano pamashoko akavanzwa, uye chinotaura zvakajeka kana mhinduro iri kuti kwaiwo. Chiratidzo chakashaikwa chaizove chakavhiringika — chinogona kureva kuti “hachikwanisi kupedza mhirizhonga yequantum”, “software iyi yakare zvakanyanya”, kana kuti “chiratidzo chacho chakakuvadzwa” — uye chiratidzo chechengetedzo chisingagoni kusiyaniswa nechakakuvadzwa hachikuzivi chinhu.

Inogara pedyo nepadlock pane kutevedzera iye acho nekuti zvinhu izvi zviviri pinda mibvunzo yakasiyana, uye shoko rinogona kuva rimwe pasina rimwe — rakasimba kutevedzera quantum asi riri kubva kumutumirira asina kuzivikanwa, kana kuti rakazivikanwa asi rakachengetedzwa nenzira dzechinyakare.

Meseji dzakare dzinochengetedza chipataro chakagonywa nemutsetse zvachose. Zvese zvakatumirwa musati mamboshandisa nzira dzinodzivirira masayenisi (quantum-resistant) kumativi ose, zvakavharwa nenzira dzakajairika, uye mashoko acho (ciphertext) anenge ari kare mumasero (relays) — haagoni kuvharwa zvakare panguva iyo zvaitika kare. Izvi ndizvo zvinonyanya kuisa pangozi dzekuti "vatora zvinhu iye zvino, vachazvinzwisisa mune ramangwana" (harvest-now-decrypt-later), izvo kuvandudza (upgrade) uku kunozvigadzirisa kubva zvino, saka chiratidzo ichocho chinopa chokwadi pane kuti chive chiratidzo chekuti pane kukanganisika.

Izvo zvisingaite

Izvi zvinodzivirira zviri mukati yemeseji yako. Haisi kuita chikamu chose che Nostr quantum-uchapupu, uye zvakakodzera kunyatsotaura nezve musiyano.

Masiginicha achiri secp256k1. Nostr zvitupa saina naSchnorr pane same curve. Muvengi anga atova nekombuta yekushanda aigona kugadzira a siginecha uye edzesera mumwe munhu munguva chaiyo. Izvo iyo hybrid exchange inomira kuverenga kurekodha traffic - kuvanzika, kwete huchokwadi.
Hakuna kuchengetedzwa kwezvakavanzika mberi. Makiyi maviri ose anogara kwenguva refu: NIP-44 inotora makiyi ayo kubva pane... nsec, uye chikamu chepost-quantum chinovhara ML-KEM key kumashure kwe... nympq1… kurekodha. Meseji imwe neimwe inochengetedzwa nenzira itsva, kuitira kuti kiyi yemeseji imwe isavhura imwe inotevera — asi upi zvake anozopedzisira ave neiyi kiyi dzekusingaperi anogona kuverenga zvose zvavakanyora kare, kwete chete zvakauya mushure. Ndizvo... Mifekete inoperera nguva kuderedza, uye ndicho chikonzero nei chigadzirwa ichi chakatsaurirwa pakukohwa iye zvino kuzodudzira mune ramangwana pane kiyi inotorwa.
Metadata haina kuchinjwa. Relay ichiri kuona kuti chiitiko chakataurirwa kiyi, uye riini. Izvo zvinogadziriswa kuputira zvipo uye makiyi enguva imwe chete, kwete na izvi.
Bluetooth mesh haisi yakafukidzwa. Mharidzo yakapfuurwa mambure Inofamba mune sessoni yeNoise XX, iyo ine kuchengetedzwa kwakasimba kwemazuva ano asi kushandisa nzira yekutsanangura makiyi ekare — saka haina nzvimbo yepost-quantum, kunyange pakati pevashandisi vaviri veNymchat. Chiratidzo chinoratidza izvi: shoko rinotumirwa kuburikidza nemesh harina kuratidza kuti chakarurirwa kudzivirira quantum. Kuwedzera izvo kunoreva kushandura handshake pachayo, izvo zvose vaviri vanenge vachimanikidzwa kuita panguva imwe chete, pasina relay yekubatsira uye uchichengetedza kuti Bitchat ichikwanisa kuverenga.
Kodi yekudzorera yenyu i chinhu chechipiri chinofanira kuchengetedzwa. Zvinotanga ne nympq1 uye uchazviwana mu tsananguro dzeNym yako, mupaneli rimwe chete sezviri zvenyu nsec — bata nym yako, ndobvo “Bonisa private key uye recovery code yeiyi nym”. Yako nsec pazvazvo hakuve nekugadziridza kiyi yako ye-post-quantum zvakare — ndicho chikonzero chairo chinofambisa izvi — saka kana hapana chishandiso chine kodi iyoyo uye usina kwekudzokorora kwayo, zvaiva zvakavharwa nayo hazvigone zvakare kuvhurwa. Hakuna kudzosa uye hapana munhu waunogona kubvunza. Ichengetedza pane kwaunchchengetera... nsec.
Haikwanise kudzivirira zvinoitwa nerimwe divi. Munhu anogamuchira anogona achiri kutora skrini, kopira kana kuchengeta meseji.

Iyi ndiyo yakafanana chinzvimbo Chiratidzo chinotora neyayo post-quantum kusimudzira: gadzirisa kiyi yekutsinhana ikozvino, nokuti ndicho chikamu anorwisa anogona kuita pamusoro retroactively, uye kubata siginicha sea patsanura dambudziko rekuti kana zviyero zvasvika.

Kuongorora basa

Kushandiswa kweML-KEM kunoedzwa zvichienzaniswa nezviri pamutemo. miedzo yemavhekita NIST inoburitsa kuitira FIPS 203, saka inochengetedzwa nekutariswa zvichienzaniswa nechimiro pachacho pane kungochengetedzwa yozvichengetedza chete. Web app nemobile app zvakare dzinochengetedzwa nekushandisa zvinhu zvakafanana zvekuedza (test vectors), izvo zvinoita kuti shoko rakanyorwa nemumwe riwanikwe nemumwe.

Zvose zviri Makodhi akavhurika pasi peAGPL-3.0, uye ma builds eweb app anogona kuvakwa zvakare — onai kuongorora chigadzirwa.

Kuenda zvakadzama: Kubvumirana kweChikamu cheChirongwa mushure mekuQuantum muNymchat — pepa rehunyanzvi pamusoro pekuti kiyi yeML-KEM inogoverwa sei pasina directory, kurongwa kwakanyatsogadzirwa kunounganidza maexchanges maviri ekushintsirwa kwekiyi, nemazano akaraswa.