{"id":121004,"date":"2024-12-17T15:46:01","date_gmt":"2024-12-17T13:46:01","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/pervyj-stabilnyj-reliz-pgp-instrumentariya-sq-ot-proekta-sequoia"},"modified":"2024-12-17T15:46:01","modified_gmt":"2024-12-17T13:46:01","slug":"pervyj-stabilnyj-reliz-pgp-instrumentariya-sq-ot-proekta-sequoia","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/pervyj-stabilnyj-reliz-pgp-instrumentariya-sq-ot-proekta-sequoia","title":{"rendered":"Prvn\u00ed stabiln\u00ed vyd\u00e1n\u00ed PGP n\u00e1stroje sq od projektu Sequoia","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Po sedmi letech v\u00fdvoje byl vyd\u00e1n n\u00e1stroj p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku sq 1.0, ur\u010den\u00fd pro pr\u00e1ci s artefakty OpenPGP. N\u00e1stroj byl p\u0159ipraven projektem Sequoia PGP, kter\u00fd tak\u00e9 vyv\u00edj\u00ed knihovnu funkc\u00ed s implementac\u00ed standardu OpenPGP (RFC-4880). Vyd\u00e1n\u00ed 1.0 je ozna\u010deno jako prvn\u00ed stabiln\u00ed verze projektu, co\u017e znamen\u00e1 stabilizaci k\u00f3dov\u00e9 z\u00e1kladny a ukon\u010den\u00ed prov\u00e1d\u011bn\u00ed zm\u011bn, kter\u00e9 by naru\u0161ily kompatibilitu. K\u00f3d je naps\u00e1n v jazyce Rust a je distribuov\u00e1n pod licenc\u00ed GPLv2+. <\/p>\n

N\u00e1stroj je sou\u010d\u00e1st\u00ed distribuce Red Hat Enterprise Linux 10 jako alternativa GnuPG, pou\u017e\u00edv\u00e1 se pro pr\u00e1ci s PGP v bal\u00ed\u010dkov\u00fdch mana\u017eerech DNF a RPM a je v\u00fdchoz\u00edm \u0159e\u0161en\u00edm v experiment\u00e1ln\u00ed v\u011btvi bal\u00ed\u010dkov\u00e9ho mana\u017eera APT, pokud jsou v syst\u00e9mu k dispozici komponenty Sequoia. Server kl\u00ed\u010d\u016f Hagrid vytvo\u0159en\u00fd v\u00fdvoj\u00e1\u0159i Sequoia se pou\u017e\u00edv\u00e1 v slu\u017eb\u011b keys.openpgp.org. <\/p>\n

Projekt Sequoia byl zalo\u017een t\u0159emi v\u00fdvoj\u00e1\u0159i GnuPG z firmy g10code, specialisty na audit kryptosyst\u00e9m\u016f a v\u00fdvoj dopl\u0148k\u016f k GnuPG. C\u00edlem projektu je p\u0159epracov\u00e1n\u00ed architektury a implementace nov\u00fdch technik pro zvy\u0161ov\u00e1n\u00ed bezpe\u010dnosti a spolehlivosti k\u00f3dov\u00e9 z\u00e1kladny. Krom\u011b pou\u017eit\u00ed jazyka Rust pro sn\u00ed\u017een\u00ed pravd\u011bpodobnosti chyb p\u0159i pr\u00e1ci s pam\u011bt\u00ed, Sequoia implementuje dal\u0161\u00ed ochranu p\u0159ed chybami na \u00farovni API. Nap\u0159\u00edklad API neumo\u017e\u0148uje n\u00e1hodn\u011b exportovat materi\u00e1l tajn\u00e9ho kl\u00ed\u010de a chr\u00e1n\u00ed p\u0159ed opomenut\u00edm d\u016fle\u017eit\u00fdch akc\u00ed p\u0159i aktualizaci digit\u00e1ln\u00edho podpisu. Pro dodate\u010dnou izolaci se pou\u017e\u00edv\u00e1 odd\u011blen\u00ed jednotliv\u00fdch proces\u016f slu\u017eeb, kter\u00e9 pracuj\u00ed s ve\u0159ejn\u00fdmi a soukrom\u00fdmi kl\u00ed\u010di. <\/p>\n

Krom\u011b funkc\u00ed pro \u0161ifrov\u00e1n\u00ed dat, pr\u00e1ci s elektronick\u00fdmi podpisy a spr\u00e1vu kl\u00ed\u010d\u016f, podobn\u00fdch funkc\u00edm gpg, sq d\u00e1le poskytuje decentralizovanou infrastrukturu ve\u0159ejn\u00fdch kl\u00ed\u010d\u016f (PKI). PKI se pou\u017e\u00edv\u00e1 pro autentizaci certifik\u00e1t\u016f a zpr\u00e1v a umo\u017e\u0148uje ov\u011b\u0159it, \u017ee p\u0159ijat\u00fd ve\u0159ejn\u00fd kl\u00ed\u010d a zpr\u00e1va jsou spojeny s uveden\u00fdm autorem, a nikoli vytvo\u0159eny \u00fato\u010dn\u00edkem. <\/p>\n

