Okubelelwe elwazini / Ukuthetha nabantu

I-Quantum-resistant encryption

Imiyalezo yabucala kunye neencoko zeqela phakathi kwabasebenzisi beNymchat zinokufihlwa ngoko ukuba ukurekhoda namhlanje akuthengi umhlaseli nto, nokuba iikhompyuter ze-quantum zifikile.

Eli phepha liguqulelwe ngoomatshini ukuze kube lula. Uqobo lwesiNgesi yinguqulelo esebenzayo.

Ingxaki iyayisombulula

Uguqulelo oluntsonkothileyo lweNostr- I-NIP-44, yintoni na imiyalezo yabucala kwaye iingxoxo zeqela zakhiwe phezu - zinesiqingatha ezibini. Isiqingatha eso eneneni ikhubaza okubhaliweyo (ChaCha20, HMAC-SHA256, HKDF) ibambe kakuhle ngokuchasene ne-quantum ikhompyutha. Isiqingatha esivumelanayo nesitshixo asivumi.

Eso sivumelwano singundoqo yi-elliptic-curve Diffie-Hellman kwi-secp256k1, kwaezo zibalo zisetyenziswa nguBitcoin. I-algorithm kaShor iyisombulula ngokuthe ngqo. Nabani na oyisebenzisayo ngokuchasene nesitshixo sikawonke-wonke uyayifumana isitshixo sabucala, kunye nayo yonke imfihlo ekwabelwana ngayo eso sitshixo sakha saveliswa.

Ingaba isebenza kanjani

I-Nymchat ivumela ifomati ye-NIP-44 ngokupheleleyo. I-akhawunti ye-key ebonakalayo xa isetyenziselwa; i-second, i-independent isetyenziswe ngokugqithisileyo. Ngoko ke kukho i-exchanges ezimbini ze-key ngalinye i-message kunokuba i-one:

• umgangatho secp256k1 ECDH, kanye njengangaphambili;
• I-ML-KEM-768, i-algorithm ye-post-quantum ye-NIST esemgangathweni njenge FIPS 203. Ukhuseleko lwayo luphumle kwiingxaki zeeletisi, apho i-algorithm yeShor ayichukumisi.

Iingubo ezimbini ingxubevange, akukho mixedI-message ifakwe nge-NIP-44 efana nexesha elide, kwaye le nqaku olugqityiweyo isetyenziswe kwakhona kwi-post-quantum layer – i-ChaCha20-Poly1305, efanelekileyo kwi-ML-KEM shared secret. I-sender key, i-receiver key, i-encapsulation encapsulation text kunye ne-ML-KEM key ye-receiver ziquka kwakhona njengoko kwimeko, ngoko i-layer ayikwazi ukuchithwa kwi-exchange eyodwa kwaye ifumaneka kwi-other.

I-combiner efana ne-X-Wing okanye i-Signal's PQXDH ibandakanya iingcebiso ezimbini kwifowuni efanayo. I-Nymchat ayikho, kwaye umzekelo yinto efanelekileyo kunokuba ye-cryptographic: ukuxuba kufuneka i-e-output ye-ECDD, kwaye i-browser extension okanye i-remote signer ayikwazi ukufumana oku ekugqibeleni-ukuguqula i-encryptor text efanelekileyo, nto leyo yinto epheleleyo yokugcina i-key apho le app ayikwazi ukufikelela. I-Layering ibandakanya i-NIP-44 epheleleyo kunye nokuveliswa ngoko ke ibandakanya i-identity key, i-signer kuquka, ngoko ke

Umgangatho ebalulekileyo umgangatho omnye: umgangatho okungenani efanelekileyo njenge-half strongerUkucinga umyalezo kubalulekile ukufikelela kwiibhetri ezimbini. Ukuba i-cryptography ye-lattice ibonakalisa ukuba ingangaphantsi kunokwenzeka, ukuchithwa kwe-ML-KEM kunceda kuphela ukuchithwa kwihlabathi ezimbini kwaye ibonakalisa i-NIP-44 yamanje phantsi. Ukuba i-secp256k1 ibonakalisa kwikhompyutha ye-quantum, i-layer ye-internal ibonakalisa kodwa i-external ayikho. I-attacker kufuneka ibonakalise zombini.

