{"id":102843,"date":"2022-01-02T21:37:00","date_gmt":"2022-01-02T19:37:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7"},"modified":"2022-01-02T21:37:00","modified_gmt":"2022-01-02T19:37:00","slug":"%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7","title":{"rendered":"Pro j\u00e1dro Linux byla navr\u017eena implementace \/dev\/random bez vazby na SHA-1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Jason A. Donenfeld, autor VPN WireGuard, navrhl aktualizovanou implementaci gener\u00e1toru pseudo-n\u00e1hodn\u00fdch \u010d\u00edsel RDRAND, kter\u00fd zaji\u0161\u0165uje funkci za\u0159\u00edzen\u00ed \/dev\/random a \/dev\/urandom v j\u00e1d\u0159e Linuxu. Na konci listopadu byl Jason za\u0159azen mezi spr\u00e1vce ovlada\u010de random a nyn\u00ed zve\u0159ejnil prvn\u00ed v\u00fdsledky sv\u00e9 pr\u00e1ce na jeho p\u0159epracov\u00e1n\u00ed. <\/p>\n

Nov\u00e9 proveden\u00ed se vyzna\u010duje p\u0159echodem na pou\u017eit\u00ed hashovac\u00ed funkce BLAKE2s m\u00edsto SHA1 pro operace sm\u00edch\u00e1n\u00ed entropie. Tato zm\u011bna v\u00fdrazn\u011b zv\u00fd\u0161ila bezpe\u010dnost gener\u00e1toru pseudo-n\u00e1hodn\u00fdch \u010d\u00edsel d\u00edky eliminaci problematick\u00e9ho algoritmu SHA1 a vylou\u010den\u00ed p\u0159episov\u00e1n\u00ed inicializa\u010dn\u00edho vektoru RNG. Proto\u017ee algoritmus BLAKE2s p\u0159ekon\u00e1v\u00e1 SHA1 v oblasti v\u00fdkonu, jeho pou\u017eit\u00ed m\u011blo tak\u00e9 pozitivn\u00ed dopad na v\u00fdkon gener\u00e1toru pseudo-n\u00e1hodn\u00fdch \u010d\u00edsel (testov\u00e1n\u00ed na syst\u00e9mu s procesorem Intel i7-11850H uk\u00e1zalo zv\u00fd\u0161en\u00ed rychlosti o 131 %). Dal\u0161\u00ed v\u00fdhodou p\u0159echodu na BLAKE2 pro sm\u00edch\u00e1n\u00ed entropie byla unifikace pou\u017e\u00edvan\u00fdch algoritm\u016f \u2014 BLAKE2 se pou\u017e\u00edv\u00e1 v \u0161if\u0159e ChaCha, kter\u00e1 ji\u017e byla nasazena pro extrakci n\u00e1hodn\u00fdch sekvenc\u00ed. <\/p>\n

Krom\u011b toho byly provedeny vylep\u0161en\u00ed v kryptograficky bezpe\u010dn\u00e9m gener\u00e1toru pseudo-n\u00e1hodn\u00fdch \u010d\u00edsel CRNG, kter\u00fd se pou\u017e\u00edv\u00e1 p\u0159i vol\u00e1n\u00ed getrandom. Vylep\u0161en\u00ed spo\u010d\u00edvaj\u00ed v omezen\u00ed vol\u00e1n\u00ed pomal\u00e9ho gener\u00e1toru RDRAND p\u0159i extrakci entropie, co\u017e umo\u017e\u0148uje zv\u00fd\u0161it v\u00fdkon a\u017e 3,7kr\u00e1t. Jason uk\u00e1zal, \u017ee vol\u00e1n\u00ed RDRAND d\u00e1v\u00e1 smysl pouze tehdy, kdy\u017e CRNG je\u0161t\u011b nen\u00ed pln\u011b inicializov\u00e1n, ale jakmile je inicializace CRNG dokon\u010dena, jeho hodnota nem\u00e1 vliv na kvalitu generovan\u00e9 posloupnosti a bez vol\u00e1n\u00ed RDRAND se v tomto p\u0159\u00edpad\u011b lze obej\u00edt. <\/p>\n

Zm\u011bny jsou pl\u00e1nov\u00e1ny k zahrnut\u00ed do j\u00e1dra 5.17 a ji\u017e byly p\u0159ezkoum\u00e1ny v\u00fdvoj\u00e1\u0159i Tedem Ts\u2019o (druh\u00fdm spr\u00e1vcem ovlada\u010de random), Gregem Kroah-Hartmanem (odpov\u011bdn\u00fdm za \u00fadr\u017ebu stabiln\u00ed v\u011btve j\u00e1dra Linux) a Jean-Philippem Aumassonem (autorem algoritm\u016f BLAKE2\/3).
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0436\u0435\u0439\u0441\u043e\u043d \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434 (Jason A. Donenfeld), \u0430\u0432\u0442\u043e\u0440 VPN WireGuard, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b RDRAND, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \/dev\/random \u0438 \/dev\/urandom \u0432 \u044f\u0434\u0440\u0435 Linux. \u0412 \u043a\u043e\u043d\u0446\u0435 \u043d\u043e\u044f\u0431\u0440\u044f \u0414\u0436\u0435\u0439\u0441\u043e\u043d \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u0447\u0438\u0441\u043b\u043e \u043c\u044d\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 random \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u0432\u043e\u0435\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u043a\u0435. \u041d\u043e\u0432\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0430 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u043c \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0445\u0435\u0448-\u0444\u0443\u043d\u043a\u0446\u0438\u0438 BLAKE2s \u0432\u043c\u0435\u0441\u0442\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102843","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pro j\u00e1dro Linux byla navr\u017eena implementace \/dev\/random, zbaven\u00e1 vazby na SHA-1 | ProHoster","description":"Jason A. Donenfeld, autor VPN WireGuard, navrhl aktualizovanou implementaci gener\u00e1toru pseudo-n\u00e1hodn\u00fdch \u010d\u00edsel RDRAND, kter\u00fd zaji\u0161\u0165uje funkci za\u0159\u00edzen\u00ed \/dev\/random a \/dev\/urandom v j\u00e1d\u0159e Linuxu.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043b\u044f \u044f\u0434\u0440\u0430 Linux \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \/dev\/random, \u0438\u0437\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043e\u0442 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 \u043a SHA-1 | ProHoster","og:description":"\u0414\u0436\u0435\u0439\u0441\u043e\u043d \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434 (Jason A. Donenfeld), \u0430\u0432\u0442\u043e\u0440 VPN WireGuard, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b RDRAND, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \/dev\/random \u0438 \/dev\/urandom \u0432 \u044f\u0434\u0440\u0435 Linux.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-02T19:37:00+00:00","article:modified_time":"2022-01-02T19:37:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102843","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-02 19:38:23","updated":"2022-09-28 13:59:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/102843","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=102843"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/102843\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=102843"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=102843"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=102843"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}