Ockam用于端到端加密的Rust庫(kù)

Ockam 是一個(gè)?Rust 和 Elixir 庫(kù)，用于端到端加密、相互認(rèn)證、安全通信?，F(xiàn)代分布式應(yīng)用程序中的數(shù)據(jù)很少通過(guò)單個(gè)點(diǎn)對(duì)點(diǎn)傳輸連接進(jìn)行交換。應(yīng)用程序消息在到達(dá)最終目的地之前，通常會(huì)通過(guò)復(fù)雜的、多跳、多協(xié)議的路由——跨數(shù)據(jù)中心、通過(guò)隊(duì)列和緩存、通過(guò)網(wǎng)關(guān)和代理。

Ockam 是一套編程庫(kù)和基礎(chǔ)設(shè)施，它使我們的應(yīng)用程序可以輕松地保證數(shù)據(jù)的端到端完整性、真實(shí)性和機(jī)密性。

特征

• 端到端加密、相互認(rèn)證的安全通道。
• 密鑰的建立、輪換和撤銷(xiāo)。
• 由隱私上下文隔離的身份配置文件。
• 基于屬性的訪問(wèn)控制
• 適用于各種操作環(huán)境、傳輸協(xié)議和加密硬件的附加組件。
• 多種語(yǔ)言的庫(kù) -?Rust、Elixir。

Ockam

1. 安裝 Rust

   curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh

2. 設(shè)置一個(gè)新的 cargo 項(xiàng)目以開(kāi)始。

   cargo new --lib hello_ockam && cd hello_ockam && mkdir examples &&
     echo 'ockam = "*"' >> Cargo.toml && cargo build

3. 在examples/hello.rs創(chuàng)建一個(gè)文件并將以下代碼片段復(fù)制到其中。

   // examples/hello.rs
   
   use ockam::{route, Context, Entity, Result, TrustEveryonePolicy, Vault};
   
   #[ockam::node]
   async fn main(mut ctx: Context) -> Result<()> {
       // Create a Vault to safely store secret keys for Alice and Bob.
       let vault = Vault::create(&ctx).await?;
   
       // Create an Entity to represent Bob.
       let mut bob = Entity::create(&ctx, &vault).await?;
   
       // Create a secure channel listener for Bob that will wait for requests to
       // initiate an Authenticated Key Exchange.
       bob.create_secure_channel_listener("bob", TrustEveryonePolicy).await?;
   
       // Create an entity to represent Alice.
       let mut alice = Entity::create(&ctx, &vault).await?;
   
       // As Alice, connect to Bob's secure channel listener and perform an
       // Authenticated Key Exchange to establish an encrypted secure channel with Bob.
       let channel = alice.create_secure_channel("bob", TrustEveryonePolicy).await?;
   
       // Send a message, ** THROUGH ** the secure channel,
       // to the "app" worker on the other side.
       //
       // This message will automatically get encrypted when it enters the channel
       // and decrypted just before it exits the channel.
       ctx.send(route![channel, "app"], "Hello Ockam!".to_string()).await?;
   
       // Wait to receive a message for the "app" worker and print it.
       let message = ctx.receive::<String>().await?;
       println!("App Received: {}", message); // should print "Hello Ockam!"
   
       // Stop all workers, stop the node, cleanup and return.
       ctx.stop().await
   }
   

4. 運(yùn)行示例

   cargo run --example hello