| Both sides previous revisionPrevious revision | |
рекомендованные_программные_решения [2022/06/13 14:35]
– sss | рекомендованные_программные_решения [2022/06/13 14:36] (current)
– sss |
|---|
| * Can run via HTTP and SOCKS5 proxies. | * Can run via HTTP and SOCKS5 proxies. |
| * Can run in hidden service mode on [[https://en.wikipedia.org/wiki/Darknet|Darknet]] networks. | * Can run in hidden service mode on [[https://en.wikipedia.org/wiki/Darknet|Darknet]] networks. |
| * Uses [[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e encryption]]. | * Uses [[Основы_криптографии_для_начинающих#end-to-end|e2e encryption]]. |
| * Source code is available [[https://github.com/Bitmessage/PyBitmessage/|here]]. | * Source code is available [[https://github.com/Bitmessage/PyBitmessage/|here]]. |
| Disadvantages as of 2018.05: | Disadvantages as of 2018.05: |
| Principle of the program: | Principle of the program: |
| - **Alice** wants to send a message to **Bob**. | - **Alice** wants to send a message to **Bob**. |
| - **Alice** encrypts the message using **Bob's **[[Special:MyLanguage/Основы_криптографии_для_начинающих#.D0.90.D1.81.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|public key]], then saves it in a local database. | - **Alice** encrypts the message using **Bob's **[[Основы_криптографии_для_начинающих#.D0.90.D1.81.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|public key]], then saves it in a local database. |
| - **Alice** sends her database to all network users with whom she is currently connected. | - **Alice** sends her database to all network users with whom she is currently connected. |
| - **Bob** receives a new database from each user that he is connected with. | - **Bob** receives a new database from each user that he is connected with. |
| - **Bob** tries to decrypt each new message from the database using his [[Special:MyLanguage/Основы_криптографии_для_начинающих#.D0.90.D1.81.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|private keys]], and if the new message is not meant for him, then "Bob" will not be able to decrypt it. | - **Bob** tries to decrypt each new message from the database using his [[Основы_криптографии_для_начинающих#.D0.90.D1.81.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|private keys]], and if the new message is not meant for him, then "Bob" will not be able to decrypt it. |
| - **Bob** successfully decrypts the message sent by **Alice**, which is located in one of the versions of the database, received by one of the network users. | - **Bob** successfully decrypts the message sent by **Alice**, which is located in one of the versions of the database, received by one of the network users. |
| |
| Basic use: | Basic use: |
| - Generate at least one ([[Special:MyLanguage/Основы_криптографии_для_начинающих#.D0.90.D1.81.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|key pair]]). | - Generate at least one ([[Основы_криптографии_для_начинающих#.D0.90.D1.81.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|key pair]]). |
| - Send the public key to your companion (after that, they will be able to send you messages). | - Send the public key to your companion (after that, they will be able to send you messages). |
| - Add your companion's public key (after that, you will be able to send them messages). | - Add your companion's public key (after that, you will be able to send them messages). |
| * Identity system. A rather interesting approach which, when used correctly, allows you to be completely anonymous if necessary, it also allows you to sign data so that its source can be verified. | * Identity system. A rather interesting approach which, when used correctly, allows you to be completely anonymous if necessary, it also allows you to sign data so that its source can be verified. |
| Advantages: | Advantages: |
| * Does not require registration on any servers, your [[Special:MyLanguage/Основы_криптографии_для_начинающих#.D0.90.D1.81.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|public key]] serves as your account. | * Does not require registration on any servers, your [[Основы_криптографии_для_начинающих#.D0.90.D1.81.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|public key]] serves as your account. |
| * Is able to use intermediaries (relays) to solve [[https://ru.wikipedia.org/wiki/NAT|NAT]] problems (manual configuration only). | * Is able to use intermediaries (relays) to solve [[https://ru.wikipedia.org/wiki/NAT|NAT]] problems (manual configuration only). |
| * Can run via HTTP and SOCKS5 proxies. | * Can run via HTTP and SOCKS5 proxies. |
| * Can run in hidden service mode on [[https://en.wikipedia.org/wiki/Darknet|Darknet]] networks. | * Can run in hidden service mode on [[https://en.wikipedia.org/wiki/Darknet|Darknet]] networks. |
