Isisekelo solwazi / Ukukhuluma nabantu

Ukubethela okungazweli kwe-quantum

Imilayezo eyimfihlo nezingxoxo zeqembu phakathi kwabasebenzisi be-Nymchat zingabethelwa kanjalo ukuthi ukuwaqopha namuhla akumthengi lutho umhlaseli, noma sekufike amakhompyutha e-quantum.

Leli khasi lihunyushwe ngomshini ukuze kube lula. IsiNgisi sangempela inguqulo esebenzayo.

Inkinga iyayixazulula

Ukubethela okujwayelekile kwe-Nostr - I-NIP-44, okuyikho imiyalezo yangasese futhi izingxoxo zeqembu yakhelwe phezu kwayo - inamahhafu amabili. Ingxenye leyo empeleni ihlambalaza umbhalo (ChaCha20, HMAC-SHA256, HKDF) ibambene kahle ne-quantum ikhompuyutha. Ingxenye evumelana ngokhiye ayikwenzi lokho.

Leso sivumelwano esibalulekile yi-elliptic-curve Diffie-Hellman ku-secp256k1, izibalo ezifanayo ezisetshenziswa yi-Bitcoin. I-algorithm ye-Shor iyixazulula ngokuqondile. Noma ubani oyisebenzisayo ephikisana nokhiye osesidlangalaleni uthola i- ukhiye oyimfihlo, futhi ngayo yonke imfihlo eyabelwe lowo khiye owake wakhiqiza.

Isebenza kanjani

I-Nymchat ivela ifomati ye-NIP-44 ngokugcwele. I-key agreement eyenziwa kakhulu akuyona; enye yesibili, eyahlukile ifakwe ngokugcwele. Ngakho-ke kukhona amahhovisi ezimbili eziyinhloko ngamahhovisi kunezinye:

• izinga secp256k1 ECDH, njengasekuqaleni;
• I-ML-KEM-768, i-algorithm ye-post-quantum i-NIST ifaneke njenge FIPS 203. Ukuvikeleka kwayo kuncike ezinkingeni ze-lattice, i-algorithm ye-Shor engazithinti.

Wonke Amalungelo ingxubevange, ngaphandle kokuhlanganiswaI-message is encrypted nge-NIP-44 ngokuvamile, futhi okuzenzakalelayo okuzenzakalelayo okuzenzakalelayo iyahlekile okwesibili ngaphakathi kwe-post-quantum layer — ChaCha20-Poly1305, okwakhiwa kusuka ku-ML-KEM encrypted. I-sender's key, i-receiver's key, i-encapsulation encryption text kanye ne-ML-KEM key ye-receiver zihlanganiswe ku-derivation okuzenzakalelayo njenge-context, ngakho-ke i-layer ayikwazi ukufinyelela kusuka ku-one exchange futhi ukudlala ku-other.

I-combiner efana ne-X-Wing noma i-Signal's PQXDH ivimbela amabhodlela amabili ku-keyword elilodwa. I-Nymchat ayikho, futhi umzekelo kuyinto ephakeme kunoma ku-cryptographic: Ukuxuba unemibuzo ye-ECDH yokushisa, futhi ingcindezi ye-browser noma i-remote signer akukwazi ukunikezela ukuthi ngokushesha - ivumela umbhalo we-ciphering ephakeme, okuyinto indawo ephelele yokuthandwa kwe-keyword lapho i-app ayikwazi ukufinyelela. I-Layering ivimbela i-NIP-44 ephakeme futhi ikhiqizwa nge-keyword ye-identity key, i-signer ehlanganisiwe, ukuze ama-log

I-property ebalulekile iyona efanayo: umphumela we- Okungenani okungenani okungenani okungenani kakhuluUkubuyekezwa kwebhizinisi kubalulekile ukufinyelela izindandatho ezimbini. Uma i-cryptography ye-lattice ibonakalisa kakhulu kuncike, ukuhlangabezana ne-ML-KEM kuncike izindandatho ze-external futhi ivumela i-NIP-44 yamanje ngaphansi. Uma i-secp256k1 ivela ku-computer ye-quantum, isindandatho se-internal ivula kodwa isindandatho se-external akuyona. Umngcipheki kufanele uxhumane izindandatho ezimbini.

