Daniel Hruska Xa lus ntawm iMessage yog ib txoj hauv kev nrov rau kev sib txuas lus ntawm iOS pab kiag li lawm thiab Mac computers. Kaum tawm lab ntawm cov lus tau ua tiav los ntawm Apple cov servers txhua hnub, thiab raws li kev muag khoom ntawm Apple-tom cov cuab yeej loj hlob, yog li qhov muaj koob meej ntawm iMessage. Tab sis koj puas tau xav txog yuav ua li cas koj cov lus raug tiv thaiv los ntawm cov neeg tawm tsam?
Apple nyuam qhuav tso tawm daim ntawv piav txog iOS kev ruaj ntseg. Nws zoo piav qhia txog kev ruaj ntseg mechanisms siv nyob rau hauv iOS - system, cov ntaub ntawv encryption thiab kev tiv thaiv, daim ntawv thov kev ruaj ntseg, kev sib txuas lus network, kev pab cuam hauv Internet thiab kev ruaj ntseg ntaus ntawv. Yog tias koj nkag siab me ntsis txog kev ruaj ntseg thiab tsis muaj teeb meem nrog lus Askiv, koj tuaj yeem nrhiav iMessage ntawm nplooj ntawv 20. Yog tias tsis yog, kuv yuav sim piav qhia txog lub hauv paus ntsiab lus ntawm iMessage kev ruaj ntseg kom meej li sai tau.
Lub hauv paus ntawm kev xa cov lus yog lawv encryption. Rau laymen, qhov no feem ntau cuam tshuam nrog cov txheej txheem uas koj encrypt cov lus nrog tus yuam sij thiab tus neeg txais kev txiav txim siab nws nrog tus yuam sij no. Xws li tus yuam sij yog hu ua symmetric. Lub ntsiab lus tseem ceeb hauv cov txheej txheem no yog muab tus yuam sij rau tus neeg txais. Yog tias tus neeg tawm tsam tau tuav ntawm nws, lawv tuaj yeem decrypt koj cov lus thiab ua rau tus neeg tau txais. Txhawm rau kom yooj yim, xav txog lub thawv nrog lub xauv, uas tsuas yog ib qho tseem ceeb haum, thiab nrog tus yuam sij no koj tuaj yeem ntxig thiab tshem tawm cov ntsiab lus ntawm lub thawv.
Hmoov zoo, muaj asymmetric cryptography siv ob lub yuam sij - pej xeem thiab ntiag tug. Lub hauv paus ntsiab lus yog tias txhua tus tuaj yeem paub koj tus lej tseem ceeb, tsuas yog koj paub koj tus lej ntiag tug. Yog tias ib tug neeg xav xa koj cov lus, lawv yuav encrypt nws nrog koj tus lej pej xeem. Cov lus encrypted tuaj yeem tsuas yog decrypted nrog koj tus yuam sij ntiag tug. Yog tias koj xav txog lub thawv xa ntawv dua hauv txoj kev yooj yim, lub sijhawm no nws yuav muaj ob lub xauv. Nrog rau pej xeem tus yuam sij, leej twg tuaj yeem qhib nws los ntxig cov ntsiab lus, tab sis tsuas yog koj nrog koj tus yuam sij ntiag tug tuaj yeem xaiv nws. Kom paub meej, kuv yuav ntxiv tias cov lus uas tau muab zais nrog tus yuam sij pej xeem tsis tuaj yeem decrypted nrog tus yuam sij pej xeem no.
Kev ruaj ntseg ua haujlwm li cas hauv iMessage:
- Thaum iMessage qhib, ob qhov tseem ceeb yog tsim los ntawm lub cuab yeej - 1280b RSA los encrypt cov ntaub ntawv thiab 256b ECDSA los xyuas kom meej tias cov ntaub ntawv tsis tau raug cuam tshuam nrog rau txoj kev.
- Ob tus yuam sij pej xeem raug xa mus rau Apple's Directory Service (IDS). Tau kawg, ob tus yuam sij ntiag tug tseem khaws cia rau ntawm lub cuab yeej nkaus xwb.
- Hauv IDS, cov yuam sij pej xeem cuam tshuam nrog koj tus lej xov tooj, email, thiab chaw nyob ntawm lub cuab yeej hauv Apple Push Notification service (APN).