Umyalezo ngamnye ufumana utshintshiselwano olutsha lwe-post-quantum, ke ukubuyisela kwakhona isitshixo somyalezo omnye siyaveza akukho nto malunga nabanye.

I-post-quantum i-half kufuneka i-key yayo yayo yayo yayo, kwaye apho le key iye iye ilungele ukuba yonke into iye yintoni. hayi Ukusebenza kwi-Your nsecI-computing ye-quantum eyenza i-half ye-classical yenza i-computer yakho nsec ukusuka kwi-public key yakho, kwaye nayiphi na into efanelekileyo nsec by a published formula comes out with it — amabhokisi ezimbini ezivula ngexesha elinye. Ngoko Nymchat ikhiqiza enye ikhowudi post-quantum ngalinye i-akhawunti, ngexesha, ukusuka kwi-byte ye-random that no public value exposes. It reads as nympq1… Ngaba uqhagamshelane nawe nsec iinkcukacha yakho ye-Nym, ifumaneka kunye nokuphathelwa ngexesha elifanayo. It is not a password and not a second login: it is key material you can save, nje njenge nsec.

Akukho nto yokuvula

Olu ayilolungiselelo. I-Post-quantum encryption yindlela nje uNymchat athetha ngayo neNymchat, i ngendlela efanayo ufihlo oluqhelekileyo yindlela oluthetha ngayo nayo yonke enye into. Isebenza ngokuzenzekelayo kwi wonke umyalezo wabucala kunye nencoko yeqela nomnye umsebenzisi weNymchat.

I-Settings › Privacy & Security ibonisa ukuba ifumaneka kunye nabanye abathengi bakho ngexesha elidlulileyo, kodwa kuphela njengoko ulwazi - akukho i-switch.

Ukusebenza nangona umgangatho uqhagamshelane. I-browser-extension (NIP-07) okanye i-remote-signer (NIP-46) i-login ayidlala ikhowudi yakho yokuzonwabisa kwi-app, leyo yinto epheleleyo yokusebenzisa enye - kwaye ayidinga. Iinxalenye ezimbini ye-encrypting zithunyelwe ezahlukileyo: i-signer yakho yenza i-part yaye i-app yenza i-post-quantum nge-code yakho yokukhuthaza, leyo ilawula ngqo. I-Extension kunye ne-remote-signer-logins ziya kubandakanyeka ngalinye. I-status line kwi-Settings ibonisa into efanelekileyo.

Yonke imiyalezo kwi-history yakho ibekwe ngokugqithisileyo kumadivayisi omnye ngaphandle kwe- nsec, ngexesha elandelayo, kwaye ibekwe ngexesha elide yebhizinisi. Yintoni kufuneka nympq1… ikhowudi yokuguqula yinto kwamanzi-resistant ebhaliwe ukusuka ngoku: iingxelo ezintsha, kunye neengxelo ze-synced kunye ne-archive ehamba ngeenxa.

Ngoko ke, isixhobo kufuneka ibhale le ikhowudi ngaphambi kokufumana, kwaye ukongeza isixhobo ngoku kufuneka ibe isinyathelo esizayo. Kwi-panel efanayo kwi-device entsha uqhagamshelane isixhobo nympq1… ikhowudi evela kumadivayisi ebonakalayo. It is once per device, not once per login. Le step is not friction we failed to remove: a code that could arrive on a new device by itself would have to travel there inside an ordinary message, and that message is exactly what the attacker this feature exists to stop is recording. The step is the reason the protection is real.

I-app inikeza i nympq1… ikhowudi kuwe, ngoko ke akukho ukhetho kwaye akukho ukufumana. Ukuze ubone: Tast your nym to open View or Edit Iingcebiso zeNymKwakhona Ukubonisa i-nym ye-private key kunye ne-recovery code. It ibekwe ngqo phantsi yakho nsec, kunye nqakraza okuzenzakalelayo kunye neqakraza. Ufuna ukuba awukwazi ukufikelela kwakhona ngexesha elandelayo.

