I2P_Developers/i2p.www
3
0
Fork 5
Code Issues 27 Pull Requests Actions 2 Packages Projects Releases Wiki Activity

Reformatted docs/how/intro text (more uniform, culled extra whitespace)

Browse Source
This commit is contained in:
str4d
2012-09-17 06:34:02 +00:00
parent f35c2fae60
commit 82ef323039
1 changed files with 140 additions and 111 deletions
Download Patch File Download Diff File Expand all files Collapse all files

227
i2p2www/pages/site/docs/how/intro.html
View File

@ -4,159 +4,188 @@
<h2>{% trans %}A Gentle Introduction to How I2P Works{% endtrans %}</h2> <h2>{% trans %}A Gentle Introduction to How I2P Works{% endtrans %}</h2>
<p>{% trans %}I2P is a project to build, deploy, and maintain a network supporting secure and anonymous <p>{% trans -%}
I2P is a project to build, deploy, and maintain a network supporting secure and anonymous
communication. People using I2P are in control of the tradeoffs between anonymity, reliability, communication. People using I2P are in control of the tradeoffs between anonymity, reliability,
bandwidth usage, and latency. There is no central point in the network on which pressure can be bandwidth usage, and latency. There is no central point in the network on which pressure can be
exerted to compromise the integrity, security, or anonymity of the system. The network supports exerted to compromise the integrity, security, or anonymity of the system. The network supports
dynamic reconfiguration in response to various attacks, and has been designed to make use of dynamic reconfiguration in response to various attacks, and has been designed to make use of
additional resources as they become available. Of course, all aspects of the network are open additional resources as they become available. Of course, all aspects of the network are open and
and freely available.{% endtrans %}</p> freely available.
{%- endtrans %}</p>
<p>{% trans %}Unlike many other anonymizing networks, I2P doesn't try to provide anonymity by hiding the <p>{% trans -%}
originator of some communication and not the recipient, or the other way around. I2P is designed Unlike many other anonymizing networks, I2P doesn't try to provide anonymity by hiding the
to allow peers using I2P to communicate with each other anonymously &mdash; both sender and recipient originator of some communication and not the recipient, or the other way around. I2P is designed to
allow peers using I2P to communicate with each other anonymously &mdash; both sender and recipient
are unidentifiable to each other as well as to third parties. For example, today there are both are unidentifiable to each other as well as to third parties. For example, today there are both
in-I2P web sites (allowing anonymous publishing / hosting) as well as HTTP proxies to the normal in-I2P web sites (allowing anonymous publishing / hosting) as well as HTTP proxies to the normal web
web (allowing anonymous web browsing). Having the ability to run servers within I2P is essential, (allowing anonymous web browsing). Having the ability to run servers within I2P is essential, as it
as it is quite likely that any outbound proxies to the normal Internet will be monitored, disabled, is quite likely that any outbound proxies to the normal Internet will be monitored, disabled, or
or even taken over to attempt more malicious attacks.{% endtrans %}</p> even taken over to attempt more malicious attacks.
{%- endtrans %}</p>
<p>{% trans i2ptunnel=site_url('docs/applications/i2ptunnel') -%} <p>{% trans i2ptunnel=site_url('docs/applications/i2ptunnel') -%}
The network itself is message oriented - it is essentially a secure and anonymous IP layer, The network itself is message oriented - it is essentially a secure and anonymous IP layer, where
where messages are addressed to cryptographic keys (Destinations) and can be significantly larger messages are addressed to cryptographic keys (Destinations) and can be significantly larger than IP
than IP packets. Some example uses of the network include "eepsites" (webservers hosting normal web packets. Some example uses of the network include "eepsites" (webservers hosting normal web
applications within I2P), a BitTorrent client ("I2PSnark"), applications within I2P), a BitTorrent client ("I2PSnark"), or a distributed data store. With the
or a distributed data store. With the help of the <a href="{{ i2ptunnel }}">I2PTunnel</a> application, help of the <a href="{{ i2ptunnel }}">I2PTunnel</a> application, we are able to stream traditional
we are able to stream traditional TCP/IP applications over I2P, such as SSH, IRC, a squid proxy, and TCP/IP applications over I2P, such as SSH, IRC, a squid proxy, and even streaming audio. Most people
even streaming audio. Most people will not use I2P directly, or even need to know they're using it. will not use I2P directly, or even need to know they're using it. Instead their view will be of one
Instead their view will be of one of the I2P enabled applications, or perhaps as a little controller of the I2P enabled applications, or perhaps as a little controller app to turn on and off various
app to turn on and off various proxies to enable the anonymizing functionality.{% endtrans %}</p> proxies to enable the anonymizing functionality.
