GnuPG: Yadda Ake Shiga Sirrin Fayiloli

A lokutan da suke aiki tare da laulayi da yawa a cikin software da kayan aiki inda za'a iya amfani da waɗannan matsalolin don samun damar nesa da wasu na'urori har ma da samun damar nesa ko ta nesa akan na'urar wanda aka cutar, yana da mahimmanci a aiwatar da duk abubuwan da ake buƙata hanyoyin tsaro da ladabi cewa mun sani ko kuma muna da damar kiyaye bayanan mu lafiya. Kuma idan kuna aiki tare da bayanai masu mahimmanci ko kuna da kamfani wanda kwastomominsa suke ba ku bayani, tare da ƙarin dalili.

Mun riga mun maimaita ta aiki da aiki cewa dole ne ku ci gaba da sabunta tsarin, ku guji kasancewa a kan layi idan zai yiwu, yakamata a adana bayanai mafi mahimmanci a cikin na'urar ajiya na cikin gida, don kaucewa cewa bayanan koyaushe akan na'urar suke zai iya zama mai rauni, kuma tabbas koyaushe yana yin madadin yau da kullun. Bayan haka, Ina ba ku shawarar ku ɓoye abubuwan fayilolinku ko sanya cikakken ɓoye-ɓoye na ɓangarorinku yadda baza a sami damar samun bayanai ba tare da kalmar sirri don share shi, koda kuwa kuna da damar zuwa inji ...

Menene boye-boye?

A shafukan yanar gizo da koyawa da yawa zaka sami kalmar ɓoye ɓataccen bayani don komawa zuwa ɓoyewa da yanke bayanan kwamfutar. Amma, idan ba ku sani ba, zan gaya muku, waɗannan sharuɗɗan suna da wasu rikice-rikice, kodayake da alama suna da karɓa sosai kuma suna yaɗuwa saboda yawan su, har ma a tsakanin ƙwararrun masanan. Rikicin ya fito ne daga kimiyyar sirri ko kuma ilimin ɓoyewa, kuma musamman daga kalmar Ingilishi "encrypt" wanda ke zuwa daga ilimin neologism kai tsaye da aka ɗauka daga Girkanci krypto, kuma wanda aka fassara kai tsaye zuwa Mutanen Espanya a matsayin ɓoyewa.

A gefe guda, a cikin Mutanen Espanya da alama kuna cewa "saka a cikin ɓoyayyen abu" wani abu "ɗauki wani abu daga cikin crypt". Koyaya, idan muka binciki Girkanci inda duk wannan ya fito, wanda shine "krypto" na nufin ɓoyewa. Koyaya, zaku iya amfani da kalmar da kuka fi so sosai ... a zahiri RAE ta ƙare da karɓar ta azaman daidai yake da ɓoye ɓoye. Ni kaina, na fi son kar in mai da hankali sosai ga waɗannan gyare-gyaren kuma na fi so in yi amfani da duka biyun daidai kuma in bar “ilimin kimiyya ko fasahar ɓoyewa” zuwa yanayin tsinkaye a matsayin lokaci mai faɗi.

Kammalawa, lokacin da muke magana akan boye-boye ko boye bayanai ko sakonni muna magana ne kan hanyar canza bayanai don kare ta wata hanya. Mafi sananne shine amfani da wasu nau'ikan canza dabi'u ko kuma algorithm ta yadda bayanai masu mahimmanci zasu canza zuwa haruffa marasa ma'ana, lambobi da alamu. Duk da yake tsarin yanke hukunci ko yanke hukunci hanya ce ta baya, wanda wannan bayanin na rashin hankali ya rikide ya zama wani abu da mashin ko mutum zai iya fahimta.

A kadan tarihi

Wannan fasaha ta wahalar da wasu kamfanoni ta hanyar sauya bayanai ba wani sabon abu bane, An yi shi tsawon shekaru dubu, musamman sama da shekaru 2500 da suka gabata. Daga Masarawa waɗanda suke amfani da hieroglyphs har zuwa zamanin Rome tare da lambar Kaisar, wanda ake kira saboda Julius Caesar (100 BC - 44 BC) yayi amfani da shi don ɓoye saƙonnin da ya aika zuwa ga sojojinsa don idan waɗannan saƙonnin suka faɗa hannun abokan gaba, ba za su iya fahimtar su ba kuma ba su sami fa'ida ta soja daga gare su ba.