Umlayezo ngamunye uthola ukushintshaniswa okusha kwe-post-quantum, ngakho ukubuyisela ukhiye womlayezo owodwa kwembula lutho ngabanye.

I-post-quantum half has a key of its own, futhi lapho lokhu key iyatholakala kuyinto elihlanganisa ukuthi yonke into iyahambisana noma yini. hhayi Ukusebenza kusuka ku-Your nsecI-computer ye-quantum eyenza i-half ye-classic nsec ukusuka ku-key yakho yebhizinisi, futhi konke okuvela ku- nsec Ngokuvumelana nesisombululo esithunyelwe kuqala - izindlu ezimbili ezivulwe ngalinye. Ngakho-ke i-Nymchat ikhiqiza inkinobho elilodwa Post-Quantum Ikhodi ngalinye-akhawunti, okokuqala, kusuka ku-byte ye-random ukuthi akukho-value ye-public ibonisa. It is read as nympq1… Ukulandelana nathi nsec ku-Nym yakho, ifakwe futhi ifakwe ngokufanayo. It is not a password and not a second login: it is key material you can save, ngokufanayo ne nsec.

Akukho okungavula

Lokhu akusona isilungiselelo. Ukubethela kwe-Post-quantum yindlela iNymchat ekhuluma ngayo neNymchat, i ngendlela efanayo ukubethela okuvamile ukuthi kukhuluma kanjani nakho konke okunye. Isebenza ngokuzenzakalelayo ku yonke imilayezo eyimfihlo nengxoxo yeqembu nomunye umsebenzisi we-Nymchat.

I-Settings › Privacy & Security ibonisa ukuba ifakwe futhi iningi kwezibuyekezo zakho ikhasimende, kodwa kuphela njengoba ulwazi - akukho isibuyekezo.

Kuyinto kusebenza kungekho indlela ungena ku-login. A browser-extension (NIP-07) noma remote-signer-login (NIP-46) akuyona akuyona ikhoyili yakho yokuzonwabisa kwi-app, okuyinto yinto ephelele yokusebenzisa enye - futhi akufanele. Amahlathi ezimbili we-encryption zihlanganisa ezahlukile: umbhali wakho uyenza ingxenye owenziwe njalo, futhi i-app uyenza ingxenye ye-post-quantum nge-code yakho yokukhula, okuyinto ithatha ngqo. I-Extension ne-Remote-signer-logins zihlanganisa ngokuvamile ngezinye izindlela. I-status line ku-Settings ibonisa ukuthi kungenzeka kwami.

Ngaphandle kwalokho, i-akhawunti ye-akhawunti ye-akhawunti ye-akhawunti ye-akhawunti ye-akhawunti ye-akhawunti ye-akhawunti ye-akhawunti ye-akhawunti ye-akhawunti. nsec, ngokufanayo nangaphezulu, futhi ibhekwa ngathi ngexesha lokuphendula. Yini kufuneka nympq1… Ukubuyekezwa ikhowudi kuyinto material quantum-resistant ebhaliwe kusukela nyaka: izitimela ezintsha, kanye nezinhlelo zihlanganisa kanye ne-archive ezokuhamba nge-imeyili.

Ngakho-ke idivayisi kufuneka ukugcina le ikhodi ngaphambi kokufaka kwabo, futhi ukongeza idivayisi manje kunezinyathelo eyengeziwe. nympq1… Ikhodi kusuka kumadivayisi okuyinto eyenza. Kuyinto izikhathi ngalinye, akuyona ngalinye ku-login. Lezi zinyathelo akukwazi ukunciphisa: Ikhodi okuyinto ingatholakala kumadivayisi entsha ngokuvamile kufanele ukuthatha khona ngaphakathi isitimela esivamile, futhi lokhu isitimela kuyinto ngokufanele ukuthi umngani le-function esisekelwe ukucubungula isithombe. Isinyathelo kuyinto isizathu sokhuseleko kuyinto enhle.

