Adadin bit a cikin fayil ɗin maɓalli na tsaye ba shine ƙarfin ɓoyewar OpenVPN ba

Na'urar dubawa ko abokin aiki yana nuna adadin bit ɗin da aka buga a cikin fayil ɗin maɓalli na tsaye na OpenVPN kuma yana tambaya me ya sa ramin ba ya amfani da ɓoye mai wannan girman. Tambayar tana da ma'ana, amma amsar ba lamba ba ce: banner ɗin yana ƙirga kayan maɓallin da aka ajiye, yayin da ɓoye yake cinye kawai sashin da girman maɓallinsa ke buƙata. Ɗaukar wannan jimillar a matsayin saitin ƙarfi yana haifar da gyare-gyaren da ba su canza komai. An gina tsarin ne don ɗaukar kayan da suka fi abin da kowane algorithm ɗaya ke amfani da shi.

Tambayoyi biyu sun haɗu a nan: nawa kayan maɓalli fayil ɗin yake ajiyewa, da yadda ƙarfin ɓoyewar da aka amince da ita yake. Na biyun ne kaɗai ke bayyana ramin.

Abin da lambar da ke cikin banner ɗin take ƙirgawa a zahiri

Akwatin yana jera kayan ɓoye da kayan HMAC a matsayin sifofi daban, kuma siffar biyu ta hanya tana riƙe irin waɗannan rukuni biyu domin kowace hanya ta ɗauki maɓallanta. Lambar da ake bugawa ta fito ne daga adadin sifofin da aka jera, girmansu da bit takwas a kowane baiti. Wannan lissafi ne a kan ajiya, ba furuci ba ne cewa ɓoye ɗaya yana cinye kowane baitin da aka ajiye. Har ila yau kan rubutun yana ƙayyade iyakar rabon kayan ɓoye domin canjin ɗakin karatu ba zai iya canza girman tsarin a hankali ba.

Kwatanta wannan da maɓallin takardar shaidar, inda adadin bit ɗin yake bayyana girman abu ɗaya. Maɓallin RSA na bit 4,096 da fayil ɗin maɓalli wanda banner ɗinsa ke karanta bit 4,096 abubuwa ne daban-daban da ayyuka daban-daban, kuma daidaita su a matsayin saituna biyu a kan ma'auni ɗaya yana haifar da mummunan yanke hukunci.

Rukunin maɓalli biyu a cikin fayil ɗaya

Kowane rabin fayil ɗin yana samar da kayan ɓoyewa da tabbatarwa domin yanayin maɓallin da aka riga aka raba yana kare fakiti a dukkan hanyoyin biyu da waɗannan ɓangarori daban. Ɓoyewar da ke aiki tana amfani da baitunan da girman maɓallinta ke buƙata kawai, kuma digest ɗin yana amfani da girman fitarsa, shi ya sa ƙarfin da ake amfani da shi yana zuwa daga zaɓuɓɓukan ba daga tsawon fayil ɗin ba. Ƙara tsawon ɓangaren hexadecimal ba ya buƙatar algorithm ɗin da aka saita ya cinye ƙari daga gare shi. Gyara bayanin da babbar lamba yana canza ƙasa da haka.

Idan da gaske kana son dogon maɓalli, saitin da za a canza shine ɓoye ko digest, kuma janarat ɗin yana samar da abin da zaɓaɓɓun algorithms suke buƙata.

Karanta bayanin martaba yana gaya maka wane yanayi kake da shi

Tsarin fayil ɗin ɗaya yana hidima ga ayyuka biyu da suka bambanta sosai, kuma bayanin martaba ne kaɗai ke faɗin wanda kake da shi. Tsohon layin secret yana mai da fayil ɗin kayan maɓallin ramin kaɗai, yayin da tls-auth ko tls-crypt ke mai da shi kariya ta tashar sarrafawa tare da takardun shaida. Babu ɗayan amfanin da ke mai da shi maɓallin sirri na takardar shaidar abokin ciniki, komai kamannin ɓangaren. Gano zaɓin da sigar kafin samar da maye gurbi, kuma yi amfani da janarat ɗin da aka rubuta maimakon ƙara haruffa.

Wannan bambanci yana kuma ƙayyade martani ga fallasa. Maɓallin tls-auth da ya zubo ba ya fallasa maɓallan zaman, amma yana ba mai kai hari damar shigar da zirga-zirgar tashar sarrafawa, don haka har yanzu ana buƙatar maye gurbinsa. Maɓallin secret da ya zubo ya fi muni, domin shine kayan da ke kare bayanan da kansu.

Abin da bita ta tsaro ya kamata ta rubuta

Rubuta abubuwa uku daban: kariyar tashar bayanai da aka amince da ita, kariyar tashar sarrafawa da yadda takwarorina ke tabbatar da juna. Layi kamar data-ciphers AES-256-GCM yana bayyana na farko ne kawai, kuma rahoton da ya tsaya a nan ba zai iya amsa ko an kare tashar sarrafawa kwata-kwata ba. Fayil ɗin maɓalli na tsaye yana cikin rukuni na biyu idan an yi amfani da shi tare da tls-auth ko tls-crypt, kuma a cikin babu ɗaya idan ba a yi amfani da shi ba. Masu bita da suke haɗa rukunan suna neman babban fayil ɗin maɓalli yayin da abin da suke so shine ƙarfin ɓoye.

Idan an fallasa fayil ɗin, juya shi kuma sake rarraba shi ta tashar da aka amince. Ƙara haruffa ga sirrin da aka lalata ba juyawa ba ne, kuma yana barin kayan da aka fallasa suna aiki.

Riƙe rikodin juyawa tare da bayanin martabar da ya shafi. Bita na gaba zai tambaya wane maɓalli ya kare wane lokaci, kuma banner ɗin ba zai amsa hakan ba.