{%- endtrans %}</p>
<p>{% trans threatmodel=site_url('docs/how/threatmodel') -%} <p>{% trans threatmodel=site_url('docs/how/threatmodel') -%}
An essential part of designing, developing, and testing an anonymizing network is to define the An essential part of designing, developing, and testing an anonymizing network is to define the <a
<a href="{{ threatmodel }}">threat model</a>, since there is no such thing as "true" anonymity, just href="{{ threatmodel }}">threat model</a>, since there is no such thing as "true" anonymity, just
increasingly expensive costs to identify someone. Briefly, I2P's intent is to allow people to communicate increasingly expensive costs to identify someone. Briefly, I2P's intent is to allow people to
in arbitrarily hostile environments by providing good anonymity, mixed in with sufficient cover communicate in arbitrarily hostile environments by providing good anonymity, mixed in with
traffic provided by the activity of people who require less anonymity. This way, some users can avoid sufficient cover traffic provided by the activity of people who require less anonymity. This way,
detection by a very powerful adversary, while others will try to evade a weaker entity, some users can avoid detection by a very powerful adversary, while others will try to evade a weaker
<i>all on the same network</i>, where each one's messages are essentially indistinguishable from the entity, <i>all on the same network</i>, where each one's messages are essentially indistinguishable
others.{% endtrans %}</p> from the others.
{%- endtrans %}</p>
<h2>{% trans %}Why?{% endtrans %}</h2> <h2>{% trans %}Why?{% endtrans %}</h2>
<p>{% trans networkcomparisons=site_url('docs/how/networkcomparisons') -%} <p>{% trans networkcomparisons=site_url('docs/how/networkcomparisons') -%}
There are a multitude of reasons why we need a system to support There are a multitude of reasons why we need a system to support anonymous communication, and
anonymous communication, and everyone has their own personal rationale. There are many everyone has their own personal rationale. There are many <a href="{{ networkcomparisons }}">other
<a href="{{ networkcomparisons }}">other efforts</a> working on finding ways to provide varying degrees of efforts</a> working on finding ways to provide varying degrees of anonymity to people through the
anonymity to people through the Internet, but we could not find any that met our needs or threat Internet, but we could not find any that met our needs or threat model.