I-dispositive eyahlukileyo ayixhomekeke ngexesha elidlulileyo. I-dispositive ibhalisele yonke into ebhalwe phantsi kwe-encryption elidlulileyo kwaye ibhalisele ngokuvamile, kwaye xa uqhagamshelane, i-dispositive ibhalisele kwakhona kwaye ibhalisele iingxelo ze-quantum-resistant ezidlulileyo. Akukho into elidlulileyo ukuba uqhagamshelane ngexesha elide.

Uyifumana nabani

Zonke iingcali ze-Nymchat zibonisa iingcebiso ebandayo ebandayo ebandayo ebandayo ebandayo ebandayo ebandayo, kwaye ibandakanya i-post-quantum key yayo xa ine. Ukugcina iingcebiso ebandayo kumntu yinto enza i-app ukuba usebenzise i-exchange ebandayo. Akukho ukuhambisa ukuxhaswa: okanye iingcebiso ibandakanya okanye akukho, kwaye ngenxa yokuba iingcebiso ibandakanya ngumbhali yayo, iingcebiso ebandayo kufuneka ifakwe ngaphezu kokusebenza kuphela.

Yintoni i-attacker enikezela i-relay Ngaba Yintoni iingcebiso zikhusela iingcebiso, ngoko umthengisi akukwazi ukufumana iingcebiso kunye nokugqiba kwi-encryption ebonakalayo. Oku kunzima ukhuseleko lwe-post-quantum yeengcebiso; akukwazi ukuvelisa iingcebiso, kwaye akukwazi ukuvelisa ukuba ufumane iingcebiso ebonakalayo. Iingcebisi bafuna i-relays ezininzi, ngoko ukunciphisa iingcebiso zihlanganisa bonke kubo.

Iingcebiso ezidlulileyo ziyafumaneka kwiiveki kwaye ziyafumaneka ngosuku ngamnye xa usebenzisa i-app. Ukuba ushiye ngaphezulu kwexesha elide, iingcebiso zakho ziyafumaneka kwaye uyifumaneka njenge-Nostr client epheleleyo ngexesha elide: iingcebiso ezidlulileyo ziye zithunyelwe ngexesha elidlulileyo kunokuba yi-quantum-resistant way. Zilandele, kwaye unako ukuyifumana - kwaye akukho nto efanelekileyo. Ukukhula i-app ibonisa iingcebiso yakho, kwaye ukucaciswa okuqinile kwakhona kwakhona. Akukho nto yokufaka.

Wonke umntu uyaqhubeka esebenza kanye njengangaphambili. Bitchat abasebenzisi kunye nabanye abathengi we-Nostr bafumana i-standard I-NIP-17, olungapheliyo. Akukho ingxaki xa uqhagamshelane umntu ngaphandle kweNymchat.

Umyalezo we-post-quantum indawo esemgangathweni kunokuba ithunyelwe ecaleni kwayo. Ukuthumela zombini akuyi kuba nanjongo: umhlaseli unokusuka nje aphule ikopi ebuthathaka.

Iikopi ezibhalelwe wena yifumane ngokunjalo-eya kufundwa zezinye izixhobo zakho, i ugcino ngasemva kwayo, kunye nesetingi zakho ezivumelanisiweyo, ezihamba ngendlela efanayo kwaye ziphathe eyakho uluhlu lwencoko, izitshixo zeqela lakho kunye nembali yomyalezo wakho. Ukushiya nayiphi na kwezo kwindala uguqulelo oluntsonkothileyo beluya kubenza eyona nto ibuthathaka oyigcinayo: efundeka nguye nabani na owaphulayo i-cryptography yanamhlanje, nokuba imiyalezo ngokwayo itywinwe ngononophelo kangakanani.

Ihlala ifundeka yiBitchat

IBitchat ayikwazi ukufunda ifomathi yomyalezo kaNymchat, ngoko ngokwembali uNymchat wathumela ikopi yesibini wonke umyalezo kwifomathi yeBitchat kuye nabani na onokuthi uyisebenzise - leyo, kumntu othile wawungazange uve, kuthetha wonke umntu.