I-app ikhiqiza i nympq1… ikhodi yakho, ngakho-ke akukho ukhethe futhi akukho ukufundisa. Ukuze ubone: Tast your nym ukuze ufake View or Edit Imininingwane ye-NymNgemuva kwalokho Ukubonisa ikhoyili yekhwalithi yekhwalithi yekhwalithi yekhwalithi. It itholakala ngokushesha phantsi yakho nsec, nge elifanayo ukubonisa kanye nokuphathelisa izibopho. Ufuna akuyona nje kuze kube ngosuku ungayifaka isixhobo yesibili.

I-unlinked device ayidlulile ekubeni. It ivela konke okubhaliwe ngaphansi kwe-encryption enhle futhi ivela ngokuvamile, futhi uma uqhagamshelane, iyahambe futhi ivula ama-messages e-quantum-resistant okuyinto awukwazi ukufunda ngaphambi. Akuningi akuyona ngokudluliselwa ngokushesha.

Uyithola nobani

Zonke ama-client ye-Nymchat ibhalisele i-akhawunti encane esifundisiwe, esijulile, futhi ihlanganisa i-post-quantum key yayo lapho i-akhawunti yayo. Ukugcina i-akhawunti ephelele kumadoda yenza i-app usebenzisa i-exchange enhle. Akukho ukulungiselela ukuxhumana: noma i-key iyatholakala noma ayikho, futhi ngoba i-akhawunti ibhaliswe ngu-author yayo, i-keys ye-substitute kufanele ibhaliswe kunokuba kuphela ibhaliswe.

Yini umngciwane owaziwa i-relay Ukulungele I-do kuyinto ukulondoloza ukubhuka, ngakho-ke umphumela akuyona ikhoyili futhi ivukele ngokushesha ku-encrypting. Lokhu kubaluleke ukubhuka ngokuvamile. Kubaluleke ukhuseleko kwe-post-quantum yama-messages; akukwazi ukwenza eyodwa engabonakaliwe, futhi akukwazi ukuthola ikhoyili engaphandle kwelinye. I-Clients ibhalisele ama-relays eziningana, ngakho-ke ukulondoloza kungenzeka ukulawula bonke kubo.

Izikhangibavakashi zithunyelwe ngeviki futhi zithunyelwe ngosuku zonke lapho usebenzisa i-app. Uma usithunyelwe ngaphezulu kwalo, izikhangibavakashi akho zithunyelwe futhi usithunyelwe njenge-Nostr client ngokuvamile ngexesha elide: Izikhangibavakashi zithunyelwe kwelinye izikhangibavakashi zithunyelwe ngokuvamile kunokuba ngokuvumelana ne-quantum-resistant way. Zithunyelwe, futhi ungase ucwanele - futhi akukho okufakiwe ngaphambi kokuthunyelwe. Ukukhishwa kwe-app ibonisa izikhangibavakashi yakho, futhi ukucubungula okuphumelela ngokuvumelana ngokuvumelana.

Bonke abanye baqhubeka nokusebenza njengakuqala. Bitchat abasebenzisi kanye nomunye amakhasimende we-Nostr akhiqizwa standard I-NIP-17, ongahlukile. Akukho okuhlukanisa lapho ungazithumela umuntu ngaphandle kwe-Nymchat.

Umlayezo we-post-quantum esikhundleni ejwayelekile kunokuba ithunyelwe eduze kwayo. Ukuthumela kokubili ngeke kube nanzuzo: umhlaseli angamane ephule ikhophi ebuthakathaka.

Amakhophi aqondiswe kuwo wena ithole futhi — leyo efundwa ngamanye amadivayisi akho, i faka kungobo yomlando ngemuva kwayo, nezilungiselelo zakho ezivumelanisiwe, ezihamba ngendlela efanayo futhi ziphathe eyakho uhlu lwezingxoxo, okhiye beqembu lakho kanye nomlando wakho wemilayezo. Ukushiya noma iyiphi yalezo endala ukubethela ngabe kubenze into ebuthaka kakhulu oyigcinayo: efundeka yinoma ngubani owephulayo i-cryptography yanamuhla, kungakhathaliseki ukuthi imilayezo ngokwayo ivalwe ngokucophelela kangakanani.