A wasu lokutan zamani ma muna da misalin injin enzima nazi, wanda yayi amfani da jerin silinda don sanyawa ko ɓoyayyun bayanan da kwamandojin na Jamus suka ba sojojin kuma don haka hana makiya sanin ƙungiyoyin da sojojin Hitler za su yi. A hakikanin gaskiya, wadannan sakonnin da aka rufesu ne suka kara rura wutar lissafi a Amurka da Ingila, kasancewar an kirkiri na’urar sarrafa kwamfuta ta farko don kokarin gano wadannan sakonnin masu rikitarwa.

Kamar yadda kuka sani, akwai da yawa nau'ikan boye-boye, kamar su daidaitaccen yanayi da rashin daidaito, kuma zaku ga yadda GnuGP ko GPG zasu iya aiki a duka hanyoyin biyu:

• Symmetric boye-boye- Lokacin da ake amfani da maɓalli ɗaya don ɓoyewa da kuma ɓoye saƙonni, fayiloli, da sauransu. A cikin wannan nau'in ɓoyayyen za mu iya nemo da amfani da nau'ikan algorithms na ɓoyewa kamar AES, DES, 3DES, da sauransu.
• Asymmetric boye-boye: a wannan yanayin ana amfani da mabudai biyu, daya na jama'a daya kuma mai zaman kansa. Ana amfani da jama'a don ɓoyewa da kuma masu zaman kansu don ɓoyewa. A cikin wannan nau'in ɓoyayyen muna da nau'ikan algorithms na ɓoyewa, kamar RSA, ElGramal, da sauransu.

Maɓallin abin da ya cimma shine cewa ta hanyar wannan algorithm, bayanin yana canzawa kuma ba shi yiwuwa a samu ba tare da faɗin mabuɗin don gano shi ba ...

Bayan Fage: PGP

Da yawa suna rikita PGP da GPG kuma ba iri daya bane. PGP yana tsaye ne don Kyakkyawan Sirri Mai Kyau kuma wanda ke bayanin shirin da Phil Zimmermann ya kirkira don ɓoyewa, yanke hukunci da sanya hannu kan bayanai don kare shi. Ya bayyana a cikin 1991 kuma sanannen sanannen shiri ne wanda ya haɗu da hanyoyin ɓoye ɓoye na asymmetric don amintaccen bayani.

Amma PGP software ce mai ɗan matsala saboda lasisin wasu algorithms, basu buɗe kuma a cikin PGP Inc. sun damu ƙwarai game da haƙƙin mallaka wanda ya basu damar ɗaukar wata hanya. Zimmermann ya fahimci cewa mizani na kyauta ga PGP yana da mahimmanci saboda mahimmancin da PGP ya ɗauka a lokacin, don haka suka gabatar da mizanin da ake kira OpenPGP, wani abu da zai zama ƙwayar cutar GPG.

Menene GPG?

GnuPG ko GPG (GNU Sirrin Tsaro) shine software wanda FSF (Free Software Foundation) suka kirkira don aiwatar da shirin daidaitawa na OpenPGP. Da shi zaka iya ɓoyewa da kuma share saƙonnin rubutu bayyanannu, fayiloli, da yin sa hannu na dijital don amintar da abun da muke canzawa ta imel ko wani sabis na hanyar sadarwa. Hakanan, GPG kyauta ne kuma kyauta a ƙarƙashin lasisin GPL.

Kuna iya aiki daga na'ura mai kwakwalwa ko tashar ta amfani da umarni ko kuma akwai wasu GUI waɗanda za a iya sanyawa ko shirye-shiryen da ke taimakawa aiki tare da GPG amma daga ɗan ɗan ƙarin abokantaka da ƙwarewa ga waɗanda ba sa son harsashi sosai kuma sun fi so yi shi daga yanayin tebur. Wasu daga cikin waɗannan shirye-shiryen tabbas zasu saba muku, tunda sun shahara sosai a cikin Linux distros, kamar yadda lamarin yake Seahorse.

