{"id":100995,"date":"2021-08-12T10:22:39","date_gmt":"2021-08-12T08:22:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/kompaniya-expressvpn-otkryla-narabotki-svyazannye-s-vpn-protokolom-lightway"},"modified":"2021-08-12T10:22:39","modified_gmt":"2021-08-12T08:22:39","slug":"kompaniya-expressvpn-otkryla-narabotki-svyazannye-s-vpn-protokolom-lightway","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/kompaniya-expressvpn-otkryla-narabotki-svyazannye-s-vpn-protokolom-lightway","title":{"rendered":"Spole\u010dnost ExpressVPN otev\u0159ela v\u00fdvoj souvisej\u00edc\u00ed s VPN protokolem Lightway.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spole\u010dnost ExpressVPN ozn\u00e1mila otev\u0159en\u00ed zdrojov\u00e9ho k\u00f3du implementace protokolu Lightway, vyvinut\u00e9ho k dosa\u017een\u00ed minim\u00e1ln\u00ed doby p\u0159ipojen\u00ed p\u0159i zachov\u00e1n\u00ed vysok\u00e9 \u00farovn\u011b bezpe\u010dnosti a spolehlivosti. K\u00f3d je naps\u00e1n v jazyce C a je \u0161\u00ed\u0159en pod licenc\u00ed GPLv2. Implementace je velmi kompaktn\u00ed a ve\u0161lo se do dvou tis\u00edc \u0159\u00e1dk\u016f k\u00f3du. Podpora je slibov\u00e1na pro platformy Linux, Windows, macOS, iOS, Android, routery (Asus, Netgear, Linksys) a prohl\u00ed\u017ee\u010de. Pro sestaven\u00ed je vy\u017eadov\u00e1no pou\u017eit\u00ed sestavovac\u00edch syst\u00e9m\u016f Earthly a Ceedling. Implementace je k dispozici jako knihovna, kterou lze pou\u017e\u00edt pro integraci funkc\u00ed klienta a serveru. VPN<\/a> ve sv\u00fdch aplikac\u00edch. <\/p>\n

V k\u00f3du jsou pou\u017eity osv\u011bd\u010den\u00e9 kryptografick\u00e9 funkce poskytovan\u00e9 knihovnou wolfSSL, kter\u00e1 ji\u017e byla pou\u017eita v \u0159e\u0161en\u00edch, je\u017e z\u00edskala certifik\u00e1t FIPS 140-2. V b\u011b\u017en\u00e9m re\u017eimu protokol pou\u017e\u00edv\u00e1 UDP pro p\u0159enos dat a DTLS pro vytvo\u0159en\u00ed \u0161ifrovan\u00e9ho kan\u00e1lu. Jako mo\u017enost pro zaji\u0161t\u011bn\u00ed funk\u010dnosti v nespolehliv\u00fdch nebo omezuj\u00edc\u00edch UDP s\u00edt\u00edch, serverem<\/a> je k dispozici spolehliv\u011bj\u0161\u00ed, ale m\u00e9n\u011b rychl\u00fd streamov\u00fd re\u017eim, kter\u00fd umo\u017e\u0148uje p\u0159en\u00e1\u0161et data p\u0159es TCP a TLSv1.3. <\/p>\n

Testy proveden\u00e9 spole\u010dnost\u00ed ExpressVPN uk\u00e1zaly, \u017ee ve srovn\u00e1n\u00ed se star\u00fdmi protokoly (ExpressVPN podporuje L2TP\/IPSec, OpenVPN, IKEv2, PPTP, WireGuard a SSTP, ale nen\u00ed specifikov\u00e1no, s \u010d\u00edm p\u0159esn\u011b bylo srovn\u00e1v\u00e1n\u00ed provedeno) p\u0159e\u0161li na Lightway, co\u017e ve v\u00fdsledku v pr\u016fm\u011bru zkr\u00e1tilo dobu p\u0159ipojen\u00ed 2,5kr\u00e1t (ve v\u00edce ne\u017e polovin\u011b p\u0159\u00edpad\u016f je kan\u00e1l vytvo\u0159en za m\u00e9n\u011b ne\u017e sekundu). Nov\u00fd protokol tak\u00e9 umo\u017enil sn\u00ed\u017eit po\u010det p\u0159eru\u0161en\u00ed spojen\u00ed v nespolehliv\u00fdch mobiln\u00edch s\u00edt\u00edch, kter\u00e9 maj\u00ed probl\u00e9my s kvalitou p\u0159ipojen\u00ed, o 40%. <\/p>\n

Dal\u0161\u00ed v\u00fdvoj referen\u010dn\u00ed implementace protokolu bude prob\u00edhat na GitHubu s mo\u017enost\u00ed \u00fa\u010dasti na v\u00fdvoji z\u00e1stupc\u016f komunity (pro p\u0159ed\u00e1n\u00ed zm\u011bn je nutn\u00e9 podepsat dohodu CLA o p\u0159evodu majetkov\u00fdch pr\u00e1v na k\u00f3d). K spolupr\u00e1ci jsou tak\u00e9 zv\u00e1ni jin\u00ed poskytovatel\u00e9 VPN, kte\u0159\u00ed mohou bez omezen\u00ed vyu\u017e\u00edvat navr\u017een\u00fd protokol. <\/p>\n