| * Uses [[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e encryption]]. | * Uses [[Основы_криптографии_для_начинающих#end-to-end|e2e encryption]]. |
| * Source code is available [[https://github.com/RetroShare%20Retroshare|here]] | * Source code is available [[https://github.com/RetroShare%20Retroshare|here]] |
| Disadvantages as of 2018.05: | Disadvantages as of 2018.05: |
| Basic use: | Basic use: |
| - Run the program and follow the setup wizard's instructions. | - Run the program and follow the setup wizard's instructions. |
| - Send your [[Special:MyLanguage/Основы_криптографии_для_начинающих#.D0.90.D1.81.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|public key]] to a companion. | - Send your [[Основы_криптографии_для_начинающих#.D0.90.D1.81.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|public key]] to a companion. |
| - Add your companion's public key via the add contact wizard. | - Add your companion's public key via the add contact wizard. |
| - Enjoy. | - Enjoy. |
| * Can run via HTTP and SOCKS5 proxies. | * Can run via HTTP and SOCKS5 proxies. |
| * Ability to create your own server (inside an organization or closed network on a rented internet server, using your own hardware). | * Ability to create your own server (inside an organization or closed network on a rented internet server, using your own hardware). |
| * The protocol has many optional extensions, such as [[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption, history storage on the server (not safe), audio/video calls, .... | * The protocol has many optional extensions, such as [[Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption, history storage on the server (not safe), audio/video calls, .... |
| * Multi-user conferences are supported. | * Multi-user conferences are supported. |
| * Ability of users to communicate with each other on different servers. | * Ability of users to communicate with each other on different servers. |
| Disadvantages as of 2018.05: | Disadvantages as of 2018.05: |
| * [[Special:MyLanguage/Существующие_решения_для_организации_связи#.D0.9F.D0.BE.D0.BB.D1.8C.D0.B7.D0.BE.D0.B2.D0.B0.D1.82.D0.B5.D0.BB.D1.8C.3C.3E.D0.A1.D0.B5.D1.80.D0.B2.D0.B5.D1.80_.28_.D1.86.D0.B5.D0.BD.D1.82.D1.80.D0.B0.D0.BB.D0.B8.D0.B7.D0.BE.D0.B2.D0.B0.D0.BD.D0.BD.D0.B0.D1.8F_.D0.BC.D0.BE.D0.B4.D0.B5.D0.BB.D1.8C_.29|Centralized system]], most servers store all correspondence by default on a server. | * [[Существующие_решения_для_организации_связи#.D0.9F.D0.BE.D0.BB.D1.8C.D0.B7.D0.BE.D0.B2.D0.B0.D1.82.D0.B5.D0.BB.D1.8C.3C.3E.D0.A1.D0.B5.D1.80.D0.B2.D0.B5.D1.80_.28_.D1.86.D0.B5.D0.BD.D1.82.D1.80.D0.B0.D0.BB.D0.B8.D0.B7.D0.BE.D0.B2.D0.B0.D0.BD.D0.BD.D0.B0.D1.8F_.D0.BC.D0.BE.D0.B4.D0.B5.D0.BB.D1.8C_.29|Centralized system]], most servers store all correspondence by default on a server. |
| * You are required to register on one of the servers. | * You are required to register on one of the servers. |
| * User<>Server encryption, not User<>User ([[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e]]) by default. | * User<>Server encryption, not User<>User ([[Основы_криптографии_для_начинающих#end-to-end|e2e]]) by default. |
| * You must configure an additional layer of encryption for transmitted data within the client program (does not protect against metadata leakage). | * You must configure an additional layer of encryption for transmitted data within the client program (does not protect against metadata leakage). |
| Basics of using client programs: | Basics of using client programs: |
| - Enjoy. | - Enjoy. |
| Recommended client programs: | Recommended client programs: |
| * [[https://www.miranda-ng.org/en/|Miranda-ng]] - a client program for many protocols (not just XMPP/Jabber), but is currently only available for windows, unfortunately The program has many settings, supports [[https://en.wikipedia.org/wiki/Pretty_Good_Privacy|pgp]], omemo, [[https://en.wikipedia.org/wiki/Off-the-Record_Messaging|otr]] [[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption for jabber. | * [[https://www.miranda-ng.org/en/|Miranda-ng]] - a client program for many protocols (not just XMPP/Jabber), but is currently only available for windows, unfortunately The program has many settings, supports [[https://en.wikipedia.org/wiki/Pretty_Good_Privacy|pgp]], omemo, [[https://en.wikipedia.org/wiki/Off-the-Record_Messaging|otr]] [[Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption for jabber. |
| * [[http://psi-im.org/|Psi]] - a simple client available for windows/linux/mac with [[https://en.wikipedia.org/wiki/Pretty_Good_Privacy|pgp]] [[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption support, has an add-on for omemo and [[https://en.wikipedia.org/wiki/Off-the-Record_Messaging|otr]] [[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption. | * [[http://psi-im.org/|Psi]] - a simple client available for windows/linux/mac with [[https://en.wikipedia.org/wiki/Pretty_Good_Privacy|pgp]] [[Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption support, has an add-on for omemo and [[https://en.wikipedia.org/wiki/Off-the-Record_Messaging|otr]] [[Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption. |
