docs.waku.org/assets/js/606377f0.72f291b4.js

"use strict";(self.webpackChunkwaku_guide=self.webpackChunkwaku_guide||[]).push([[8156],{28453:(e,t,i)=>{i.d(t,{R:()=>a,x:()=>o});var n=i(96540);const s={},r=n.createContext(s);function a(e){const t=n.useContext(r);return n.useMemo(function(){return"function"==typeof e?e(t):{...t,...e}},[t,e])}function o(e){let t;return t=e.disableParentContext?"function"==typeof e.components?e.components(s):e.components||s:a(e.components),n.createElement(r.Provider,{value:t},e.children)}},74436:(e,t,i)=>{i.r(t),i.d(t,{assets:()=>c,contentTitle:()=>o,default:()=>u,frontMatter:()=>a,metadata:()=>n,toc:()=>d});const n=JSON.parse('{"id":"learn/security-features","title":"Security Features","description":"Waku\'s protocol layers offer different services and security considerations, shaping the overall security of Waku. We document the security models in the RFCs of the protocols, aiming to provide transparent and open-source references. This empowers Waku users to understand each protocol\'s security guarantees and limitations.","source":"@site/docs/learn/security-features.md","sourceDirName":"learn","slug":"/learn/security-features","permalink":"/learn/security-features","draft":false,"unlisted":false,"editUrl":"https://github.com/waku-org/docs.waku.org/tree/develop/docs/learn/security-features.md","tags":[],"version":"current","lastUpdatedAt":null,"frontMatter":{"title":"Security Features","hide_table_of_contents":true},"sidebar":"learn","previous":{"title":"Peer Exchange","permalink":"/learn/concepts/peer-exchange"},"next":{"title":"Research","permalink":"/learn/research"}}');var s=i(74848),r=i(28453);const a={title:"Security Features",hide_table_of_contents:!0},o=void 0,c={},d=[{value:"Pseudonymity",id:"pseudonymity",level:2},{value:"Anonymity/unlinkability",id:"anonymityunlinkability",level:2},{value:"Spam protection",id:"spam-protection",level:2},{value:"Data confidentiality, integrity, and authenticity",id:"data-confidentiality-integrity-and-authenticity",level:2},{value:"Security considerations",id:"security-considerations",level:2}];function l(e){const t={a:"a",code:"code",h2:"h2",li:"li",p:"p",ul:"ul",...(0,r.R)(),...e.components};return(0,s.jsxs)(s.Fragment,{children:[(0,s.jsxs)(t.p,{children:["Waku's protocol layers offer different services and security considerations, shaping the overall security of Waku. We document the security models in the ",(0,s.jsx)(t.a,{href:"https://rfc.vac.dev/",children:"RFCs of the protocols"}),", aiming to provide transparent and open-source references. This empowers Waku users to understand each protocol's security guarantees and limitations."]}),"\n",(0,s.jsx)(t.p,{children:"Some of Waku's security features include the following:"}),"\n",(0,s.jsx)(t.h2,{id:"pseudonymity",children:(0,s.jsx)(t.a,{href:"https://rfc.vac.dev/waku/standards/core/10/waku2/#pseudonymity",children:"Pseudonymity"})}),"\n",(0,s.jsxs)(t.p,{children:["Waku ensures pseudonymity across its protocol layers, using libp2p ",(0,s.jsx)(t.code,{children:"PeerID"})," as identifiers instead of disclosing true identities. However, it is important to note that pseudonymity does not provide complete anonymity. Actions performed under the same pseudonym (",(0,s.jsx)(t.code,{children:"PeerID"}),") can be linked, leading to the potential re-identification of the actual actor."]}),"\n",(0,s.jsx)(t.h2,{id:"anonymityunlinkability",children:(0,s.jsx)(t.a,{href:"https://rfc.vac.dev/waku/standards/core/10/waku2/#anonymity--unlinkability",children:"Anonymity/unlinkability"})}),"\n",(0,s.jsx)(t.p,{children:"Anonymity means an adversary cannot connect an actor to their actions or data. To achieve anonymity, avoiding linking activities with actors or their Personally Identifiable Information (PII) is crucial. In Waku, the following anonymity features are provided:"}),"\n",(0,s.jsxs)(t.ul,{children:["\n",(0,s.jsxs)(t.li,{children:[(0,s.jsx)(t.a,{href:"https://rfc.vac.dev/waku/standards/core/11/relay/#security-analysis",children:"Publisher-message unlinkability"}),": Ensures that the publisher of messages in the ",(0,s.jsx)(t.code,{children:"Relay"})," p