*Empty MediaWiki Message*

This commit is contained in:
Vater 2015-08-30 21:56:03 +00:00
parent ce28ea295a
commit 9336824324

View File

@ -1,18 +1,15 @@
[https://wiki.c3d2.de/Echt_Dezentrales_Netz/ Deutsch]
[[Echt Dezentrale Netz | Deutsch]]
: '''We COLLECT and TEST approaches to BUILD secure and private communication.'''
== Welcome ==
This is the official wiki of the research and software project '''''[[Echt Dezentrales Netz|EDN]]''''' ([[Echt Dezentrales Netz]] - real decentralized network).
We verify the applicability of existing technologies (see [[Echt Dezentrales Netz#Recherche | Recherche]]) and aim to integrate them into a comprehensive product.
: '''A Software packet for secure and private routing that includes several [[Echt_Dezentrales_Netz#Services | services]].<br>
'''
In a way it is a child of the [[Echt_Dezentrales_Netz#Recherche | regarded]] projects
that inherits its best qualities to fullfil its purpose.
: '''A Software packet for secure and private routing that includes several [[Echt Dezentrales Netz#Services | services]].'''
In a way it is a child of the [[Echt Dezentrales Netz#Recherche | regarded]] projects that inherits its best qualities to fulfill its purpose.
== News ==
@ -20,9 +17,7 @@ that inherits its best qualities to fullfil its purpose.
* The newest[[#Contribute | challenges]].
* We have a [[Echt Dezentrales Netz/Projekttagebuch | project diary]].
'''''Note''': .onion adresses can be accessed via [https://www.torproject.org/projects/torbrowser.html.en TOR Browser Bundle]''
; Note: .onion addresses can be accessed via [https://www.torproject.org/projects/torbrowser.html.en TOR Browser Bundle]''
== Background ==
@ -31,13 +26,13 @@ Today's communication infrastructure is predominantly centralized.
However, this makes surveillance and manipulation of arbitrary digital communications easier.
These means can be abused - and were abused - not only by dictatorships but also by democratic countries and international companies.
: There are indeed solutions like Tor or PGP which can partially patch the shortcomings of the infrastructure, but each user has to take care of that it for herself. Anonymisation and encryption are not in the standard configuration.
: There are indeed solutions like Tor or PGP which can partially patch the shortcomings of the infrastructure, but each user has to take care of that it for herself. Anonymization and encryption are not in the standard configuration.
A penal action against these secret processes is nearly impossible, starting with the problem that they are not even detected by the affected parties.
This status quo endangers our democracy.
However, it can be countered in different ways.
The following is a technical approach:
To repurpose and to extend existing digital communications infrastructure to make surveillance more cumbersome, especially through decentralisation.
: To repurpose and to extend existing digital communications infrastructure to make surveillance more cumbersome, especially through decentralization.
== Goal ==
@ -46,7 +41,7 @@ The communication potential in densely inhabited regions can be guessed watching
* http://motherboard.vice.com/blog/this-is-what-wi-fi-would-look-like-if-we-could-see-it
* http://socialtimes.com/cell-phone-signals-mapping-turns-the-world-into-a-psychedelic-landscape_b194303
'''Our goal is to use the existing resources to form a difficult-to-monitor cellphone/router/computer network.''' There are plenty of software solutions ([[Echt_Dezentrales_Netz#Recherche|Recherche]]) with the goal of protecting the privacy of its users. Preexisting structures are to be evaluated and combined into such a network. The communication should run, first and foremost, on top of a combination of WiFi, copper and fibre optics, but we also consider Bluetooth, [http://www.cringely.com/2014/05/15/nsa-help-kill-uwb/ Ultra Wideband (UWB)], [http://ronja.twibright.com/installations.php red light], ukw and satelite uplinks - shortly all allowed frequencies and ways.
'''Our goal is to use the existing resources to form a difficult-to-monitor cellphone/router/computer network.''' There are plenty of software solutions ([[Echt Dezentrales Netz#Recherche|Recherche]]) with the goal of protecting the privacy of its users. Preexisting structures are to be evaluated and combined into such a network. The communication should run, first and foremost, on top of a combination of WiFi, copper and fibre optics, but we also consider Bluetooth, [http://www.cringely.com/2014/05/15/nsa-help-kill-uwb/ Ultra Wideband (UWB)], [http://ronja.twibright.com/installations.php red light], ukw and satellite uplinks - shortly all allowed frequencies and ways.
The following criteria should be met:
@ -54,23 +49,22 @@ The following criteria should be met:
; The communication is:
:; decentralized: in other words: distributed or p2p. There is no server through which the main communication streams have to go through and which could collect data to de-anonymise other nodes.
:; decentralized: in other words: distributed or p2p. There is no server through which the main communication streams have to go through and which could collect data to de-anonymize other nodes.