| * [[https://www.gajim.org/|Gajim]] - a simple client for windows/linux/mac with [[https://en.wikipedia.org/wiki/Pretty_Good_Privacy|pgp]] [[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption support, has an add-on for omemo и [[https://en.wikipedia.org/wiki/Off-the-Record_Messaging|otr]] [[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption. Using this is not recommended if you have a lot of contacts, as the program is very demanding of computer resources (CPU, RAM, read and write hard disk). | * [[https://www.gajim.org/|Gajim]] - a simple client for windows/linux/mac with [[https://en.wikipedia.org/wiki/Pretty_Good_Privacy|pgp]] [[Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption support, has an add-on for omemo и [[https://en.wikipedia.org/wiki/Off-the-Record_Messaging|otr]] [[Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption. Using this is not recommended if you have a lot of contacts, as the program is very demanding of computer resources (CPU, RAM, read and write hard disk). |
| * [[http://www.vacuum-im.org/|Vacuum-IM]] - a simple client for windows/linux/mac with [[https://en.wikipedia.org/wiki/Pretty_Good_Privacy|pgp]] [[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption support. | * [[http://www.vacuum-im.org/|Vacuum-IM]] - a simple client for windows/linux/mac with [[https://en.wikipedia.org/wiki/Pretty_Good_Privacy|pgp]] [[Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption support. |
| * [[http://pidgin.im/|Pidgin]] - a simple client for windows/linux/mac with [[https://en.wikipedia.org/wiki/Pretty_Good_Privacy|pgp]] [[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption support, has an add-on for omemo and [[https://en.wikipedia.org/wiki/Off-the-Record_Messaging|otr]] [[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption. | * [[http://pidgin.im/|Pidgin]] - a simple client for windows/linux/mac with [[https://en.wikipedia.org/wiki/Pretty_Good_Privacy|pgp]] [[Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption support, has an add-on for omemo and [[https://en.wikipedia.org/wiki/Off-the-Record_Messaging|otr]] [[Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption. |
| * Xabber - client program for Android, has [[https://en.wikipedia.org/wiki/Pretty_Good_Privacy|pgp]] [[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption support. The program can be installed from the [[https://en.wikipedia.org/wiki/F-Droid|F-Droid]] repository or bought in stores. | * Xabber - client program for Android, has [[https://en.wikipedia.org/wiki/Pretty_Good_Privacy|pgp]] [[Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption support. The program can be installed from the [[https://en.wikipedia.org/wiki/F-Droid|F-Droid]] repository or bought in stores. |
| * Conversations - a client program for Android, has [[https://en.wikipedia.org/wiki/Pretty_Good_Privacy|pgp]] and omemo [[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption support. The developer of this program invented omemo encryption. The program can be installed from the [[https://en.wikipedia.org/wiki/F-Droid|F-Droid]] repository or bought in stores. | * Conversations - a client program for Android, has [[https://en.wikipedia.org/wiki/Pretty_Good_Privacy|pgp]] and omemo [[Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption support. The developer of this program invented omemo encryption. The program can be installed from the [[https://en.wikipedia.org/wiki/F-Droid|F-Droid]] repository or bought in stores. |
| Recommended server programs: | Recommended server programs: |
| * [[https://github.com/processone/ejabberd/|ejabberd]] is a very stable and efficient server.Instructions for installing and configuring this server are beyond the scope of this article. | * [[https://github.com/processone/ejabberd/|ejabberd]] is a very stable and efficient server.Instructions for installing and configuring this server are beyond the scope of this article. |
| * Can run via HTTP and SOCKS5 proxies (although functionality is slightly limited). | * Can run via HTTP and SOCKS5 proxies (although functionality is slightly limited). |
| Disadvantages as of 2018.05: | Disadvantages as of 2018.05: |
