amortized国外bt网站

TheArchitectureoftheGNUnet:45Subsystemsin45MinutesChristianGrothoInriaRennesBretagneAtlantique10.
12.
2015"Neverdoubtyourabilitytochangetheworld.
"–GlennGreenwaldTheInternetisBrokenNetworkgenerallylearnstoomuchInsecuredefaultsandhighsystemcomplexityCentralizedInternetinfrastructurerequiresadministation:Numberresources(IANA)DomainNameSystem(Rootzone)X.
509CAs(HTTPScerticates)Administratorshavepower,andpowerattractsattackersSelf-organizingsystemsakaP2Psystemsoerawayforward!
OurVision(Simplied)InternetGoogleDNS/X.
509TCP/UDPIP/BGPEthernetPhys.
LayerOurVision(Simplied)InternetGoogleDNS/X.
509TCP/UDPIP/BGPEthernetPhys.
LayerHTTPS/TCP/WLAN/.
.
.
OurVision(Simplied)InternetGoogleDNS/X.
509TCP/UDPIP/BGPEthernetPhys.
LayerCORE(OTR)HTTPS/TCP/WLAN/.
.
.
OurVision(Simplied)InternetGoogleDNS/X.
509TCP/UDPIP/BGPEthernetPhys.
LayerR5NDHTCORE(OTR)HTTPS/TCP/WLAN/.
.
.
OurVision(Simplied)InternetGoogleDNS/X.
509TCP/UDPIP/BGPEthernetPhys.
LayerCADET(Axolotl+SCTP)R5NDHTCORE(OTR)HTTPS/TCP/WLAN/.
.
.
OurVision(Simplied)InternetGoogleDNS/X.
509TCP/UDPIP/BGPEthernetPhys.
LayerGNUNameSystemCADET(Axolotl+SCTP)R5NDHTCORE(OTR)HTTPS/TCP/WLAN/.
.
.
OurVision(Simplied)InternetGoogleDNS/X.
509TCP/UDPIP/BGPEthernetPhys.
LayerApplicationsGNUNameSystemCADET(Axolotl+SCTP)R5NDHTCORE(OTR)HTTPS/TCP/WLAN/.
.
.
OurVision(Simplied)InternetGoogleDNS/X.
509TCP/UDPIP/BGPEthernetPhys.
LayerGNUnetApplicationsGNUNameSystemCADET(Axolotl+SCTP)R5NDHTCORE(OTR)HTTPS/TCP/WLAN/.
.
.
Today:45thingstodowithGNUnetAfasttour-de-forcethroughGNUnet'sfeaturesFeaturesforusers,developersandresearchersWhatyoucando,nothowitisdoneClibrarySaferC:GNUNETmalloc(),GNUNETasprintf(),.
.
.
Containers:multihashmap,Bloomlter,heap,.
.
.
Networking:eventloop,socketabstraction(client,server)Initialization:ndpaths,parseconguration,parseoptionsDisk:bueredandunbueredIO,endianessconversion,loggingCryptographicprimitivesRNG,permutationAES,TwoshSHA-512,SHA-256,SCRYPT,HKDF,CRC32,CRC16Curve25519pointaddition,Curve25519pointmultiplication,small-scalarCurve25519-DLOGEdDSA,ECDHEPaillier(homomorphicaddition)RSAblindsignaturesTheAutomatedRestartManager(ARM)Startsserviceson-demand(likesystemd)Automaticallyrestartscrashedservices(likeARMonOS/360)Canprovideperformancedataperservicegnunet-arm-eonlyterminatesafterpeerisfullydownSimpleAPI:GNUNETARMrequestservicestart(),GNUNETARMrequestservicestop(),etc.
TransportUnreliable,out-of-orderpacketdeliverysemanticsOverTCP,UDP,IPv4/IPv6,HTTP/HTTPS,WLANorBT(pluggable)EnforcesbandwidthquotasEnforcesconnectionrestrictions(F2F)SupportsNATtraversalSupportsbootstrapviabroadcast/multicastMeasuresnetworklatencyUDP/WLAN/BT:Fragmentslargemessages(includingACKsandselectiveretransmission)Distance-VectorRouting(WiP)TransportpluginBounded(i.
e.