:; encrypted end-to-end: standard, except for emergency calls
:; Using Perfect Forward Secrecy: session keys should be used. Even future Forward Secrecy shall be tested.
:; authenticated: The source is authenticated.
:; anonymised: The nodes know as little as possible about each other. Only neighbouring nodes know each other. Alias meta-data-protection.
:; anonymized: The nodes know as little as possible about each other. Only neighboring nodes know each other. Alias meta-data-protection.
'''''where it can be achieved for the specific services to function properly.'''''
; Where it can be achieved for the specific services to function properly.
=== Secondary Criteria ===
# The network shall be as '''performant''' as it can be considering the grade of security for the specific services
# The network shall be as '''performing''' as it can be considering the grade of security for the specific services
# the user interface is '''intuitively usable'''
# '''scalability'''
# The infrastructure enables caching and intelligent distribution of public data.
#: -> Knowledge representation and file sharing in P2P networks
# The solution is '''holistic''', which means it encompasses all layers of the OSI model, i.e. from the strongly delay and packet loss tolerant physical layer through an automatically configured, encrypted and anonymising middle layer to services on the upper layer such as social networking, P2P transfer or generic data storage. However it can also be structured in a different way.
# The solution is '''holistic''', which means it encompasses all layers of the OSI model, i.e. from the strongly delay and packet loss tolerant physical layer through an automatically configured, encrypted and anonymizing middle layer to services on the upper layer such as social networking, P2P transfer or generic data storage. However it can also be structured in a different way.
# The network is '''open''': that means everyone can easily participate
# The code must be:
#* logically '''verified'''
@ -97,7 +91,7 @@ The following criteria should be met:
! !! public !! personal/private !!
|-
! Text
| Chat of local (neighbouring) nodes || '''To a single person:''' Chat, Email or SMS || '''To multiple people:''' Chat or mailing list
| Chat of local (neighboring) nodes || '''To a single person:''' Chat, Email or SMS || '''To multiple people:''' Chat or mailing list
|-
! Audio/Telephony/Video
| Call among locally restricted nodes || normal call || conference call
@ -106,6 +100,7 @@ The following criteria should be met:
| ?
| ?
| ?
|-
|}
* crypto currency/ pay system
@ -120,11 +115,7 @@ The following criteria should be met:
Don't hesitate to '''add projects''', that you feel are missing here.
Thank you :)
'''Current list of relevant projects'''
; Current list of relevant projects:
* [http://netsukuku.freaknet.org/ '''Netsukuku''']
* [https://projectmeshnet.org '''cjdns, Hyperboria & the Project Meshnet''']: encrypted IPv6 network using public-key cryptography for address allocation and a distributed hash table for routing
* [https://gnunet.org/ '''Gnunet''']: Secure, fully decentralized P2P network, extensible component-oriented framework, a possible future Internet architecture.
@ -162,11 +153,9 @@ Thank you :)
== Threat model ==
We presume a global active attacker that does automated intrusion such
as traffic [http://7ywdkxkpi7kk55by.onion/trac/wiki/DeanonymizingTheInternet shaping].
We draw the line before targeted operations.
We presume a global active attacker that does automated intrusion such as traffic [http://7ywdkxkpi7kk55by.onion/trac/wiki/DeanonymizingTheInternet shaping]. We draw the line before targeted operations.
== Who benefits ? ==
== Who benefits? ==
* '''Average citizens''' because they regain parts of their privacy, a basic civil right that ensures a proper functioning democracy
* '''Government institutions and companies''' because our product will make espionage and cyber attacks a lot harder
@ -187,9 +176,7 @@ You can help
* developing concept ideas how EDN could be realised using what is [http://7ywdkxkpi7kk55by.onion/trac/wiki/ProjectsFeatureList there]
* accepting another [http://7ywdkxkpi7kk55by.onion/trac/report/1 task-challenge]
<br>
'''''Note''': .onion adresses can be accessed via [https://www.torproject.org/projects/torbrowser.html.en TOR Browser Bundle]''
; Note: .onion addresses can be accessed via [https://www.torproject.org/projects/torbrowser.html.en TOR Browser Bundle]''
== Contact ==
@ -197,9 +184,8 @@ Subscribe to the ''encrypted'' EDN-mailinglist
* get the list's public key by [mailto:edn-sendkey@schleuder.notraces.net sending] an empty unsigned message
* send your public key to the [mailto:edn@schleuder.notraces.net EDN-mailinglist]
'''if you want to add anonymity for meta-data-protection:'''
* make sure you have an emailadress that
; if you want to add anonymity for meta-data-protection:
* make sure you have an email address that
** is not connected to your name
** never used your name or other identifiers in an unencrypted email
** ''only accessed the mailbox via TOR''