model.{% endtrans %}</p> {%- endtrans %}</p>
<h2>{% trans %}How?{% endtrans %}</h2> <h2>{% trans %}How?{% endtrans %}</h2>
<p>{% trans tunnelrouting=site_url('docs/how/tunnelrouting'), netdb=site_url('docs/how/networkdatabase') -%} <p>{% trans tunnelrouting=site_url('docs/how/tunnelrouting'), netdb=site_url('docs/how/networkdatabase') -%}
The network at a glance is made up of a set of nodes ("routers") with a number of unidirectional The network at a glance is made up of a set of nodes ("routers") with a number of unidirectional
inbound and outbound virtual paths ("tunnels", as outlined on the <a href="{{ tunnelrouting }}">tunnel routing</a> page). inbound and outbound virtual paths ("tunnels", as outlined on the <a href="{{ tunnelrouting
Each router is identified by a cryptographic RouterIdentity which is typically long lived. These routers }}">tunnel routing</a> page). Each router is identified by a cryptographic RouterIdentity which is
communicate with each other through existing transport mechanisms (TCP, UDP, etc), passing various typically long lived. These routers communicate with each other through existing transport
messages. Client applications have their own cryptographic identifier ("Destination") which enables it mechanisms (TCP, UDP, etc), passing various messages. Client applications have their own
to send and receive messages. These clients can connect to any router and authorize the temporary cryptographic identifier ("Destination") which enables it to send and receive messages. These
allocation ("lease") of some tunnels that will be used for sending and receiving messages through the clients can connect to any router and authorize the temporary allocation ("lease") of some tunnels
network. I2P has its own internal <a href="{{ netdb }}">network database</a> (using a modification of that will be used for sending and receiving messages through the network. I2P has its own internal
the Kademlia algorithm) for distributing routing and contact information securely.{% endtrans %}</p> <a href="{{ netdb }}">network database</a> (using a modification of the Kademlia algorithm) for
distributing routing and contact information securely.
{%- endtrans %}</p>
<div class="box" style="text-align:center;"><img src="{{ url_for('static', filename='images/net.png') }}" alt="{% trans %}Network topology example{% endtrans %}" title="{% trans %}Network topology example{% endtrans %}" /></div> <div class="box" style="text-align:center;"><img src="{{ url_for('static', filename='images/net.png') }}" alt="{% trans %}Network topology example{% endtrans %}" title="{% trans %}Network topology example{% endtrans %}" /></div>
<p>{% trans %}In the above, Alice, Bob, Charlie, and Dave are all running routers with a single Destination on their <p>{% trans -%}
local router. They each have a pair of 2-hop inbound tunnels per destination (labeled 1, 2, 3, 4, 5 and 6), In the above, Alice, Bob, Charlie, and Dave are all running routers with a single Destination on
and a small subset of each of those router's outbound tunnel pool is shown with 2-hop outbound tunnels. their local router. They each have a pair of 2-hop inbound tunnels per destination (labeled 1, 2, 3,
For simplicity, Charlie's inbound tunnels and Dave's outbound tunnels are not shown, nor are the rest of 4, 5 and 6), and a small subset of each of those router's outbound tunnel pool is shown with 2-hop
each router's outbound tunnel pool (typically stocked with a few tunnels at a time). When Alice and Bob outbound tunnels. For simplicity, Charlie's inbound tunnels and Dave's outbound tunnels are not
talk to each other, Alice sends a message out one of her (pink) outbound tunnels targeting one of Bob's shown, nor are the rest of each router's outbound tunnel pool (typically stocked with a few tunnels
(green) inbound tunnels (tunnel 3 or 4). She knows to send to those tunnels on the correct router by querying the at a time). When Alice and Bob talk to each other, Alice sends a message out one of her (pink)
network database, which is constantly updated as new leases are authorized and old ones expire.{% endtrans %}</p> outbound tunnels targeting one of Bob's (green) inbound tunnels (tunnel 3 or 4). She knows to send
to those tunnels on the correct router by querying the network database, which is constantly updated
as new leases are authorized and old ones expire.
{%- endtrans %}</p>
<p>{% trans garlicrouting=site_url('docs/how/garlicrouting') -%} <p>{% trans garlicrouting=site_url('docs/how/garlicrouting') -%}
If Bob wants to reply to Alice, he simply goes through the same process - send a message out one of his If Bob wants to reply to Alice, he simply goes through the same process - send a message out one of
outbound tunnels targeting one of Alice's inbound tunnels (tunnel 1 or 2). To make things easier, most his outbound tunnels targeting one of Alice's inbound tunnels (tunnel 1 or 2). To make things
messages sent between Alice and Bob are <a href="{{ garlicrouting }}">garlic</a> wrapped, bundling the easier, most messages sent between Alice and Bob are <a href="{{ garlicrouting }}">garlic</a>
sender's own current lease information so that the recipient can reply immediately without having to look wrapped, bundling the sender's own current lease information so that the recipient can reply
in the network database for the current data.{% endtrans %}</p> immediately without having to look in the network database for the current data.