GnuPG koyawa:

Kamar yadda nace ba shine kawai madadin da muke da shi ba a cikin distro ɗin mu don ɓoyewa da kuma sharewa, tunda akwai wasu hanyoyi da yawa da suka wuce GPG, kamar su OpenPGP kanta. A zahiri mun riga mun sadaukar da wasu taken ga wasu madadin kamar gagarin ciki don ɓoye kundayen adireshi da ɓangarori, cryptmount, ash, da sauransu. Hakanan, idan kun yanke shawarar amfani da GPG ta kowane ɗayan GUI da kuke da shi, ku ma kuna da damar yin hakan, amma a nan zan bayyana hanyar da za a hanzarta ɓoyewa da kuma ɓatar da fayiloli ta amfani da umarni daga tashar.

Ɓoye fayiloli tare da GPG:

Don ɓoye fayiloli tare da GPG daga na'ura mai kwakwalwa na GNU / Linux distro, abu na farko da yakamata kayi shine shigar GPG a cikin distro ɗin ku, don wannan zaku iya amfani da kowane kayan aikin sarrafa kunshin tunda ƙwarewar wannan kayan aikin ya samar dashi a duk wuraren ajiya. Misali, akan Debian da abubuwan banbanci zaku iya gwadawa tare da:

sudo apt-get install gnupg2

Da zarar an shigar za ku iya fara amfani da shi. Misali, yi tunanin cewa kana da fayil ɗin rubutu wanda kake son ɓoyewa. Za mu kira wannan fayil ɗin private.txt wanda zan shigar da rubutun a ciki LinuxAdictos.com kuma to ɓoye shi:

gpg -c privado.txt

Kuma yanzu Da tuni za mu sanya shi ɓoyayyen bayanan bayan shigar da kalmar wucewar kalmar wannan zai tambaye mu, ma'ana, maɓallin ɓoyewa (yana sake tambayar mu don tabbatarwa da ganin cewa bamuyi kuskure ba yayin buga shi, tunda idan kun sanya wani maɓallin kuma ba ku tuna shi ba ko kuma kun rikice, to ba za ku iya warware shi). ido! Yi hankali saboda ba za a kira ɓoyayyen fayil ɗin mai zaman kansa ba.txt, amma a maimakon haka sai a ƙara .gpg tsawo don bambance shi da ɗayan, don haka kar a rikice yayin aika fayil ɗin farko, tunda ba za a kiyaye shi ba ...

Rage fayiloli tare da GPG:

Yanzu, zaku iya share asalin idan kuna so kuma kawai ku bar fayil mai zaman kansa.txt.gpg wanda ya bayyana ɓoyayyiya kuma ba za ku iya fahimtar duk saƙon da muka haɗa a ciki ba, wanda ke tuna cewa sunan wannan rukunin yanar gizon ne. To idan muna so warware saƙon da kuma dawo da fayil ɗinmu mai sauƙin fahimta da fahimta, zai ishe mu tuna da kalmar sirri da muka sanya a gaban idan ta tambaye mu bayan aiwatar da wannan umarni:

gpg privado.txt.gpg

Kuma yanzu bayan shigar da kalmar sirri za mu sake samun fayil ɗin kamar yadda muke ɓoye shi. Af, kamar yadda kake gani a cikin sikirin da na yi, ana iya ganin cewa shirin GPG ya yi amfani da AES128 encryption algorithm ta tsohuwa, tunda ba mu ayyana wani madadin ba lokacin da muke ɓoye fayil ɗin. Amma idan kuna son gyara nau'in algorithm zaku iya ta hanyar zaɓi -Cypher-wani abu sannan nau'ikan algorithm din da kake so daga cikin wadanda GPG ke tallafawa (zaka iya ganin karin bayani a cikin mutum gpg). Kuma idan kuna son sanin algorithms masu goyan baya, zaku iya ganin su tare da:

gpg --version

Kuma da jerin algorithm da karin bayani game da tsarin GPG, da sauransu.

Kar ka manta barin ra'ayoyin ku, shakku da shawarwari ... Ina fatan wannan karatun zai zama mai matukar taimako a gare ku.