Ihlala ifundeka yi-Bitchat

I-Bitchat ayikwazi ukufunda ifomethi yomlayezo kaNymchat, ngakho ngokomlando u-Nymchat wathumela ikhophi yesibili yonke imilayezo ngefomethi ye-Bitchat kunoma ubani okungenzeka ukuthi uyayisebenzisa - okuyinto, kothile wawungakaze uzwe, kwakusho wonke umuntu.

Isimemezelo esingenhla senza lokho kuqagela kungenasidingo. Uma othile eshicilele eyodwa, kunjalo isebenzisa i-Nymchat, ngakho ikhophi ye-Bitchat iyehliswa futhi kuthunyelwa umlayezo onamandla kuphela. Uma bona abakashintshi, akukho okushintshile: basawathola womabili amafomethi, njengakuqala, ngakho akukho lutho okuthumelayo kungase kungafundeki ngoba uhlelo lokusebenza luqagele okungalungile ngokuthi iliphi iklayenti umuntu alisebenzisayo.

Njengokubethela ngokwakho, lokhu kuyazenzakalela futhi akunakulungiselelwa.

Ezingxoxweni zeqembu

Imilayezo yeqembu isivele ibethelwe ngokwehlukana kulungu ngalinye, ngakho iqembu lingakwazi ukuhlanganisa zombili lezi zinhlobo ngokukhululeka - amalungu amaklayenti awo ayisekelayo athola ukubethela okuqinile, abanye bathola ejwayelekile, futhi iqembu lisebenza ngokujwayelekile noma ngayiphi indlela.

Ngenxa yalokho, umlayezo weqembu umakwa kuphela ukuthi awuzweli lapho zonke ilungu wayithola kanjalo. Uma ngisho nekhophi eyodwa isebenzisa ukushintshana okujwayelekile, leyo khophi iphethe okufanayo umyalezo, ngakho-ke umlayezo uwonke uvikelekile kuphela njengekhophi yawo ebuthakathaka. Uhlelo lokusebenza luthi "i-quantum-resistant kumalungu angu-8 kwangu-10" kunokuhlanganisa.

Izingxoxo zeqembu nazo zigcina ezazo ukuzungezisa okhiye besikhathi esisodwa, ezifihla ukuthi ubani oseqenjini kunoma ubani obuka i-relay. Leso sivikelo asithinteki futhi sisebenza njengoba senza.

Ukufunda ibheji

Konke umbhalo wekhompyutha futhi umbhalo wekhompyutha inikeza umbhalo omncane isihlangu ekupheleni i-padlock. Ukubhathanisa noma iyiphi i-mark ivumela ukuthi ibonisa.

I-shelter iyatholakala njalo ku-imeyili esifushane, futhi ivumela ngokuvamile lapho impendulo iyona-no. Isithombe esizayo kuyinto emibi - kungase ngama- “not quantum-resistant”, “isakhiwo eside kakhulu”, noma “i-indicator iyahlekile” - futhi i-indicator yobuchwepheshe okuyinto engatholakali kusuka ku-broken one akuyona yini.

Kuyinto emangalisayo emangalisayo emangalisayo emangalisayo emangalisayo emangalisayo emangalisayo emangalisayo emangalisayo emangalisayo emangalisayo

Izindaba ezidlulileyo zihlanganisa i-cut-through shield ngempumelelo. Konke okuyithunyelwe ngaphambi kokubili kubangelwa ku-quantum-resistant wasekelwe nge-exchange yekhwalithi, futhi le-cryptertext iyatholakala ku-relayers - akukwazi ukucindezeleka ngemva kokubili. Lokhu ngokuvamile ukucindezeleka kwe-crop-now-decrypt-later i-upgrade isekelwe ngokushesha, ngakho-ke i-badge ebonakalayo kuyinto impendulo enhle kunokuba ingcindezi.

Lokho elingakwenzi

Lokhu kuvikela okuqukethwe yemiyalezo yakho. Ayenzi yonke ingxenye Nostr quantum-proof, futhi kufanelekile ukunemba mayelana nomehluko.