{%- endtrans %}</p>
<p>{% trans peerselection=site_url('docs/how/peerselection') -%} <p>{% trans peerselection=site_url('docs/how/peerselection') -%}
To deal with a wide range of attacks, I2P is fully distributed with no centralized resources - and To deal with a wide range of attacks, I2P is fully distributed with no centralized resources - and
hence there are no directory servers keeping statistics regarding the performance and reliability of hence there are no directory servers keeping statistics regarding the performance and reliability of
routers within the network. As such, each router must keep and maintain profiles of various routers routers within the network. As such, each router must keep and maintain profiles of various routers
and is responsible for selecting appropriate peers to meet the anonymity, performance, and reliability and is responsible for selecting appropriate peers to meet the anonymity, performance, and
needs of the users, as described in the <a href="{{ peerselection }}">peer selection</a> page.{% endtrans %}</p> reliability needs of the users, as described in the <a href="{{ peerselection }}">peer selection</a>
page.
{%- endtrans %}</p>
<p>{% trans crypto=site_url('docs/how/cryptography'), elgamalaes=site_url('docs/how/elgamalaes') -%} <p>{% trans crypto=site_url('docs/how/cryptography'), elgamalaes=site_url('docs/how/elgamalaes') -%}
The network itself makes use of a significant number of <a href="{{ cryptography }}">cryptographic techniques and algorithms</a> - The network itself makes use of a significant number of <a href="{{ cryptography }}">cryptographic
a full laundry list includes 2048bit ElGamal encryption, 256bit AES in CBC mode with PKCS#5 padding, techniques and algorithms</a> - a full laundry list includes 2048bit ElGamal encryption, 256bit AES
1024bit DSA signatures, SHA256 hashes, 2048bit Diffie-Hellman negotiated connections with station to in CBC mode with PKCS#5 padding, 1024bit DSA signatures, SHA256 hashes, 2048bit Diffie-Hellman
station authentication, and <a href="{{ elgamalaes }}">ElGamal / AES+SessionTag</a>.{% endtrans %}</p> negotiated connections with station to station authentication, and <a href="{{ elgamalaes
}}">ElGamal / AES+SessionTag</a>.
{%- endtrans %}</p>
<p>{% trans %}Content sent over I2P is encrypted through three layers garlic encryption (used to verify the delivery of the message to <p>{% trans -%}
the recipient), tunnel encryption (all messages passing through a tunnel is encrypted by the tunnel Content sent over I2P is encrypted through three layers garlic encryption (used to verify the
gateway to the tunnel endpoint), and inter router transport layer encryption (e.g. the TCP transport delivery of the message to the recipient), tunnel encryption (all messages passing through a tunnel
uses AES256 with ephemeral keys).{% endtrans %}</p> is encrypted by the tunnel gateway to the tunnel endpoint), and inter router transport layer
encryption (e.g. the TCP transport uses AES256 with ephemeral keys).
{%- endtrans %}</p>
<p>{% trans %}End-to-end (I2CP) encryption (client application to server application) was disabled in I2P release 0.6; <p>{% trans -%}
end-to-end (garlic) encryption (I2P client router to I2P server router) from Alice's router "a" to Bob's router "h" remains. End-to-end (I2CP) encryption (client application to server application) was disabled in I2P release
Notice the different use of terms! All data from a to h is end-to-end encrypted, but the I2CP connection 0.6; end-to-end (garlic) encryption (I2P client router to I2P server router) from Alice's router "a"
between the I2P router and the applications is not end-to-end encrypted! to Bob's router "h" remains. Notice the different use of terms! All data from a to h is end-to-end
A and h are the routers of Alice and Bob, while Alice and Bob in following chart are the applications running atop of I2P.{% endtrans %}</p> encrypted, but the I2CP connection between the I2P router and the applications is not end-to-end
encrypted! A and h are the routers of Alice and Bob, while Alice and Bob in following chart are the
applications running atop of I2P.