Esi sibhengezo singasentla senza ukuba ukuqikelela kungabi yimfuneko. Ukuba umntu upapashe enye, banjalo eqhuba iNymchat, ke ikopi yeBitchat ilahliwe kwaye ngumyalezo onamandla kuphela othunyelwayo. Ukuba bona abakhange, akukho nto itshintshileyo: basafumana zombini iifomati, kanye njengangaphambili, akukho nto oyithumelayo inokungafundeki kuba usetyenziso luqikelele ngokungalunganga malunga nokuba ngowuphi umxhasi osetyenziswayo.

Njengofihlo ngokwalo, oku kuyazenzekela kwaye akukho lungiselelo.

Kwiincoko zeqela

Imiyalezo yeqela sele iguqulelwe ngokuntsonkothileyo ngokwahlukileyo kwilungu ngalinye, ngoko ke iqela linokuxuba zombini ezi ndidi ngokukhululekileyo - amalungu abaxhasi babo abaxhasayo bafumana ufihlo olunamandla, abanye bafumana umgangatho omnye, kwaye iqela lisebenza ngokwesiqhelo nangayiphi na indlela.

Ngenxa yoko, umyalezo weqela uphawulwa kuphela ukuxhathisa kwe-quantum xa yonke ilungu wayifumana ngolo hlobo. Ukuba ikopi enye isebenzise utshintshiselwano oluqhelekileyo, loo kopi ithwala okufanayo umyalezo, ngoko ke umyalezo uwonke ukhuselwe kuphela njengowona mbhalo ubuthathaka. I-app ithi "quantum-resistant kumalungu asi-8 kwali-10" kunokuba usondezwe.

Iingxoxo zeqela nazo zigcina zabo ukujikeleza amaqhosha exesha elinye, ezifihla ukuba ngubani okwiqela kuye nabani na obukele ireyidi. Olo khuseleko aluchaphazeleki kwaye lusebenza kanye njengoko lwenzile.

Ukufunda ibheji

Yonke imiyalezo yebhanki kunye neengxelo yeengxelo yeengxelo yeengxelo yeengxelo ikhaka ekubeni i-padlock. I-Tapping either mark ibonisa into esibonakalayo.

I-Shield ikhona ngokuzenzekelayo kwi-imeyile ye-encrypted, kwaye ibonisa ngokucacileyo xa impendulo yinto ye-no. I-marking efanelekileyo - ingaba kunceda ngokubanzi ukuba “i-non-quantum-resistant”, “i-building yinto enzima kakhulu”, okanye “i-indicator ifakwe” - kunye ne-indicator yokhuseleko efanelekileyo kwi-broken one ayibonakalisa akukho.

I-Padlock ibekwe ngexesha lokuphendula njengoko iingxaki ezimbini ziyafumaneka, kwaye ingxelo ingaba enye ngaphandle kwelinye - i-quantum-resistant kodwa kwi-sender ebhalisiweyo, okanye i-verified kodwa i-encrypted ngokuvamile.

Iingxelo ezidlulileyo zithintela i-cut-through shield ngexesha elide. Yintoni eyayithunyelwa phambi kumazwe omnye waya kwi-quantum-resistant build yaye i-sealed kunye ne-exchange ye-conventional, kwaye le encryption yaziwe kwi-relay - akakwazi ukufuma emva kwimeko. Oku ngokufanelekileyo-ngoku-decrypt-ukugqitywa-ukugqitywa-ukugqitywa-ukugqitywa-ukugqitywa-ukugqitywa-ukugqitywa-ukugqitywa-ukugqitywa-ukugqitywa-ukugqitywa-ukugqitywa-ukugqitywa-ukugqitywa.

Yintoni engayenziyo

Oku kukhusela imixholo yemiyalezo yakho. Ayenzi yonke inxalenye ye Nostr quantum-proof, kwaye kufanelekile ukuchaneka malunga nomahluko.