• Amasiginesha asesecp256k1. Uphawu lobunikazi be-Nostr no-Schnorr ku ijika elifanayo. Isitha esasivele sinekhompyutha ye-quantum esebenzayo singakha a sayina futhi uzenze umuntu ngesikhathi sangempela. Okuyekwa yi-hybrid exchange ukufunda ithrafikhi erekhodiwe - ubumfihlo, hhayi ukufakazela ubuqiniso.
• Akukho inkinobho elandelayo. Zonke izikhwama zihlanganisa: I-NIP-44 ikhiqiza izikhwama zayo kusuka ku-akhawunti yakho nsec, futhi i-post-quantum layer ivimbele ku-ML-KEM key emzimbeni yakho nympq1… Yonke umbhalo inatholakala encapsulation entsha, ngakho umbhalo wokuqala akuyona umbhalo elilandelayo - kodwa umbhali owaqala ukugcina izikhwama elilandelayo angakwazi ukufunda konke okwenziwe, akuyona kuphela okufakiwe ngemva. Ukubuyekezwa Izindaba ukunciphisa, futhi ngoko ke le khasi lihlanganisa ukuchithwa-ngoku-ukunciphisa-ngokuya kunokuba ku-key eyenziwa.
• Imethadatha ayishintshiwe. I-relay isabona ukuthi umcimbi bekubhekiswe kuwo ukhiye, futhi cishe nini. Lokho kusingathwa ukugoqa isipho kanye nezikhiye zesikhathi esisodwa, hhayi nge lokhu.
• I-Bluetooth mesh ayikho. Umhlahlandlela wahlala I-Mesh isitimela ngaphakathi noise XX isitimela, okuyinto enhle, encryption eside kodwa a classic key exchange - ngakho-ke akuyona post-quantum layer, ngisho phakathi ezimbili abasebenzisi Nymchat. I-badge ibonisa lokhu: umbhalo enikezwa phezu neth ayikaze-quantum-resistant. Ukongezelela ku-ke kuncike ukuguqulwa handshake ngokuvamile, okuyinto ababili abalandeli kufanele ukwenza ngexesha elifanayo, ngaphandle kwe-relay ukuchithwa futhi ngenkathi akuyona oluthandayo ngu-Bitchat.
• Ikhowudi yakho yokukhipha kuyinto yesibili ukugcina. Kuhlolwe nge nympq1 futhi uzothola ku Imibuzo ye-Your Nym, e-panel efanayo ne-Your nsec — chofoza i-nym yakho, bese “I-reveal this nym's private key kanye ne-recovery code”. nsec I-post-quantum key yakho akuyona ngokulinganayo - lokhu kungcono ukuthi kusebenza - ngakho-ke akukho isixhobo esithathwe le ikhodi futhi unayo akhawunti ye-copy yayo, okuhlobene yayo akuyona akuyona akuyona. Akukho reset futhi akuyona akuyona. Hlola lapho uxhumane isikhwama yakho nsec.
• Alikwazi ukuvikela okwenziwa olunye uhlangothi. Umamukeli usengakwazi ukuthatha isithombe-skrini, kopisha noma ugcine umlayezo.

Lesi yisimo esifanayo Isiginali esithathayo ngokuthuthukiswa kwayo kwe-post-quantum: lungisa ukushintshanisa okubalulekile manje, ngoba leyo yingxenye umhlaseli angakwazi ukuthatha isinyathelo emuva, futhi aphathe amasignesha njenge hlukanisa inkinga lapho amazinga afinyelela phezulu.

Ukuhlola umsebenzi

Ukukhiqizwa kwe-ML-KEM kusetshenziselwa ku-official Ukubuyekezwa kwe-NIST Ukuze FIPS 203I-web app kanye ne-mobile app ziquka ku-shared set ye-test vectors, okuyinto ivimbele ukuthi umbhalo owenziwe ngalinye kungenziwa ngalinye.

Wonke amalungu Imininingwane ngaphansi kwe-AGPL-3.0, futhi izakhiwo ze-web app zihlanganisa — bheka ukuqinisekisa isakhiwo.

Ngena ngemvume: I-Post-Quantum Key Agreement ku-Nymchat - i-white paper technical on how the ML-KEM key is distributed without a directory, the exact construction that combines the two key exchanges, and the designs that were rejected.