{%- endtrans %}</p>
<div class="box" style="text-align:center;"><img src="{{ url_for('static', filename='images/endToEndEncryption.png') }}" alt="{% trans %}End to end layered encryption{% endtrans %}" title="{% trans %}End to end layered encryption{% endtrans %}" /></div> <div class="box" style="text-align:center;"><img src="{{ url_for('static', filename='images/endToEndEncryption.png') }}" alt="{% trans %}End to end layered encryption{% endtrans %}" title="{% trans %}End to end layered encryption{% endtrans %}" /></div>
<p>{% trans crypto=site_url('docs/how/cryptography') -%} <p>{% trans crypto=site_url('docs/how/cryptography') -%}
The specific use of these algorithms are outlined <a href="{{ cryptography }}">elsewhere</a>.{% endtrans %}</p> The specific use of these algorithms are outlined <a href="{{ cryptography }}">elsewhere</a>.
{%- endtrans %}</p>
<p>{% trans %}The two main mechanisms for allowing people who need strong anonymity to use the network are <p>{% trans -%}
explicitly delayed garlic routed messages and more comprehensive tunnels to include support for pooling The two main mechanisms for allowing people who need strong anonymity to use the network are
and mixing messages. These are currently planned for release 3.0, but garlic routed messages with no explicitly delayed garlic routed messages and more comprehensive tunnels to include support for
delays and FIFO tunnels are currently in place. Additionally, the 2.0 release will allow people to set pooling and mixing messages. These are currently planned for release 3.0, but garlic routed messages
up and operate behind restricted routes (perhaps with trusted peers), as well as the deployment of more with no delays and FIFO tunnels are currently in place. Additionally, the 2.0 release will allow
flexible and anonymous transports.{% endtrans %}</p> people to set up and operate behind restricted routes (perhaps with trusted peers), as well as the
deployment of more flexible and anonymous transports.
{%- endtrans %}</p>
<p>{% trans netdb=site_url('docs/how/networkdatabase') -%} <p>{% trans netdb=site_url('docs/how/networkdatabase') -%}
Some questions have been raised with regards to the scalability of I2P, and reasonably so. There Some questions have been raised with regards to the scalability of I2P, and reasonably so. There
will certainly be more analysis over time, but peer lookup and integration should be bounded by will certainly be more analysis over time, but peer lookup and integration should be bounded by
<code>O(log(N))</code> due to the <a href="{{ netdb }}">network database</a>'s algorithm, while end to end <code>O(log(N))</code> due to the <a href="{{ netdb }}">network database</a>'s algorithm, while end
messages should be <code>O(1)</code> (scale free), since messages go out K hops through the outbound to end messages should be <code>O(1)</code> (scale free), since messages go out K hops through the
tunnel and another K hops through the inbound tunnel, with K no longer than 3. outbound tunnel and another K hops through the inbound tunnel, with K no longer than 3. The size of
The size of the network (N) bears no impact.{% endtrans %}</p> the network (N) bears no impact.
