Michal Marek Kunyanya mumamiriro ezvinhu zviitiko zvemwedzi yapfuura inhau dzinonakidza kwazvo kuti kutaurirana kwese kuburikidza neanozivikanwa application WhatsApp ikozvino yakavharidzirwa zvizere uchishandisa nzira yekupedzisira-yekupedzisira. Mabhirioni anoshanda vashandisi vesevhisi vanogona ikozvino kuve nehurukuro yakachengeteka, zvese paIOS uye Android. Mameseji mameseji, mifananidzo yakatumirwa uye manzwi emafoni akavharirwa.
Mubvunzo ndewokuti bulletproof ndiyo encryption sei. WhatsApp inoenderera mberi nekubata mameseji ese nechepakati uye zvakare inoronga kuchinjana kwemakiyi ekunyorera. Saka kana mubiki kana kunyange hurumende yaida kusvika kune mameseji, kuwana mameseji evashandisi hazvingaite. Muchirevo, zvingava zvakakwana kuti vawane kambani kudivi ravo kana kuirwisa zvakananga neimwe nzira.
Encryption yeavhareji mushandisi mune chero mamiriro ezvinhu zvinoreva kuwedzera kukuru kwekuchengetedza kwekutaurirana kwavo uye kusvetuka kukuru kumberi kwekushandisa. Tekinoroji yekambani ine mukurumbira Open Whisper inoshandiswa pakunyorera, iyo WhatsApp yanga ichiyedza encryption kubva muna Mbudzi gore rapfuura. Iyo tekinoroji yakavakirwa pane yakavhurika sosi kodhi (yakavhurika sosi).
Izvo hazvina kujeka kwandiri kuti nei iyo yepakati encryption, nei WhatsApp isingatenderi vese vatori vechikamu vehurukuro yekutsinhana makiyi?
Mumutsara mumwe - kushandiswa kweBFU. Nekuchinjana kwakasununguka kwakasununguka kwekiyi, zvingave zvakanaka, asi zvisingagoneki.
Zvakanaka, hongu ndaireva, pasi pehood. Mushandisi akaremara haafanire kuziva nezvazvo zvachose.
Ini handisi kuona chero kutaurwa kwepakati encryption chero kupi, zvakapesana.
Yaimbove tsika yekuti munyori wechinyorwa atumire chirevo chakavakirwa pane iyo post edit uye anyore muchidimbu muhurukuro oti "specified".
Zvisinei, munyori wechinyorwa aifanira kuchinja chimwe chinhu.
saka pakadai ndine hurombo, ndaita mhute yemhumhi. Iko kukanganisa kwaive pakati pekombuta yangu nemadziro.
threema
Handizivi kuti munyori anorevei nekubatanidza kiyi. Sekuziva kwangu, uye sezvakataurwa muchinyorwa, WhatsApp ichangobva kushandisa Signal protocol, iyo yakavakirwa pachokwadi chekuti hurukuro yega yega inoreva kuchinjana kutsva kwemakiyi kuburikidza neDiffie-Hellmann uye chizvarwa cheAES itsva neMAC. Zvese izvi zvinoitika kudivi remutengi uye hapana munhu munzira anogona kuita chero chinhu nezvazvo, kunyangwe WhatsApp, iyo inonyanya kufambisa mameseji akavharidzirwa pakati pevashandisi uye anogona (uye pamwe anoita) kuchengeta nekuongorora metadata. Kana kuti pane chandakapotsa?
Mhoro, ini handisi nyanzvi yekunyorera uye ini ndanga ndisingadi kupinda muhunyanzvi hwandisingatombonyatsonzwisisa. Zvakadaro, kana ndikanzwisisa nemazvo, WhatsApp inoshanda nemakiyi eruzhinji anoshandiswa encrypt meseji. Nekudaro, kana munhu anorwisa kuburikidza neWhatsApp akakwanisa kutsveta kiyi yake yekunyorera kune mumwe munhu, anogona zvakare kudhipfenyura meseji.
Zvikasadaro, wakarurama uye ndinoreurura pasina kurwadziswa, iwe unogona kunge uine ruoko rwepamusoro kana zvasvika pakuvharidzira uye ini ndichafara kana iwe uchindidzidzisa.
Mhoroi, inyaya ine hudzamu, asi ini ndichaedza kurerutsa - chinhu chega chinochengetwa paWhatsApp server makiyi ako mashoma eruzhinji, anoshandiswa pakugadzira musangano wekutaura pakati pako nemumwe munhu. Zvingagoneka pasina ivo, asi aya anonzi pre-kiyi anobvumira, pakati pezvimwe zvinhu, kugadzira iyo encrypted chikamu kunyangwe rimwe bato risiri pamhepo (inove yakakosha yeSignal protocol, haigone kuita chimwe chinhu. , sekuziva kwedu). Iyo Signal protocol inosanganisirawo nzira yekusimbisa yakavimbika yerimwe bato, kudzivirira mumwe munhu kuedzesera iwe. Symmetric cryptography inozoshandiswa encrypt meseji pachayo, kureva kuti meseji yakavharidzirwa uye yakadhindwa nekiyi imwechete. Iyi kiyi inogadzirwa kune yega yega meseji uye WhatsApp (iyo kambani) haina mukana wairi kuwana, inogadzirwa pamidziyo yekupedzisira (saka End to End cryptography), iyo yakatanga kuita iyo inonzi handshake ichishandisa Diffie-Hellman protocol ( kunyanya, ECDH). Nekuda kwekubatana kwemaoko uku, mapato ese ari maviri anowana chinonzi chakavanzika chakagovaniswa, i.e. imwe nhamba hombe isina kurongeka iyo mapato ese anoziva, asi hapana mumwe munhu anogona kuteerera. Zvichienderana nechakavanzika ichi chakagovaniswa, mapato ese ari maviri anogona kugadzira matsva uye matsva encryption makiyi akasiyana kune yega meseji. Iko kupinza kwekugadzira kiyi yakadaro haisi kungogovana "chakavanzika chakagovaniswa", asiwo meseji yapfuura. Kutenda kune izvi uye zvimwe zvivakwa zveSignal protocol, izvo zvinodaidzwa kuvanzika kwepamberi uye kuvanzika kweramangwana zvinovimbiswa, i.e. kunyangwe kana mumwe munhu akawana meseji yako yakavharidzirwa uye neimwe nzira achikwanisa kuipwanya mune ramangwana uye kuwana mukana weiyo encryption kiyi, haakwanise. decrypt imwe meseji yawakatumira.
Ndinokumbira ruregerero kana ndakanyora izvi zvakadzama uye ndikadzokorora chimwe chinhu chaunotoziva uye ndinovimba ndakapindura kuvhiringidzika. Ini handisi nyanzvi yecryptography, asi zvakangoitika ndanga ndichibata nemusoro uyu zvakadzama munguva pfupi yapfuura :) Zvakadaro, kana mumwe munhu akawana zvisizvo mune zvandakanyora, ndingafara kana mukandiruramisa.
Ndinokutendai zvikuru neruzivo, makatsanangura nenzira yakajeka. Nguva inotevera ini ndichave ndakashongedzerwa zvirinani neruzivo;)
Izvi zvinoreva here kuti WhatsApp haina nhoroondo yepakati izvozvi?
Iyo ine nhoroondo yepakati, asi meseji yega yega yakavharidzirwa nekiyi yakasarudzika ine mugamuchiri wemeseji chete.