Bezpe\u010dnost implementace byla potvrzena v\u00fdsledky nez\u00e1visl\u00e9ho auditu proveden\u00e9ho spole\u010dnost\u00ed Cure53, kter\u00e1 v minulosti prov\u00e1d\u011bla audit NTPsec, SecureDrop, Cryptocat, F-Droid a Dovecot. Audit zahrnoval kontrolu zdrojov\u00fdch k\u00f3d\u016f a zahrnoval testy zam\u011b\u0159en\u00e9 na odhalen\u00ed mo\u017en\u00fdch zranitelnost\u00ed (ot\u00e1zky spojen\u00e9 s kryptografi\u00ed nebyly zkoum\u00e1ny). Celkov\u00e1 kvalita k\u00f3du byla hodnocena jako vysok\u00e1, nicm\u00e9n\u011b audit odhalil t\u0159i zranitelnosti, kter\u00e9 mohou v\u00e9st k v\u00fdpadk\u016fm slu\u017eeb, a jednu zranitelnost, kter\u00e1 umo\u017e\u0148uje vyu\u017e\u00edt protokol jako zesilova\u010d provozu p\u0159i DDoS \u00fatoc\u00edch. Uveden\u00e9 probl\u00e9my byly ji\u017e vy\u0159e\u0161eny a pozn\u00e1mky na zlep\u0161en\u00ed k\u00f3du byly vzaty v potaz. B\u011bhem auditu se tak\u00e9 zam\u011b\u0159ilo na zn\u00e1m\u00e9 zranitelnosti a probl\u00e9my v zapojen\u00fdch extern\u00edch komponentech, jako jsou libdnet, WolfSSL, Unity, Libuv a lua-crypt. V\u011bt\u0161inou se jedn\u00e1 o nev\u00fdznamn\u00e9 probl\u00e9my, s v\u00fdjimkou MITM ve WolfSSL (CVE-2021-3336).
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ExpressVPN \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Lightway, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438. \u041a\u043e\u0434 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 \u0421\u0438 \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 GPLv2. \u0420\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043e\u0447\u0435\u043d\u044c \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u0430\u044f \u0438 \u0443\u043c\u0435\u0441\u0442\u0438\u043b\u0430\u0441\u044c \u0432 \u0434\u0432\u0435 \u0442\u044b\u0441\u044f\u0447\u0438 \u0441\u0442\u0440\u043e\u043a \u043a\u043e\u0434\u0430. \u0417\u0430\u044f\u0432\u043b\u0435\u043d\u0430 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c Linux, Windows, macOS, iOS, Android, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u043e\u0432 (Asus, Netgear, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100995","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Spole\u010dnost ExpressVPN otev\u0159ela sv\u00e9 v\u00fdzkumy souvisej\u00edc\u00ed s VPN protokolem Lightway | ProHoster","description":"Spole\u010dnost ExpressVPN ozn\u00e1mila otev\u0159en\u00ed zdrojov\u00fdch k\u00f3d\u016f implementace protokolu Lightway, vyvinut\u00e9ho pro dosa\u017een\u00ed minim\u00e1ln\u00ed doby nastaven\u00ed spojen\u00ed p\u0159i zachov\u00e1n\u00ed vysok\u00e9 \u00farovn\u011b bezpe\u010dnosti.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/kompaniya-expressvpn-otkryla-narabotki-svyazannye-s-vpn-protokolom-lightway","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ExpressVPN \u043e\u0442\u043a\u0440\u044b\u043b\u0430 \u043d\u0430\u0440\u0430\u0431\u043e\u0442\u043a\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 VPN-\u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u043c Lightway | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f ExpressVPN \u043e\u0431\u044a\u044f\u0432\u0438\u043b\u0430 \u043e\u0431 \u043e\u0442\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u0445 \u0442\u0435\u043a\u0441\u0442\u043e\u0432 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 Lightway, \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0434\u043e\u0441\u0442\u0438\u0436\u0435\u043d\u0438\u044f \u043c\u0438\u043d\u0438\u043c\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u0441\u043e\u0445\u0440\u0430\u043d\u0435\u043d\u0438\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/kompaniya-expressvpn-otkryla-narabotki-svyazannye-s-vpn-protokolom-lightway","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-08-12T08:22:39+00:00","article:modified_time":"2021-08-12T08:22:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100995","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-08-12 08:43:20","updated":"2026-02-09 21:46:40","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100995","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=100995"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100995\/revisions"}],"predecessor-version":[{"id":160297,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/100995\/revisions\/160297"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=100995"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=100995"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=100995"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}