{%- endtrans %}</p>
<h2>{% trans %}When?{% endtrans %}</h2> <h2>{% trans %}When?{% endtrans %}</h2>
<p>{% trans roadmap=site_url('volunteer/roadmap') -%} <p>{% trans roadmap=site_url('volunteer/roadmap') -%}
I2P initially began in Feb 2003 as a proposed modification to I2P initially began in Feb 2003 as a proposed modification to <a
<a href="http://freenetproject.org">Freenet</a> to allow it to use alternate transports, such as href="http://freenetproject.org">Freenet</a> to allow it to use alternate transports, such as <a
<a href="http://java.sun.com/products/jms/index.jsp">JMS</a>, then grew into its own as an href="http://java.sun.com/products/jms/index.jsp">JMS</a>, then grew into its own as an
'anonCommFramework' in April 2003, turning into I2P in July, with code being written in earnest starting in August '03. 'anonCommFramework' in April 2003, turning into I2P in July, with code being written in earnest
I2P is currently under development, following starting in August '03. I2P is currently under development, following the <a href="{{ roadmap
the <a href="{{ roadmap }}">roadmap</a>.{% endtrans %}</p> }}">roadmap</a>.
{%- endtrans %}</p>
<h2>{% trans %}Who?{% endtrans %}</h2> <h2>{% trans %}Who?{% endtrans %}</h2>
<p>{% trans team=site_url('team') -%} <p>{% trans team=site_url('team') -%}
We have a small <a href="{{ team }}">team</a> spread around several continents, working to advance different We have a small <a href="{{ team }}">team</a> spread around several continents, working to advance
aspects of the project. We are very open to other developers who want to get involved and anyone else different aspects of the project. We are very open to other developers who want to get involved and
who would like to contribute in other ways, such as critiques, peer review, testing, writing I2P enabled anyone else who would like to contribute in other ways, such as critiques, peer review, testing,
applications, or documentation. The entire system is open source - the router and most of the SDK are writing I2P enabled applications, or documentation. The entire system is open source - the router
outright public domain with some BSD and Cryptix licensed code, while some applications like I2PTunnel and most of the SDK are outright public domain with some BSD and Cryptix licensed code, while some
and I2PSnark are GPL. Almost everything is written in Java (1.5+), though some third party applications applications like I2PTunnel and I2PSnark are GPL. Almost everything is written in Java (1.5+),
are being written in Python and other languages. The code works on <a href="http://java.com/en/">Sun Java SE</a> and other Java Virtual Machines. though some third party applications are being written in Python and other languages. The code works
{% endtrans %}</p> on <a href="http://java.com/en/">Sun Java SE</a> and other Java Virtual Machines.
{%- endtrans %}</p>
<h2>{% trans %}Where?{% endtrans %}</h2> <h2>{% trans %}Where?{% endtrans %}</h2>
<p>{% trans meetings=url_for('meetings_index', lang=g.lang) -%} <p>{% trans meetings=url_for('meetings_index', lang=g.lang) -%}
Anyone interested should Anyone interested should join us on the IRC channel #i2p (hosted concurrently on irc.freenode.net,
join us on the IRC channel #i2p (hosted concurrently on irc.freenode.net, irc.postman.i2p, irc.freshcoffee.i2p, irc.welterde.i2p and irc.einirc.de). irc.postman.i2p, irc.freshcoffee.i2p, irc.welterde.i2p and irc.einirc.de). There are currently no
There are currently no scheduled development meetings, however scheduled development meetings, however <a href="{{ meetings }}">archives are available</a>.
<a href="{{ meetings }}">archives are available</a>.{% endtrans %}</p> {%- endtrans %}</p>
<p>{% trans monotone=site_url('develop/monotone') -%} <p>{% trans monotone=site_url('develop/monotone') -%}
The current source is available in <a href="{{ monotone }}">monotone</a>.{% endtrans %}</p> The current source is available in <a href="{{ monotone }}">monotone</a>.
{%- endtrans %}</p>
<h2>{% trans %}Additional Information{% endtrans %}</h2> <h2>{% trans %}Additional Information{% endtrans %}</h2>
<p>{% trans how_index=site_url('docs/how') -%} <p>{% trans how_index=site_url('docs/how') -%}
See <a href="{{ how_index}}">the Index to Technical Documentation</a>.{% endtrans %}</p> See <a href="{{ how_index}}">the Index to Technical Documentation</a>.
{%- endtrans %}</p>
{% endblock %} {% endblock %}