P\u0159i na\u010d\u00edt\u00e1n\u00ed certifik\u00e1tu z keys.openpgp.org nebo jin\u00e9ho serveru kl\u00ed\u010d\u016f n\u00e1stroj sq automaticky ulo\u017e\u00ed informace o certifik\u00e1tu do m\u00edstn\u00edho syst\u00e9mu a pou\u017eije tyto informace p\u0159i n\u00e1sledn\u00fdch operac\u00edch pro detekci fale\u0161n\u00fdch certifik\u00e1t\u016f. Uv\u00e1d\u00ed se, \u017ee implementovan\u00fd syst\u00e9m m\u016f\u017ee b\u00fdt pou\u017eit jako z\u00e1klad pro budov\u00e1n\u00ed formy distribuovan\u00e9ho certifika\u010dn\u00edho \u00fa\u0159adu (CA), pokr\u00fdvaj\u00edc\u00edho r\u016fzn\u00e9 servery kl\u00ed\u010d\u016f. <\/p>\n

Nap\u0159\u00edklad, p\u0159ed ov\u011b\u0159en\u00edm pravosti sta\u017een\u00fdch verz\u00ed OS Qubes m\u016f\u017ee u\u017eivatel nejprve zkontrolovat certifik\u00e1t Qubes, kter\u00fd je poskytov\u00e1n z hlavn\u00edho serveru kl\u00ed\u010d\u016f projektu Qubes: sq network search https:\/\/keys.qubes-os.org\/keys\/qubes-release-4.2-signing-key.asc <\/p>\n

Zadan\u00fd p\u0159\u00edkaz st\u00e1hne certifik\u00e1t ze serveru keys.qubes-os.org a pot\u00e9 zkontroluje jeho p\u0159\u00edtomnost na zn\u00e1m\u00fdch kl\u00ed\u010dov\u00fdch serverech, jako jsou keys.openpgp.org a keyserver.ubuntu.com, nebo se pokus\u00ed z\u00edskat certifik\u00e1t pomoc\u00ed mechanizm\u016f WKD (Web Key Directory) a DANE (DNS-Based Authentication of Named Entities). N\u00e1sledn\u011b n\u00e1stroj porovn\u00e1 z\u00edskan\u00e9 certifik\u00e1ty a pokud jsou spojeny s jedn\u00edm vlastn\u00edkem, navrhne pou\u017e\u00edt p\u0159\u00edkaz «sq pki link add» pro ulo\u017een\u00ed certifik\u00e1tu do m\u00edstn\u00edho syst\u00e9mu pro n\u00e1sledn\u00e9 kontroly. Po ulo\u017een\u00ed bude certifik\u00e1t pova\u017eov\u00e1n za d\u016fv\u011bryhodn\u00fd a pro stahov\u00e1n\u00ed sestaven\u00ed s ov\u011b\u0159en\u00edm jejich pravosti bude sta\u010dit prov\u00e9st p\u0159\u00edkaz: sq download —signature-url https:\/\/mirrors.edge.kernel.org\/qubes\/iso\/Qubes-R4.2.3-x86_64.iso.asc —url https:\/\/mirrors.edge.kernel.org\/qubes\/iso\/Qubes-R4.2.3-x86_64.iso —output \/tmp\/qubes.iso
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041f\u043e\u0441\u043b\u0435 \u0441\u0435\u043c\u0438 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 sq 1.0, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u0430\u043c\u0438 OpenPGP. \u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Sequoia PGP, \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u043c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 OpenPGP (RFC-4880). \u0412\u044b\u043f\u0443\u0441\u043a 1.0 \u043e\u0442\u043c\u0435\u0447\u0435\u043d \u043a\u0430\u043a \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u043e\u0437\u043d\u0430\u0447\u0430\u044e\u0449\u0438\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u0438 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u043d\u0430\u0440\u0443\u0448\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u044c. \u041a\u043e\u0434 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121004","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Prvn\u00ed stabiln\u00ed vyd\u00e1n\u00ed PGP n\u00e1stroje sq od projektu Sequoia | ProHoster","description":"Po sedmi letech v\u00fdvoje byl vytvo\u0159en vyd\u00e1n\u00ed n\u00e1stroje p\u0159\u00edkazov\u00e9ho \u0159\u00e1dku sq 1.0, ur\u010den\u00e9ho pro pr\u00e1ci s artefakty OpenPGP.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/pervyj-stabilnyj-reliz-pgp-instrumentariya-sq-ot-proekta-sequoia","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0435\u0440\u0432\u044b\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 PGP-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f sq \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Sequoia | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0441\u0435\u043c\u0438 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 sq 1.0, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u0430\u043c\u0438 OpenPGP.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/pervyj-stabilnyj-reliz-pgp-instrumentariya-sq-ot-proekta-sequoia","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-12-17T13:46:01+00:00","article:modified_time":"2024-12-17T13:46:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121004","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 08:57:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:57:19","updated":"2026-01-23 08:57:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/121004","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=121004"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/121004\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=121004"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=121004"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=121004"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}