ISequoia 1.0, umtapo wolwazi osebenzisa amazinga we-OpenPGP

Ngemuva kweminyaka emithathu nohhafu yentuthuko yashicilelwa hlela iphakethe USequoia 1.0, Ukwakha umtapo wolwazi wamathuluzi womugqa womyalo nemisebenzi ngokuqaliswa kwezinga le-OpenPGP (RFC-4880).

Ukwethulwa wafingqa umsebenzi kwi-API esezingeni eliphansi, efaka ukumbozwa kwezinga le-OpenPGP, elanele ukusetshenziswa ngokugcwele. Ikhodi yephrojekthi ibhalwe kuRust futhi isatshalaliswa ngaphansi kwelayisense le-GPLv2 +.

Iphrojekthi yasungulwa ngabanikeli abathathu be-GnuPG abavela ku-g10code, unjiniyela wama-plugins we-GnuPG nokuhlolwa kwe-cryptosystem. Ithimba leSequoia libuye laziwe ngokwakha i-Hagrid keyserver, esetshenziswa insizakalo yokhiye.openpgp.org.

Inhloso yephrojekthi entsha bekuwukuklama kabusha ukwakhiwa futhi kusetshenziswe izindlela ezintsha zokwenza ngcono ukuphepha nokuthembeka kwe-codebase.

Ukwenza ngcono ezokuphepha, USequoia usebenzisa hhayi kuphela amathuluzi wokuhlela Qiniseka ukuthi basebenzisa ulimi Ukugqwala, kepha nokuvikelwa kwephutha ezingeni le-API.

Isibonelo, I-API ayikuvumeli ukuthi uthumele ngephutha okhiye bemfihlongoba, ngokuzenzakalela, imisebenzi yokuthekelisa idinga ukukhethwa okusobala. Ngaphezu kwalokho, i-API iqinisekisa ukuthi akukho zinyathelo ezibalulekile ezingaphuthelwa lapho kuvuselelwa isiginesha yedijithali; ngokuzenzakalela, isikhathi sokudala, i-hashing algorithm, kanye nomkhiphi wesiginesha kuvuselelwa ngokuzenzakalela.

Sequoia uzama nokususa amaphutha we-GnuPGnjengokuhlukaniswa kokusebenza kwamathuluzi womugqa womyalo anelabhulali yokusebenza (ezinye izenzo zingenziwa kuphela kusetshenziswa okusetshenziswayo) nokuhlangana okuqinile kakhulu phakathi kwezinto, okwenza kube nzima ukwenza ushintsho, kufiphaze ikhodi eyisisekelo futhi kuvimbele ukwakhiwa kwe uhlelo oluphelele lweyunithi. -zivivinyo.

Sequoia ithuthukisa ukusetshenziswa komugqa womyalo we-sq nge-Git style subcommand support, uhlelo lwe-sqv (ukufaka esikhundleni se-gpgv) ukuqinisekisa amasiginesha ahlukile, insiza ye-sqop (Stateless OpenPGP CLI), kanye nomtapo wolwazi we-sequoia-openpgp.

Kukhona izixhumanisi zezilimi ze-C ne-Python. Imisebenzi eminingi echazwe kuzinga le-OpenPGP iyahambisana nokubethela, ukubhala ngemfihlo, ukudala nokuqinisekiswa kwamasiginesha edijithali.

Phakathi kwezici ezithuthukile, kuyaziwa ukuthi isekela ukuqinisekiswa isebenzisa amasiginesha edijithali ahlinzekwa ngokwahlukile (isiginesha ehlukile), ukuzivumelanisa nokuhlanganiswa nabaphathi bephakeji (i-APT, i-RPM, ukulayishwa, njll.), Amandla okukhawulela amasiginesha ngomkhawulo nangezikhathi zesilinganiso.

Ukwenza lula ukuthuthukiswa, ukulungisa amaphutha, kanye nokuhlaziywa kwezehlakalo, kunikezwa amathuluzi wokuhlola amaphakethe, ahlangana ne-analyzer futhi akuvumele ukuthi uhlaziye ngokubukeka ukwakheka kwemiyalezo ebethelwe, amasiginesha edijithali, kanye nokhiye.

Ngezizathu zokuphepha, Ukusetshenziswa kwezinsizakalo ze-cryptographic, njengama-coprocessors we-enclaves computing eseceleni, kuyasekelwa. Ngokuhlukaniswa okwengeziwe, ukuhlukaniswa kube yizinqubo ezihlukile zezinsizakalo ezisebenza nokhiye bomphakathi nabangasese kuyenziwa (ukuxhumana kwezinqubo kuhlelwe kusetshenziswa umthetho olandelwayo weCap'n Proto) Isibonelo, isitolo sokhiye senziwa ngendlela yenqubo ehlukile.

Kunezinketho ezimbili ze-API: izinga eliphansi neliphezulu. I-API esezingeni eliphansi ikhiqiza ngokuseduze ngangokunokwenzeka amandla we-OpenPGP nezinye izandiso ezihlobene, ezifana nokusekelwa kwe-ECC, ukwazisa (isiginesha kusiginesha) kanye nezinto ezisalungiswa zohlelo oluzayo lweleveli.

Kuyabonakala ukuthi ngokusebenza okuhleliwe, USequoia wafinyelela ukulungela inguqulo 1.0 ngonyaka owedlule, Pero onjiniyela banqume ukungasheshi futhi bachithe isikhathi esithe xaxa ukubheka amaphutha bese ubhala imibhalo ephelele nekhwalithi ephezulu enezixhumanisi zolwazi kuzibonelo ezijwayelekile ze-OpenPGP nokusetshenziswa.

I-Version 1.0 kuze kube manje imboza kuphela ibhokisi le-sequoia-openpgp nokusetshenziswa kokuqinisekiswa kwesiginesha yedijithali. Ama- "sq" CLI nama-API asezingeni eliphezulu awakasimama futhi ayaphothulwa.

Imikhawulo ehlelelwe ukususwa ekukhishweni okuzayo ifaka phakathi ukwenziwa kwezinsizakalo zokugcina okhiye abazimele nabomphakathi, ukusekelwa kwamasiginesha ombhalo ocacile wedijithali, kanye nekhono lokusebenzisa izinkulumo ezijwayelekile ukunquma amasiginesha athembekile.


Okuqukethwe yi-athikili kunamathela ezimisweni zethu ze izimiso zokuhlelela. Ukubika iphutha chofoza lapha.

Yiba ngowokuqala ukuphawula

Shiya umbono wakho

Ikheli lakho le ngeke ishicilelwe. Ezidingekayo ibhalwe nge *

*

*

  1. Ubhekele imininingwane: Miguel Ángel Gatón
  2. Inhloso yedatha: Lawula Ugaxekile, ukuphathwa kwamazwana.
  3. Ukusemthethweni: Imvume yakho
  4. Ukuxhumana kwemininingwane: Imininingwane ngeke idluliselwe kubantu besithathu ngaphandle kwesibopho esisemthethweni.
  5. Isitoreji sedatha: Idatabase ebanjwe yi-Occentus Networks (EU)
  6. Amalungelo: Nganoma yisiphi isikhathi ungakhawulela, uthole futhi ususe imininingwane yakho.