AES & ChaCha20 Sirin/Furin – Qalab Sirin Online
Qalabkan AES & ChaCha20 Sirin/Furin ee biraawsarka ku salaysan wuxuu wax ku siriyaa ama ku furiyaa AES-GCM, AES-CBC, AES-CTR, ama ChaCha20-Poly1305. Bixi fure hex, Base64, ama UTF-8 ah, ama isticmaal eray sir ah si aad u soo saarto fure 256-bit ah oo leh PBKDF2-SHA256 (600,000 wareeg); IV waxaa loo isticmaalaa sida salt. Dooro IV toos ah ama gacanta, ikhtiyaar ahaan ku hor dhig ciphertext, oo ku dar AAD hababka AEAD.
Qalabka AES & ChaCha20 Sirin/Furin waa goob shaqo oo biraawsar ku salaysan oo wax lagu siriyo laguna furo afar sir oo symmetric ah: AES-GCM, AES-CBC, AES-CTR, iyo ChaCha20-Poly1305. Wuxuu taageeraa furayaal cayriin oo la bixiyo sida hex, Base64, ama UTF-8, iyo sidoo kale erayo sir ah. Isticmaal si aad u sahamiso dejinta sirta ama aad sirin iyo furin si toos ah ugu qabato biraawsarkaaga.
AES-GCM iyo ChaCha20-Poly1305 waa habab AEAD: waxay xaqiijiyaan xogta sidoo kale way siriyaan. Hababkan, waxaad bixin kartaa ikhtiyaari authenticated-associated-data (AAD), oo aan la sirin laakiin la xaqiijiyo inta lagu jiro furitaanka. AES-CBC wuxuu isticmaalaa PKCS7 padding, AES-CTR-na waa hab durdur ah. Eray sir ah waxaa loo isticmaalaa in lagu soo saaro fure 256-bit ah oo leh PBKDF2-SHA256 oo leh 600,000 wareeg, iyadoo IV loo isticmaalayo sida salt.
IV waxaa si toos ah loo soo saari karaa ama gacanta lagu geli karaa. Waxaad sidoo kale ku hor dhigi kartaa ciphertext si uu ula safro fariinta. Doorashadani waxay kaa caawinayaan inaad doorato sida gelinta sirinta loo diyaariyo iyo sida ciphertext ka soo baxa loo baakadeeyo. Qalabku wuxuu qabtaa sirin iyo furin labadaba, sidaa darteed waxaad u isticmaali kartaa inaad kormeerto dhaqanka sirta ama aad la shaqeyso ciphertext jira marka aad haysato furaha iyo dejinta lagama maarmaanka ah.
Qalabku wuxuu si maxalli ah ugu socdaa biraawsarkaaga isagoo isticmaalaya @noble/ciphers iyo WebCrypto. Gelintaada waxaa lagu farsameeyaa qalabkaaga lamana soo geliyo, lama kaydiyo, lamana diro server. Kadib marka boggu soo shubmo, wuu shaqeeyaa offline iyadoon ku tiirsanayn server, taas oo ka dhigaysa mid faa'iido leh marka aad rabto inaad hawlaha sirinta iyo furinta ka dhigto kuwo gaar ah.
Horumariyeyaasha iyo injineerada DevOps waxay u isticmaali karaan goobta shaqada si ay u bartaan hababka sirta la taageeray, u tijaabiyaan dejinta sirinta, ama u soo saaraan ugana kormeeraan soosaarka sirta iyagoon ku tiirsanayn adeeg farsamayn fog. Doorashadiisu sidoo kale waxay ka dhigaysaa mid ku habboon isbarbardhigga socodka shaqada furaha cayriinka iyo erayga sirta.
Tallaabo 1: Geli waxa aad rabto inaad sirto ama furto. Bixi fure hex, Base64, ama UTF-8 ah, ama geli eray sir ah si aad fure u soo saarto.
Tallaabo 2: Dooro AES-GCM, AES-CBC, AES-CTR, ama ChaCha20-Poly1305. AES-CBC wuxuu isticmaalaa PKCS7 padding, halka AES-CTR uu u shaqeeyo sidii hab durdur ah.
Tallaabo 3: Deji IV in si toos ah loo soo saaro ama gacanta geli. Waxaad sidoo kale dooran kartaa inaad IV-ga ku hor dhigto ciphertext si uu ula safro fariinta la siriyey.
Tallaabo 4: Loogu talagalay AES-GCM ama ChaCha20-Poly1305, ikhtiyaar ahaan geli authenticated-associated-data (AAD). Lama siriyo, laakiin waa la xaqiijiyaa inta lagu jiro furitaanka.
Tallaabo 5: Orod sirinta ama furitaanka oo koobi soosaarka ka soo baxa.
Isticmaalka: Hubi soosaarka sirta qiime laguu siiyey adigoo ku furaya fure iyo dejin u dhigma.
Isticmaalka: Tijaabi gelin la yaqaan oo isbarbardhig natiijada sirinta marka aad baranayso sida algorithm la taageeray u dhaqmo.
Isticmaalka: Wax ku siri ama ku furi si maxalli ah halkii aad ka geli lahayd bog saddexaad oo xogta u dira server.
Isticmaalka: Isbarbardhig AES-GCM, AES-CBC, AES-CTR, iyo ChaCha20-Poly1305 hawl horumarin ama barasho adigoo isticmaalaya isla gelinta.
Isticmaalka: Isku day soo-saarista furaha eray-sir ku salaysan marka aad u baahan tahay inaad la shaqeyso eray sir ah halkii aad ka bixin lahayd fure cayriin.
Isticmaalka: Diyaarso fariin la siriyey oo IV-keedu ku hor yaallo ciphertext si IV-gu ula safri karo.