{"id":123472,"date":"2025-04-11T15:05:18","date_gmt":"2025-04-11T13:05:18","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/cpu-amd-zen-5-podverzheny-uyazvimosti-dopuskayushhej-izmenenie-mikrokoda-i-obhod-izolyaczii-sev-snp"},"modified":"2025-04-11T15:05:18","modified_gmt":"2025-04-11T13:05:18","slug":"cpu-amd-zen-5-podverzheny-uyazvimosti-dopuskayushhej-izmenenie-mikrokoda-i-obhod-izolyaczii-sev-snp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/cpu-amd-zen-5-podverzheny-uyazvimosti-dopuskayushhej-izmenenie-mikrokoda-i-obhod-izolyaczii-sev-snp","title":{"rendered":"CPU AMD Zen 5 jsou n\u00e1chyln\u00e9 k zranitelnosti, kter\u00e1 umo\u017e\u0148uje zm\u011bnu mikro k\u00f3du a obch\u00e1zen\u00ed izolace SEV-SNP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Spole\u010dnost AMD za\u0159adila procesory zalo\u017een\u00e9 na mikroarchitektu\u0159e Zen 5 do seznamu produkt\u016f, kter\u00e9 jsou n\u00e1chyln\u00e9 k zranitelnosti EntrySign, umo\u017e\u0148uj\u00edc\u00ed obch\u00e1zen\u00ed mechanismu ov\u011b\u0159ov\u00e1n\u00ed digit\u00e1ln\u00edho podpisu p\u0159i aktualizaci mikro k\u00f3du. P\u016fvodn\u011b se p\u0159edpokl\u00e1dalo, \u017ee zranitelnost ovliv\u0148uje pouze CPU AMD zalo\u017een\u00e9 na 1-4 generac\u00edch mikroarchitektury Zen. Tak\u017ee se zranitelnost uk\u00e1zala jako pou\u017eiteln\u00e1 pro procesory jako Ryzen 9000 (Granite Ridge), EPYC 9005 (Turin), Ryzen AI 300 (Strix Halo, Strix Point, Krackan Point) a Ryzen 9000HX (Fire Range). <\/p>\n

Krom\u011b aktualizace mikro k\u00f3du je pro odstran\u011bn\u00ed zranitelnosti na syst\u00e9mech, kter\u00e9 pou\u017e\u00edvaj\u00ed attestation SEV-SNP, tak\u00e9 vy\u017eadov\u00e1na aktualizace firmwaru AMD SEV, kter\u00e1 je sou\u010d\u00e1st\u00ed aktualizac\u00ed BIOSu. Tvrd\u00ed se, \u017ee spole\u010dnost AMD p\u0159edala v\u00fdrobc\u016fm za\u0159\u00edzen\u00ed upraven\u00fd firmware (ComboAM5PI 1.2.0.3c AGESA), kter\u00fd je nezbytn\u00fd k odstran\u011bn\u00ed probl\u00e9mu, av\u0161ak kone\u010dn\u00e9 aktualizace BIOSu, kter\u00e9 budou k dispozici spot\u0159ebitel\u016fm, mohou v\u00fdrobci vydat a\u017e po t\u00fddnech nebo m\u011bs\u00edc\u00edch. <\/p>\n

Zam\u011bstnanci AMD tak\u00e9 navrhli p\u0159id\u00e1n\u00ed patche do j\u00e1dra Linuxu, kter\u00fd blokuje na\u010d\u00edt\u00e1n\u00ed neofici\u00e1ln\u00edch aktualizac\u00ed mikro k\u00f3du (je zd\u016frazn\u011bno, \u017ee spr\u00e1vn\u00e9 aktualizace mikro k\u00f3du by m\u011bly b\u00fdt nainstalov\u00e1ny spolu s BIOSem od v\u00fdrobce za\u0159\u00edzen\u00ed, ale ji\u017e se objevily pokusy enthusiast\u016f vytv\u00e1\u0159et neofici\u00e1ln\u00ed opravy zalo\u017een\u00e9 na fragmentech mikro k\u00f3du vyst\u0159i\u017een\u00fdch z BIOSu). U\u017eivatel\u016fm se doporu\u010duje po\u010dkat na ofici\u00e1ln\u00ed aktualizace BIOSu. <\/p>\n

