跳到主要內容
AI News HubLIVE
來源內容 · 翻譯待補全1 分鐘閱讀

待翻譯:Show HN: A static personal site with post-quantum signed and encrypted URLs

文章摘要

AI 服務暫時不可用,以下為來源摘要,待恢復後補全翻譯:Hi everyone!! I made my own personal static website inspired by my friend's Carrd. I ended up implementing a browser-native post-quantum PGP-like system: signed and encrypted messages are carried directly in URL hash fr…

來源Hacker News AI作者: cryptographical
待翻譯:Show HN: A static personal site with post-quantum signed and encrypted URLs
報告錯誤

更正渠道尚未開通,可先複製下方文章資訊留存。

查看更正說明
直接讀正文

AI 服務暫時不可用,以下為來源正文,待恢復後補全翻譯。

Hi everyone!! I made my own personal static website inspired by my friend's Carrd. I ended up implementing a browser-native post-quantum PGP-like system: signed and encrypted messages are carried directly in URL hash fragments, so the user does not need any accounts, specialized software, or key uploads. Once installed as a PWA, verification and decryption can run fully offline; the only thing that needs to reach the device is the URL itself. Clicking a link with a signed message automatically verifies the signature against the site’s pinned public key. For encrypted messages, clicking the link and entering the passphrase unlocks the payload. I have tested the functionality from an iPad Air 2 to a Ryzen 9 9950X. I chose UOV and Classic McEliece because both schemes have very large public keys but tiny transmitted payloads. The site hosts the public keys as static binary assets, so the large keys do not increase the size of each shared message link. UOV adds a 96-byte signature, while Classic McEliece adds a 96-byte KEM ciphertext; the remaining URL size is mostly the compressed message itself and symmetric-encryption overhead. Additionally, I implemented a signed theme feature inspired by Owala. As my website only uses 5 color hexes total, I can sign official colorways with UOV and encode the signed colorway directly into a URL that verifies and applies it in one click. Anyone can edit the theme locally, but they cannot distribute a modified colorway as one of my official themes because diaryof.me verifies the UOV signature against my pinned public key before applying it. Schemes used: Symmetric encryption: XChaCha20-Poly1305-SIV (libsodium) Password KDF: Argon2id (libsodium) KEM: Classic McEliece 348864f Signatures: UOV-pkc-Is This is my personal diary, and I dedicate it to my irl best friend. I'd love to hear any feedback. Enjoy!

展開要點與分析

文章情報

工程師中級

要點

  • AI 服務暫時不可用,系統已先保留來源內容與降級元數據。
  • Hi everyone!! I made my own personal static website inspired by my friend's Carrd. I ended up implementing a browser-native post-quantum PGP-like system: signed and encrypted mess…

要點與分析由自動化流程生成,可能有誤,請結合原始來源核實。