≤3hops)distance-vectorroutingProvides"illusion"ofdirectconnectionsAutomatedTransportSelection(ATS)DecideswhichconnectionstoestablishSelects"best"transportplugintouseAllocatesbandwidthtopeersbynetworktechnology(LO,LAN,WAN,WLAN)Allowsothersubsystemstospecifypreferences:WhichpeersMinimizelatencyMaximizebandwidthCOREO-the-recordlinkencryptionbetweenpeersMultiplexesinboundmessagesbytypetohigher-levelsubsystemsHidesconnectionsfrom/topeersthatdonotspeaksamehigher-levelprotocolHOSTLISTAllowsdownloadofknownpeeraddressesforbootstrappingHTTPclientandHTTPserverprovidedURLsfromcongurationorlearnedviagossipamongpeersTheNetworkSizeEstimate(NSE)Givesestimateoflognwherenisnumberofactivepeers(withreasonablelifetime)AllpeersconvergetothesamenetworksizeestimateExtremelycheap(bandwidth,storage&amortizedCPUcost)Byzantinefault-tolerantMaliciousattackercanonlyslightlyincreasesizeestimateTrivialAPI:GNUNETNSEconnect()DistributedHashTable(DHT)Storekey-valuepairsinoverlaynetworkReplicationinthenetworkMultiplevaluesperkeypossibleDuplicate/knownrepliesnottransmittedrepeatedlyToleratessmall-worldunderlaytopologyCanoptionallytrackpathkey-valuestookinthenetworkO(√nlogn)lookupcomplexity,O(logn)hopsPluginsprovidecustomlogictoverifyintegrityofkey-valuepairsinDHTSimpleAPI:GNUNETDHTget(),GNUNETDHTput(),GNUNETDHTmonitorstart()CondentialAd-HocDecentralisedEnd-to-EndTransportAXOLOTL-encryptedend-to-endcommunicationReliableorunreliableIn-orderorout-of-orderLow-latencyorbueredMultiplestreamsduplexedoveroneauthenticatedencryptedchannelEncryptedchannelmultiplexedovermultiple,redundantpathsEasyAPI:GNUNETCADETconnect(),GNUNETCADETchannelcreate(),GNUNETCADETnotifytransmitready()Identity(management)Publickeypairsas"egos"toidentifyusersEachusercanhavemanyalter-egos(orpseudonyms)Separatefrompeeridentities(networkaddresses)TheGNUNameSystem(GNS)DecentralizednamesystemwithsecurememorablenamesDelegationusedtoachievetransitivityAlsosupportsgloballyunique,secureidentiersAchievesqueryandresponseprivacyProvidesalternativepublickeyinfrastructureInteroperablewithDNSTrivialAPI:GNUNETGNSconnect(),GNUNETGNSlookup()(Key)revocationInstantrevocationatallpeersthatthenetworkallowedtoreceiveitHighlyecientprotocolRevocationmessagescanbepreparedandstoredo-lineifdesiredTrivialAPI:GNUNETREVOCATIONrevoke(),GNUNETREVOCATIONquery()SetComputesetunionorsetintersectionSurprisinglylowbandwidthrequiredFewroundtrips,butnon-deterministicScalarproduct(SMC)Givenprivatemapsa:A→Zandb:B→Z,calculatesscalarproducte∈A∩Ba(e)b(e)(1)Bandwidth-ecientat≈100bytes/elementCPU-ecientwithruntimeinmilliseconds/elementOnlyleaksinformationderivablefromnalresultandpriorknowledgeResultonlydisclosedtoonepartyAssumeshonest-but-curiousadversarymodelTrivialAPI:GNUNETSCALARPRODUCTstartcomputation(),GNUNETSCALARPRODUCTacceptcomputation()RandomPeerSampling(WiP)Selectsarandompeer,orsequenceofrandompeersFullydecentralisedByzantinefault-tolerantMulticast(WiP)SourcecontrolsmembershipinmulticastgroupEnd-to-endencryptedSourcedoesnothavetoKXwitheachgroupmemberMembersthatleftreallycannolongerreadmessagesPSYC2Extensiblemessagingformat:syntaxandsemanticsStatefulprotocolwithstateupdatesusingdeltasEcientencodinganddecoding(inbandwidthandCPU)RunsontopofMulticastSocial(NetworkApplications)CombinesPSYC2andGNStobuildsocialnetworkingapplicationsKeyconcepts:nympseudonymofanotheruserinthenetworkplacewheresocialinteractionshappenhostownerofaplaceguestvisitorofaplaceAPIthenoersvocabulary:enter,leave,hosteject,hostentrydecision,hostannounce,guesttalk,placehistoryreplay,placelookatSecuShare(WiP)SocialnetworkingapplicationusingSOCIALAPIGUIwrittenwithQtStatisticsCollectsnumericrun-timeinformationfromapeerUsedforprimarilyfordiagnosticmonitoringandperformanceevaluationTrivialAPI:GNUNETSTATISTICSset(),GNUNETSTATISTICSupdate(),GNUNETSTATISTICSget()TheTestbedRuncontrolledexperimentsDetectavailableports,generatecongurationsShareservicesacrosspeersforhighereciency(i.
e.
DNSresolver)ConnectpeersintocustomnetworktopologiesRunpeerswithnon-uniformcongurationsRunmultiplepeersononehostRuntestbedacrossmultiplehostsControllarge-scaleexecutionwithhierarchyoftestbedcontrollersLaunchthousandsofpeerspersecondConversationGNUNameSystemPKI:Addressbook≡GNSzonemakecallstophone.
alice.
bob.
gnuOPUS-encodedvoicestreamsCADETend-to-endencryptionCleanAPI,command-lineandGTKuserinterfacesputcallsonhold,etc.
stilllacksringtones!