Zranitelnost EntrySign poskytuje mo\u017enost zm\u011bny mikro k\u00f3du, co\u017e umo\u017e\u0148uje ohrozit mechanismus AMD SEV (Secure Encrypted Virtualization), pou\u017e\u00edvan\u00fd v virtualiza\u010dn\u00edch syst\u00e9mech k ochran\u011b virtu\u00e1ln\u00edch stroj\u016f<\/a> p\u0159ed z\u00e1sahy hypervizora nebo administr\u00e1tora hostitelsk\u00e9ho syst\u00e9mu. B\u011bhem \u00fatoku lze zas\u00e1hnout do pr\u00e1ce hostitelsk\u00fdch syst\u00e9m\u016f chr\u00e1n\u011bn\u00fdch pomoc\u00ed roz\u0161\u00ed\u0159en\u00ed AMD SEV (Secure Encrypted Virtualization) a SEV-SNP (Secure Nested Paging), kter\u00e1 poskytuj\u00ed z\u00e1ruky integrity pam\u011bti virtu\u00e1ln\u00edch stroj\u016f, izoluj\u00ed procesorov\u00e9 registry a zaji\u0161\u0165uj\u00ed bezpe\u010dnou pr\u00e1ci s vno\u0159en\u00fdmi tabulkami str\u00e1nek pam\u011bti. <\/p>\n

Zranitelnost je zp\u016fsobena pou\u017eit\u00edm algoritmu CMAC pro ov\u011b\u0159en\u00ed mikrok\u00f3du m\u00edsto spolehliv\u00e9 hashovac\u00ed funkce. Spole\u010dnost AMD pou\u017e\u00edv\u00e1 soukrom\u00fd kl\u00ed\u010d RSA k digit\u00e1ln\u00edmu podepisov\u00e1n\u00ed mikrok\u00f3du nahr\u00e1van\u00e9ho do procesoru, zat\u00edmco v r\u00e1mci patche s mikrok\u00f3dem distribuuje ve\u0159ejn\u00fd kl\u00ed\u010d. Aby procesor ov\u011b\u0159il, \u017ee ve\u0159ejn\u00fd kl\u00ed\u010d odpov\u00edd\u00e1 p\u016fvodn\u00edmu p\u00e1ru RSA kl\u00ed\u010d\u016f, prov\u00e1d\u00ed porovn\u00e1n\u00ed hash z ve\u0159ejn\u00e9ho kl\u00ed\u010de AMD, kter\u00fd je vyroben b\u011bhem v\u00fdroby CPU, s hashem ve\u0159ejn\u00e9ho kl\u00ed\u010de uveden\u00e9ho v patchi. <\/p>\n

Ov\u011b\u0159en\u00ed autenticity mikrok\u00f3du v patchi se prov\u00e1d\u00ed porovn\u00e1n\u00edm dodan\u00e9ho hashe, kter\u00fd je podeps\u00e1n digit\u00e1ln\u00edm podpisem (RSASSA-PKCS1-v1_5), a hashe, kter\u00fd byl vypo\u010d\u00edt\u00e1n na z\u00e1klad\u011b skute\u010dn\u011b dodan\u00e9ho mikrok\u00f3du v patchi. Pokud se referen\u010dn\u00ed a vypo\u010d\u00edtan\u00fd hashe shoduj\u00ed \u2014 patch se na\u010dte do vnit\u0159n\u00ed pam\u011bti CPU. Probl\u00e9m je v tom, \u017ee m\u00edsto doporu\u010den\u00fdch kryptograficky bezpe\u010dn\u00fdch hashovac\u00edch funkc\u00ed byl pou\u017eit algoritmus CMAC, kter\u00fd nen\u00ed ur\u010den pro podobn\u00e9 operace a nen\u00ed chr\u00e1n\u011bn proti koliz\u00edm. <\/p>\n

CMAC nen\u00ed hashovac\u00ed funkc\u00ed, ale realizuje k\u00f3d pro autentizaci zpr\u00e1vy (Message Authentication Code), kter\u00fd z\u00e1vis\u00ed na \u0161ifrovac\u00edm kl\u00ed\u010di. \u010cinnost AES-CMAC spo\u010d\u00edv\u00e1 v pou\u017eit\u00ed kryptografick\u00e9ho algoritmu AES a kombinaci v\u00fdsledku jeho aplikace s n\u00e1sleduj\u00edc\u00edm blokem dat pomoc\u00ed operace XOR. Tato sch\u00e9ma zaru\u010duje, \u017ee zm\u011bna vstupn\u00edch dat povede k nep\u0159edv\u00eddateln\u00fdm zm\u011bn\u00e1m dat na v\u00fdstupu. CMAC v\u0161ak nelze pou\u017e\u00edt jako hashovac\u00ed funkci, proto\u017ee kdokoli, kdo zn\u00e1 p\u016fvodn\u00ed \u0161ifrovac\u00ed kl\u00ed\u010d, m\u016f\u017ee zjistit mezistavy \u0161ifrov\u00e1n\u00ed a vypo\u010d\u00edtat hodnoty, kter\u00e9 mohou kompenzovat zm\u011bny ve vstupn\u00edch datech tak, \u017ee v\u00fdsledek aplikace CMAC z\u016fstane nezm\u011bn\u011bn. <\/p>\n