- Yog tias ib tus neeg xav xa lus rau koj, lawv lub cuab yeej yuav pom koj tus yuam sij pej xeem (lossis ntau tus yuam sij pej xeem yog siv iMessage ntawm ntau lub cuab yeej) thiab APN chaw nyob ntawm koj li hauv IDS.
- Nws encrypts cov lus siv 128b AES thiab kos npe nrog nws tus yuam sij ntiag tug. Yog hais tias cov lus yuav ncav cuag koj ntawm ntau yam khoom siv, cov lus tau muab khaws cia thiab encrypted ntawm Apple lub servers cais rau lawv txhua tus.
- Qee cov ntaub ntawv, xws li timestamps, tsis tau encrypted txhua.
- Txhua qhov kev sib txuas lus tau ua tiav dhau TLS.
- Cov lus ntev dua thiab cov ntawv txuas yog encrypted nrog tus yuam sij random ntawm iCloud. Txhua yam khoom muaj nws tus kheej URI (chaw nyob rau ib yam dab tsi ntawm lub server).
- Thaum cov lus xa mus rau tag nrho koj li, nws yog deleted. Yog tias nws tsis xa mus rau tsawg kawg ib qho ntawm koj cov khoom siv, nws raug tso rau ntawm cov servers rau 7 hnub thiab tom qab ntawd tshem tawm.
Cov lus piav qhia no yuav zoo li nyuaj rau koj, tab sis yog tias koj saib hauv daim duab saum toj no, koj yuav nkag siab txog lub hauv paus ntsiab lus. Qhov zoo ntawm xws li kev ruaj ntseg system yog tias nws tsuas yog tuaj yeem tawm tsam sab nraud los ntawm brute quab yuam. Zoo, rau tam sim no, vim cov neeg tawm tsam tau ntse dua.
Qhov kev hem thawj yog nrog Apple nws tus kheej. Qhov no yog vim tias nws tswj hwm tag nrho cov txheej txheem ntawm cov yuam sij, yog li hauv txoj kev xav nws tuaj yeem muab lwm lub cuab yeej (lwm khub ntawm pej xeem thiab tus yuam sij ntiag tug) rau koj tus as khauj, piv txwv li vim yog lub tsev hais plaub txiav txim, uas cov lus tuaj yeem raug decrypted. Txawm li cas los xij, ntawm no Apple tau hais tias nws tsis ua thiab yuav tsis ua ib yam li ntawd.
Thiab ua ntej leej twg yog nws encrypted? Yuav ib txwm SSL tsis txaus, cov lus xa mus rau kua thiab kua tom qab ntawd xa cov lus rov ntawm SSL? Apple muaj lub zog los mloog cov lus nyob ib puag ncig, yog li vim li cas txhua lub suab nrov nyob ib puag ncig nws? Nyob rau hauv txhua rooj plaub, nws tsuas yog ib qho teeb meem ntawm kev tiv thaiv tus thib peb los ntawm eavesdropping ntawm cov lus, thiab SSL yog txaus rau qhov ntawd.
Yog tias peb ntseeg tias Apple tsis xa cov yuam sij ntiag tug, ces nws yuav tsis nyeem lawv ib yam. Thiab txawm li cas los xij, SSL tsuas yog kev siv ntawm asymmetric encryption ntawm tus neeg siv khoom-kev sib txuas.
Yog li peb xa cov lus 2x encrypted hla SSL thiab Apple tuaj yeem nyeem nws, lossis 2x unencrypted nrog qhov tseeb tias peb thov cov yuam sij pej xeem ua ntej thiab siv tib lub cim raws li qhov xwm txheej ntawm SSL thiab Apple tsis tuaj yeem nyeem lawv txoj kev xav.
Thiab vim li cas thiaj muaj cov ntaub ntawv encrypted txawm nyob ntawm Apple? Vim tias qee tus neeg ua haujlwm yuav tau nkag mus rau lawv. Nws tau raug dag los ntawm nws tus hluas nkauj, yog li nws pib rub tawm nws cov lus - nws xau thiab Apple teeb meem.
Funny qw..