• Imisayino isecp256k1. Nostr identities sign with Schnorr on the igophe elinye. Umchasi owayesele enekhompyutha yequantum esebenzayo unokukha a utyikityo kwaye uzenze umntu ngexesha lokwenyani. Oko ukutshintshiselana kwe-hybrid kuyeka kukufunda itrafikhi erekhodiweyo - imfihlo, hayi ukuqinisekiswa.
• Akukho umnqweno olutsha. Zonke iingcebiso ziquka elide: I-NIP-44 ihamba iingcebiso yayo kwi-akhawunti yakho nsec, kwaye i-post-quantum layer ibekwe kwi-ML-KEM key emzimbeni yakho nympq1… Yonke imiyalezo ibonelela encapsulation omtsha, ngoko umnxeba umnxeba omnye ayivula umnxeba olandelayo - kodwa umntu oya kufumaneka ekhoyo iingcebiso ze-long-term angakwazi ukuyifumana yonke into eyenza, akukho kuphela into ezilandelayo. Iingxelo ze-Expiring ukunciphisa, yaye ngoko le nkqubo yenzelwe ukuchithwa-ngoku-ukunciphisa-ngoku kunokuba kwi-key eyenziwa.
• Imethadatha ayitshintshanga. Ugqithiso lusabona ukuba umsitho bekubhekiswa kuwo isitshixo, kwaye ngokurhabaxa xa. Oko kusingathwa ngu ukusongwa kwesipho kunye nezitshixo zexesha elinye, hayi nge oku.
• I-Bluetooth mesh ayikho. Umzekelo wahlanganiswa I-Mesh Ukuhambisa ngaphakathi noise XX isitimela, leyo, encryption, ngokuzenzekelayo kodwa i-classic key exchange - ngoko ke ayidlala i-post-quantum layer, nangona phakathi kumasebenzisi ezimbini Nymchat. I-badge ibonisa oku: umyalezo ebonakalayo kwi-mesh ayikwazanga i-quantum-resistant. Ukongezelela apho kufuneka ukuguqulwa i-handshake yayo, leyo abaqhelekileyo kufuneka ukwenza ngexesha elifanayo, ngaphandle kwe-relay ukuchitha kunye nokufumana ngu-Bitchat.
• Ikhowudi yakho yokuguqula yinto yesibini ukugcina. Zifumaneka nge nympq1 kwaye uya kufumana Iingcebiso zeNym yakho, kwi-panel efanayo ne-Your nsec — ukuyifaka nym yakho, ke “Ukwazi ukuyifaka nym yakho ”. nsec i-post-quantum key yakho ayikwazi ukuvelisa kwakhona - ngoko ke yinto efanelekileyo - ngoko ke, ukuba akukho isixhobo esithathwe le code kwaye awunayo isampuli yayo, into efakweyo ayikwazi ukuvelisa kwakhona. Akukho ukuvelisa kwakhona kwaye akukho umntu ukhangela. nsec.
• Ayinakukhusela into eyenziwa lelinye icala. Umamkeli usenokwenza umfanekiso weskrini, khuphela okanye ugcine umyalezo.

Esi sisikhundla esifanayo Umqondiso uthatha kunye ne-post-quantum yayo yokuphucula: lungisa utshintshiselwano oluphambili ngoku, kuba leyo yinxalenye umhlaseli angenza kwi retroactively, kwaye baphathe imisayino njenge yahlula ingxaki xa imigangatho ifikelela phezulu.

Ukujonga umsebenzi

Ukusetyenziswa kwe-ML-KEM iboniswa kumazwe test vectors NIST zibonakalisa Kuba FIPS 203I-web app kunye ne-mobile app ziquka kwi-set ye-test vectors ezahlukileyo, nto leyo ibonelela ukuba i-message eyenziwe ngalinye kunokuthunyelwa ngalinye.

Zonke iiyure I-Open Source phantsi kwe-AGPL-3.0, kunye ne-builds ye-web app zibonakalayo – bheka Ukuqinisekisa isakhiwo.

Ukuphakamisa ngaphezulu: I-Post-Quantum Key Agreement kwi-Nymchat - i-whitepaper technical on how the ML-KEM key is distributed without a directory, the exact construction that combines the two key exchanges, and the designs that were rejected.