LibrePGP ndiyo yakagadziridzwa imwe nzira yeOpenPGP encryption standard
Mugadziri mukuru uye muchengeti weiyo encryption uye kusaina chishandiso Mugadziri mukuru uye muchengeti we, Werner Koch. akazivisa mazuva mashoma apfuura nhau dzeKugadzirwa kweiyo LibrePGP chirongwa, zvinova forogo yakanangana nekugadzira imwe yakagadziridzwa imwe tsanangudzo kune iyo OpenPGP standard.
Izvo zvinotaurwa kuti mukati mezvikonzero yekugadzirwa kweforogo iyi Zviri pachena kuti iri kupindura kupokana mukati meInternet Injiniya Task Force (IETF) pane ramangwana rekuvandudza kweiyo OpenPGP chiyero, sekuona kwaKoch iyo iri kuuya yekuvandudza kune iyo OpenPGP yakatarwa seisina mubvunzo kubva mukuenderana uye kuchengetedza maonero.
Maererano naKoch:
Panotangira kupatsanurwa kwebasa mukati meIETF uye kutanga kweLibrePGP ndeyekuti zvakarongwa zvigadziriso zveOpenPGP standard (RFC 4880) "zvinokanganisa kushandiswa kweOpenPGP software," akadaro. MuAdvertisement anonyora. Pasina kuenda mune chaiyo tekinoroji ruzivo, gakava rinodzokera kumubvunzo wekuti unogadzirisa sei ikozvino OpenPGP chiyero chenguva yemberi.
Uye IETF, panzvimbo yekuvandudza zvishoma nezvishoma iyo yakatarwa, yakaedza kudzoreredza mwero uye kuita shanduko huru kwairi iyo yakatyora kudyidzana, mukuwedzera kukuisa rutsigiro rweGCM symmetric encryption modhi, iyo yakaoma kuita nemazvo, tichiregeredza OCB (Offset codebook mode), iyo patents yakapera makore akati wandei apfuura.
Vagadziri veGnuPG, RNP (Thunderbird OpenPGP kuita) uye mapurojekiti eGpg4win aitsigira forogo kutya kuti shanduko dzakarongwa dzichakanganisa kushandiswa kuripo kweOpenPGP-based application, iyo vashandisi vanotarisira kuti iyo yakatarwa ichagadzikana mukufamba kwenguva. isina kugadzirira kutsigira shanduko dzinoputsa kuenderana.
Mukuwedzera kune izvi, the Vagadziri veLibrePGP vanobvunza vachiwedzera sarudzo mapakeji ane zvisingaite padding kudzivirira pakuongorora traffic. Sekureva kwavo, aya mapaketi ane asingaonekwe ekutanga kuzadza zvisina tsarukano anokonzeresa kutyisidzira kwekushandiswa kugadzira yakavanzika data kutapurirana nzira uye bypass data leak yekudzivirira masisitimu. Pakutanga, iyo pfungwa yekusanganisira padding yakarambwa sechinyorwa-chikamu chenyaya pane encryption-level nyaya.
Ukuwo, Ivo zvakare vanobvunza kushandiswa kweyakagadziridzwa ECDH encryption scheme, pachinzvimbo chekushandisa sarudzo yatotsanangurwa muRFC-6637 uye yakaitwa muPGP neGnuPG, pamwe nekubviswa kwezvimwe zvinoshanda, senge nzira yekare yekubvisa kiyi, "m" mureza wekumaka MIME data uye "t. ” mureza kuti uparadzanise mavara kubva kudhata rebhinari (mureza we “t” wakatsiviwa ne “u” mureza we UTF-8 encoded text).
Zvichipa izvi nezvimwe nyaya, zvaive zvikonzero zve kusikwa kweLibrePGP, iyo inonzi inobatanidza kuvandudzwa kunobatsira kwakagadzirwa mumakore achangopfuura kune ramangwana shanduro yeOpenPGP yakatarwa, asi kudzivisa shanduko dzinogona kukanganisa kuenderana. Semuenzaniso, zvichienzaniswa neyazvino RFC-4880 standard, LibrePGP yatora zvinotevera maficha:
- Tsigiro yeCamellia encryption algorithm (RFC-5581),
- ECC (Elliptic Curve Cryptography) Mawedzero eOpenPGP (RFC-6637).
- Inosungirwa tsigiro yeSHA2-256 hashes (SHA-1 uye MD5 yakarongedzerwa seisina kukurudzirwa, uye kugona kudhipfenyura data pasina kutariswa kwekuvimbika kunorongedzerwa sekuderedzwa zvachose).
- Kuwedzera size yezvigunwe kusvika ku256 bits.
- Inotsigira EdDSA dhijitari siginecha chirongwa uye BrainpoolP256r1, BrainpoolP384r1, BrainpoolP512r1, Ed25519, Curve25519, Ed488, uye X448 elliptic curve siginecha zvirongwa.
- Tsigiro yeiyo CRYSTALS-Kyber algorithm, iyo inopesana nesarudzo mumakomputa ehuwandu.
- Tsigiro yeOCB (Offset Codebook Mode) yakatendeseka encryption modes.
- Kuitwa kwechishanu vhezheni yedhijitari siginecha fomati ine metadata kudzivirira.
- Tsigiro yemapakeji akawedzerwa ane masaini edhijitari.
Chekupedzisira, zvakakodzera kutaura kuti OpenPGP vatsigiri Vakatoburitsa kushoropodzwa mushure mekushoropodzwa. Nekuda kweizvozvo, kana kuwirirana kusingawanikwe, kupatsanurana kunogona kukonzera kuwedzera kusawirirana muOpenPGP/LibrePGP kuita. Kugadzirisa dambudziko iri zvishoma, vagadziri veOpenPGP vakagadzirisa vhezheni yechishanu yefomati siginecha inoenderana neLibrePGP uye vakaenderera mberi nekushanda pashanduro yechitanhatu.
Kana uri kufarira kuziva zvakawanda nezvazvo, unogona kutarisa ruzivo Mune inotevera chinongedzo.