File-"Sharing"Anonymous,pseudonymousandnon-anonymouspublishingFilesbrokenupintoblocks(Merkletree)Peerscachingblockscannotviewcontents(encryptedqueriesandreplies)Multi-sourcedownloadContributingpeersrewardedwithbetterperformanceKeywordsearchFilemeta-dataavailableaspartofsearchresultCansharedirectories,canmountshareddirectoriesviaFUSEAPI,command-lineandGTKGUIsSearchbyREgularEXpressionServicepublisheradvertisesregularexpression(!
)ClientsearchesusingstringServiceswheretheRegExmatchesstringarereturnedFullydecentralised,usesR5NDHTTrivialAPI:GNUNETREGEXannounce(),GNUNETREGEXsearch()Warning:non-trivialtheory.
ReadupaboutRegExprexesbeforeusing.
DNSIntegrationInterceptDNSqueriesusingiptablesto:ObserveDNSactivityDropDNSqueriesSupply"alternative"DNSrepliesCanbeusedtosupportGNSinsteadofNSS,proxiesorGNS-specicresolutionAPIsIP-over-GNUnetOpenTUNinterfacetoreceiveinboundIPtrac("VPN")OpenTUNinterfacetoforwardIPtractoInternet("EXIT")TranslatebetweenIPv4andIPv6asneededandimplementNAT-PTforDNS("PT")AlsoallowsroutingIPtractoaparticularGNUnetpeerIntegrateswiththeGNUNameSystemByzantineFault-tolerantConsensusGivenasetofnpeerswithatmostkmaliciousparticipantsAndadeadline(synchronousprotocol!
)andenoughbandwidthforhonestparticipantsComputetheglobalunionoverasetofinitialelementsdistributedacrossthenkhonestparticipantsMaliciousparticipantsmayaddadditional(well-formed)elementsAllhonestparticipantsendupwithexactlthesamesetFinalsetissuper-setofunionofinitialelementsathonestpeersElectronicVoting(SMC)1ImplementsCramer'97-styleelectronicvoting:correctnessvotesarecountedcorrectly,onevotepervotersecrecyvoter'svotesremainsecretindi.
verif.
eachvotercanverifyuniv.
ver.
thirdpartiescanverifyfairnesswillnotleakpartialoutcomesrobustnessathresholdfactionofocialsmaybecorruptcoercionres.
Notoered!
AdversarycouldverifythatvotercompliedwithhisdemandsThreetypesofparticipants:supervisorarmslistofeligiblevoters,selectsauthoritiesauthoritiescollect&verifyballots,tallyresults,provideauditdatavoterregisterstovote,votes,submitsballot1Implementedingnunet-javaRESTfulAPIs(WiP)AccessGNUnetservicesviaHTTPPluginarchitectureDataencodedusingJSONUsedtobuileWebservicewithJSforidentitymanagementTaxableAnonymousLibreElectronicReservesPaymentsystem,notanewcurrencyClient-serverarchitecture,notpeer-to-peerHTTPRESTfulprotocol(JSONoverHTTP/HTTPS)SupposedtobeusedinitiallyoverTorforanonymityPayerremainsanonymousPayeeeasilyidentiablebythegovernment("taxable")AeroGPLserver,GPLwallet,LGPLmerchantlogicCheaptransactions,cangivechange,supportsrefundsGNUnetdependencies(generatedbyGNUGuix)Compiletime:Runtime:Closeinspectionshows:Guixdidn'tbuildallofit.
FutureWorkImprovealloftheabove,inparticulartheWiPsOnionroutingAsynchronousmessagingSecureauctionsNewsdistribution/timelineconstructionCollaborativeeditingMultipartylinearprogrammingConclusionGNUnetprovidesfoundationsforanalternativenetworkstackMoreworkneedstobedone:SMTP2.
0,Web3.
0,Tor2.
0,.
.
.
Ifwhatyouneedisnotthere,helpusaddit!
DoyouhaveanyquestionsReferences:NathanEvansandChristianGrotho.
R5N.
RandomizedRecursiveRoutingforRestricted-RouteNetworks.
5thInternationalConferenceonNetworkandSystemSecurity,2011.
M.
SchanzenbachDesignandImplementationofaCensorshipResistantandFullyDecentralizedNameSystem.
Master'sThesis(TUM),2012.
ChristianGrotho,BartPolotandCarlovonLoesch.
TheInternetisbroken:IdealisticIdeasforBuildingaGNUNetwork.
W3C/IABWorkshoponStrengtheningtheInternetAgainstPervasiveMonitoring(STRINT),2014.
MatthiasWachs,MartinSchanzenbachandChristianGrotho.
ACensorship-Resistant,Privacy-EnhancingandFullyDecentralizedNameSystem.
13thInternationalConferenceonCryptologyandNetworkSecurity,2014.