Muva nje kukhishwe uhlobo olusha lweTor 0.3.5.7, esetshenziselwa ukuhlela umsebenzi wenethiwekhi yeTor engaziwa.
I-Tor 0.3.5.7 yamukelwa njengenguqulo yokuqala ezinzile yegatsha le-0.3.5, ebisathuthuka ezinyangeni ezine ezedlule.
Ngesikhathi esifanayo, Ukubuyekezwa kokulungiswa nakho kukhishelwe amagatsha amadala we-Tor 0.3.4.10 no-0.3.3.11, okubandakanya ukulungiswa kweziphazamisi okunqwabelene. Igatsha le-0.3.5 lizohambisana nomjikelezo omude wokusekelwa (i-LTS), okubandakanya ukukhishwa kokuvuselelwa kokusebenza okuyisisekelo iminyaka emithathu (kuze kube nguFebhuwari 1, 2022).
Uchungechunge lweTor 0.3.5 lubandakanya izici eziningana ezintsha nokuthuthukiswa kokusebenza, kufaka phakathi ukugunyazwa kwamakhasimende kwezinsizakalo ze-anyanisi v3, ukuhlanzwa kwemibiko ye-boot, ukusekelwa kwamathuluzi wokulinganisa we-bandwidth athuthukisiwe, ukwesekwa kokuhlola kwe-NSS esikhundleni se-OpenSSL, nokunye okuningi.
Izici ezintsha eziyinhloko zeTor 0.3.5.7
Ngalokhu kukhululwa okusha Kungezwe ukusekelwa kokugunyaza ukuxhumana kwamakhasimende nezinsizakalo ezifihliwe kusetshenziswa inguqulo yesithathu ye-protocol services services.
Ukugunyazwa kwenziwa ezingeni lokufinyelela kuzincazelo zensizakalo, manje insizakalo efihliwe ingalungiswa ukuze amaklayenti agunyazwe ngaphambilini kuphela akwazi ukubhala ngemfihlo okuqukethwe yincazelo ukuthola ulwazi ngokuxhumeka.
Amaklayenti angasebenzisa inketho ye- "ClientOnionAuthDir" engezwe ku-torrc futhi umkhombandlela we- "Author_clients /" uhlongozwa ngezinsizakalo zokugcina uhlu lwamakhasimende agunyaziwe.
Izinsizakalo ezifihliwe ezisuselwa kunguqulo yesithathu yenqubo elandelwayo, ukwenziwa kwamathuluzi wokubuyekeza kuthuthukisiwe ukuqinisekisa ukukhuliswa kwezinsizakalo ngokuqalisa izimo zesevisi efanayo kubabungazi abahlukahlukene ngaphandle kwesidingo sokulungiselela ukuvumelanisa kwedatha kusuka kumsingathi.
Ukuhlukanisa amaketanga amaklayenti, kuphakanyiswe isilungiselelo se-HiddenServiceExportCircuitID, esingacaciswa maqondana nensizakalo efihliwe lapho kusetshenziswa uhlobo lwesithathu lomthetho olandelwayo.
Lo msebenzi ukuvumela ukuthi ufinyelele insizakalo efihliwe ngephrothokholi ye-HAProxy ukunikeza ikheli le-IP elibonakalayo ezintanjeni zamakhasimende angenayo.
Elinye iphuzu elibalulekile yilokho Umsebenzi uqalile ekuhlelweni kabusha okuphelele kwesisekelo sekhodi yeTor ukwenza ngcono ukuhleleka nokwenza lula ukugcinwa kwephrojekthi.
Isibonelo, ukuhlukaniswa kwamafayela amakhulu kube amafayela amancane nokuhlukaniswa kokusebenza okuthile kuqala.
Umkhombandlela "ojwayelekile" uhlukaniswe ngeqoqo lemitapo yolwazi (umkhombandlela we- "lib"), amafayela asenkombeni ye- "o" ahanjiswa engxenyeni eyisisekelo (umkhombandlela we- "core"), amamojula azimele ("isici" lwemibhalo) noma izinhlelo zokusebenza (umkhombandlela "wohlelo").
Lokhu kwenze ukulungiselelwa ukwandisa ukusebenza (isikhathi sokuqalisa sincishiswe ngesilinganiso esingu-8%).
Olunye ushintsho
Ngephutha, inguqulo yesithathu ye-protocol inikwe amandla ezinsizeni ze-anyanisi.
Uma kunesidingo sokwakha izinsizakalo ezintsha ezifihliwe ngokuya ngohlobo lwesibili lwephrothokholi, ngemuva kokufaka isibuyekezo, kuzodingeka ushintsho lokumisa (Inketho ye- "HiddenServiceVersion 2").
Kumasevisi akhona, inguqulo ye-protocol izohlala ingashintshiwe, njengoba kukhonjisiwe kufayela elinokhiye.
Okokugcina isango lokuzenzakalelayo liyekile ukuqala kumodi yokuphuma yenodi. Uma ipharamitha ye-ExitRelay isethelwe ku- "othomathikhi", indawo yokuphuma manje idinga ukucushwa okucacile kwemithetho yokuphuma komgwaqo kusetshenziswa izinketho ze-ExitPolicy neReducedExitPolicy.
Imilayezo iguqulwe ngesikhathi sokuqalisa kweTor, okungaholela ekuphuleni kokuhambisana nezinsiza zangaphandle zokuhlaziya izingodo.
Imininingwane ngokuqhubeka kokuthola idatha kusuka kuseva yomkhombandlela inqanyuliwe ngaphambi kokuxhumeka okuphumelelayo esangweni (lokudlulisa noma ibhuloho).
Y wengeze ukusekelwa kwamathuluzi wokulinganisa we-bandwidth athuthukisiwe futhi wenza ukuthi kungenzeka kube expKuyiphutha ukusebenzisa imitapo yolwazi ye-NSS eyenziwe iphrojekthi yeMozilla esikhundleni se-OpenSSL.