Rustls, ɗakin karatu na TLS ya ƙware da OpenSSL

Joseph Birr Pixton, mai haɓaka ɗakin karatu na TLS Rustls yayi jerin gwaje-gwaje akan ci gaban sa y lura da cewa aikin na karshen ya dara na OpenSSL akan matakai daban-daban. Rustls laburaren buɗe tushen tushe ne, TLS, an rubuta shi a Tsatsa kuma ana samun sa a ƙarƙashin lasisin Apache 2.0, MIT, da ISC, amma OpenSSL sanannen laburare ne da daidaitattun masana'antu a kusan kowane babban rukuni.

Dangane da bayanansa, Rustls wani ɗakin karatu ne na TLS na zamani wanda ke nufin samar da kyakkyawan matakin tsaro. Ba ya buƙatar kowane tsari don cimma wannan tsaro kuma baya samar da wani aiki mara tsaro ko ƙarancin rubutu.

Yana da fasali da yawa, kamar tabbatar da abokin ciniki na ECDSA ko RSA da tabbatar ECDSA ko RSA uwar garken uwar garke, yayin tallafawa tabbatar da takardar shaidar sabar.

Wannan yana nufin cewa baku buƙatar samar da komai banda saitin takaddun asali. Ba za a iya kashe aikin tabbatar da satifiket a cikin babban API ba.

A gefe guda kuma, OpenSSL ingantacce ne, mai darajar kasuwanci, cikakken kayan aikin kayan aiki don Tsarin Layer Tsaro (TLS) da ladabi na Secure Sockets Layer (SSL). Hakanan yana da ɗakunan karatu mai yawa na crypto.

Game da gwajin Rustls

A cikin jerin gwajin nasa, Joseph Birr Pixton ya ce ya yi la'akari da maki da yawa don tantance yadda aikin yake yana iya bambanta tsakanin ɗakunan karatu na TLS, watau yin musayar ra'ayi da aikin gabaɗaya.

Ayyukan musafiha yana rufe saurin da za'a iya saita sabbin zaman TLS. Dangane da aikin gabaɗaya, suna rufe saurin da za'a iya shigar da bayanan aikace-aikacen zuwa zaman da aka riga aka tsara.

Sakamakon gwaje-gwaje daban-daban ya nuna cewa Rustls ya fi 10% sauri lokacin kafawa da yin sabon haɗi tare da uwar garke da 20-40% sauri lokacin kafa haɗin abokin ciniki.

Amma idan saurin sabon haɗin TLS yana da yawa, yawancin TLS zirga-zirga suna dogaro da sake dawo da haɗin haɗin da aka riga aka kafa.

Anan ma, Rustls sun fi ƙarfin ɗakin karatu na OpenSSL, ɗaukar haɗin uwar garke 10-20%, da 30-70% cikin sauri don ci gaba da haɗin abokin ciniki.

Allyari, Rustls sun yi aiki mafi kyau dangane da aikin gaba ɗaya ko saurin canja wurin bayanai akan haɗin TLS.

Birr Pixton ya ce Rustls na iya aika bayanai cikin sauri sama da OpenSSL 15% kuma karba 5% cikin sauri. A ƙarshe, ya ce, ɗakin karatu na Rustls ya yi amfani da rabin ƙwaƙwalwar da ake buƙata don gudanar da OpenSSL, wanda ƙari ne mai girma. Ya tuna cewa a wannan bangaren, ana sukan OpenSSL sau da yawa saboda babban sawun ƙwaƙwalwar ajiyar sa da kuma yawan matsalolin tsaro da ake samu a cikin lambar ta.

Don taƙaita sakamakon, zamu iya cewa da alama:

• Rustls yana da sauri 15% don aika bayanai
• Rustls yana da sauri 5% don karɓar bayanai
• Rustls yana da sauri 20 zuwa 40% don saita haɗin abokin ciniki
• Rustls yana da sauri 10% don saita haɗin sabar
• Rustls yana da sauri 30 zuwa 70% don ci gaba da haɗin abokin ciniki
• Rustls yana da sauri 10-20% don ci gaba da haɗi zuwa sabar
• Rustls suna amfani da ƙasa da rabin ƙwaƙwalwar OpenSSL

Birr Pixton ya bayyana cewa saboda an sanya Rustls a cikin Tsatsa, an warware matsalolin lamuran tsaro galibi tare da ƙirar harshen Tsatsa. An tsara yaren daga tushe don kaucewa kwari masu tsaro masu alaƙa da ƙwaƙwalwa.

Hanyar da shirye-shiryen da aka rubuta a cikin harshen shirye-shiryen Tsatsa ke hulɗa tare da ƙwaƙwalwa shine ɗayan shahararrun fassarar yare. Idan manyan kamfanoni suka fahimci amfanin harshe da Binciken Mozilla ya kirkira, haɓakar sa na iya fashewa a cikin shekaru masu zuwa.

Masu bincike irin su Firefox da Brave suma an yi imanin cewa a halin yanzu suna amfani da abubuwan Tsatsa, amma manyan kamfanoni kamar Cloudflare, Dropbox, da Yelp suma sun karɓi tsarin samarwa.

Source: https://jbp.io