| * [[Special:MyLanguage/Существующие_решения_для_организации_связи#.D0.9F.D0.BE.D0.BB.D1.8C.D0.B7.D0.BE.D0.B2.D0.B0.D1.82.D0.B5.D0.BB.D1.8C.3C.3E.D0.A1.D0.B5.D1.80.D0.B2.D0.B5.D1.80_.28_.D1.86.D0.B5.D0.BD.D1.82.D1.80.D0.B0.D0.BB.D0.B8.D0.B7.D0.BE.D0.B2.D0.B0.D0.BD.D0.BD.D0.B0.D1.8F_.D0.BC.D0.BE.D0.B4.D0.B5.D0.BB.D1.8C_.29|Centralized system]] | * [[Существующие_решения_для_организации_связи#.D0.9F.D0.BE.D0.BB.D1.8C.D0.B7.D0.BE.D0.B2.D0.B0.D1.82.D0.B5.D0.BB.D1.8C.3C.3E.D0.A1.D0.B5.D1.80.D0.B2.D0.B5.D1.80_.28_.D1.86.D0.B5.D0.BD.D1.82.D1.80.D0.B0.D0.BB.D0.B8.D0.B7.D0.BE.D0.B2.D0.B0.D0.BD.D0.BD.D0.B0.D1.8F_.D0.BC.D0.BE.D0.B4.D0.B5.D0.BB.D1.8C_.29|Centralized system]] |
| * Has only User<>Server encryption, there is no way to use User<>User ([[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e]]) encryption. | * Has only User<>Server encryption, there is no way to use User<>User ([[Основы_криптографии_для_начинающих#end-to-end|e2e]]) encryption. |
| * All transmitted data is always available to the server. | * All transmitted data is always available to the server. |
| * To ensure security and privacy, you need to have your own server on your own hardware. | * To ensure security and privacy, you need to have your own server on your own hardware. |
| |
| One of the first program solutions for [[Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption was originally developed only for [[https://en.wikipedia.org/wiki/Email|email]], but is now widely used in other areas such as instant messaging and file encryption for transmission over insecure communication channels. Unfortunately there is no single way to use pgp for all data transmitted over the internet, there are add-ons/extensions for work programs with email, and some instant messaging programs support pgp. Advantages: | One of the first program solutions for [[Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption was originally developed only for [[https://en.wikipedia.org/wiki/Email|email]], but is now widely used in other areas such as instant messaging and file encryption for transmission over insecure communication channels. Unfortunately there is no single way to use pgp for all data transmitted over the internet, there are add-ons/extensions for work programs with email, and some instant messaging programs support pgp. Advantages: |
| * Ability to use [[Special:MyLanguage/Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption for all data. | * Ability to use [[Основы_криптографии_для_начинающих#end-to-end|e2e]] encryption for all data. |
| * There is a lot of software support for data exchange. | * There is a lot of software support for data exchange. |
| * Good time-tested implementation. | * Good time-tested implementation. |
| * Each application must be configured separately //(configuring programs and add-ons for programs that use pgp)// | * Each application must be configured separately //(configuring programs and add-ons for programs that use pgp)// |
| Principle of operation: | Principle of operation: |
| - You generate a [[Special:MyLanguage/Основы_криптографии_для_начинающих#.D0.90.D1.81.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|key pair]]. | - You generate a [[Основы_криптографии_для_начинающих#.D0.90.D1.81.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|key pair]]. |
| - You send a public key to a user that wants to safely send you data. | - You send a public key to a user that wants to safely send you data. |
| - You add the public key of the user you would like to send data to. | - You add the public key of the user you would like to send data to. |
| |
| ===== 7Zip ===== | ===== 7Zip ===== |
| [[https://en.wikipedia.org/wiki/File_archiver|An archiver-compressor]] of files and directories. It is able to use [[Special:MyLanguage/Основы_криптографии_для_начинающих#.D0.A1.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|symmetric encryption]] with a password.Advantages: | [[https://en.wikipedia.org/wiki/File_archiver|An archiver-compressor]] of files and directories. It is able to use [[Основы_криптографии_для_начинающих#.D0.A1.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|symmetric encryption]] with a password.Advantages: |
| * Easy to use. | * Easy to use. |
| * Is [[https://www.7-zip.org/download.html|open-source]] | * Is [[https://www.7-zip.org/download.html|open-source]] |
| Disadvantages: | Disadvantages: |
| * Narrow scope. | * Narrow scope. |
| * Absence of [[Special:MyLanguage/Основы_криптографии_для_начинающих#.D0.90.D1.81.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|asymmetric encryption]]. (you must have a safe communication channel in order to transfer the key to the encrypted data to the recipient) | * Absence of [[Основы_криптографии_для_начинающих#.D0.90.D1.81.D0.B8.D0.BC.D0.BC.D0.B5.D1.82.D1.80.D0.B8.D1.87.D0.BD.D0.BE.D0.B5|asymmetric encryption]]. (you must have a safe communication channel in order to transfer the key to the encrypted data to the recipient) |
| Method of application: | Method of application: |
| - You create a password-protected archive with encryption enabled. | - You create a password-protected archive with encryption enabled. |