AMD pou\u017e\u00edv\u00e1 pro AES-CMAC jedin\u00fd kl\u00ed\u010d \u0161ifrov\u00e1n\u00ed, dod\u00e1van\u00fd na v\u0161ech CPU od Zen 1. Tak\u017ee sta\u010d\u00ed vyt\u00e1hnout tento kl\u00ed\u010d z jak\u00e9hokoliv CPU AMD a bude pou\u017eiteln\u00fd pro v\u0161echna ostatn\u00ed CPU. V\u00fdzkumn\u00edci zjistili, \u017ee pro \u0161ifrov\u00e1n\u00ed AES-CMAC byl v AMD pou\u017eit zn\u00e1m\u00fd kl\u00ed\u010d, uveden\u00fd v doporu\u010den\u00edch pro pou\u017eit\u00ed blokov\u00fdch \u0161ifer NIST SP 800-38B. Proto\u017ee se AES-CMAC pou\u017e\u00edv\u00e1 pro hashov\u00e1n\u00ed vlo\u017een\u00e9ho RSA kl\u00ed\u010de a obsahu mikrok\u00f3du, ur\u010den\u00edm kl\u00ed\u010de \u0161ifrov\u00e1n\u00ed AES-CMAC vznikla mo\u017enost nahradit v patchi jin\u00fd ve\u0159ejn\u00fd RSA kl\u00ed\u010d a zm\u011bnit obsah mikrok\u00f3du. <\/p>\n

Pro vytvo\u0159en\u00ed fale\u0161n\u00e9ho patchu sta\u010d\u00ed vygenerovat nov\u00fd ve\u0159ejn\u00fd kl\u00ed\u010d, kter\u00fd generuje stejn\u00fd hash jako p\u016fvodn\u00ed ve\u0159ejn\u00fd kl\u00ed\u010d AMD, a tak\u00e9 nal\u00e9zt kolize pro digit\u00e1ln\u00ed podpis. Kolize se vytv\u00e1\u0159ej\u00ed p\u0159ipojen\u00edm k mikrok\u00f3du dopl\u0148kov\u00e9ho bloku, kter\u00fd vypad\u00e1 jako soubor n\u00e1hodn\u00fdch dat. T\u00edmto zp\u016fsobem lze p\u0159ipravit upraven\u00fd patch s mikrok\u00f3dem, odpov\u00eddaj\u00edc\u00ed digit\u00e1ln\u00edmu podpisu, kter\u00fdm byl podeps\u00e1n origin\u00e1ln\u00ed patch od AMD. N\u00e1stroj Zentool, zahrnuj\u00edc\u00ed utilities pro anal\u00fdzu mikrok\u00f3du a vytv\u00e1\u0159en\u00ed patch\u016f pro zm\u011bnu mikrok\u00f3du, je dostupn\u00fd pod licenc\u00ed Apache 2.0. Pro v\u00fdm\u011bnu mikrok\u00f3du je nutn\u00e9 m\u00edt opr\u00e1vn\u011bn\u00ed k prov\u00e1d\u011bn\u00ed k\u00f3du z \u00farovn\u011b nult\u00e9ho ochrann\u00e9ho kruhu (technologie VT-x a AMD-V umo\u017e\u0148uj\u00ed hostitelsk\u00e9mu syst\u00e9mu provozovat se pr\u00e1vy Ring 0).
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f AMD \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Zen 5 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 EntrySign, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043f\u0440\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430. \u0418\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u0430\u0433\u0430\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e CPU AMD \u043d\u0430 \u0431\u0430\u0437\u0435 1-4 \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u0439 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Zen. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u043c\u0430 \u043a \u0442\u0430\u043a\u0438\u043c \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430\u043c, \u043a\u0430\u043a Ryzen 9000 (Granite Ridge), EPYC 9005 (Turin), Ryzen […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-123472","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47CPU AMD Zen 5 je zraniteln\u00e9, co\u017e umo\u017e\u0148uje zm\u011bnu mikrok\u00f3du a obch\u00e1zen\u00ed izolace SEV-SNP | ProHoster","description":"Spole\u010dnost AMD za\u0159adila procesory na b\u00e1zi mikroarchitektury Zen 5 do seznamu produkt\u016f zraniteln\u00fdch v\u016f\u010di zranitelnosti EntrySign, kter\u00e1 umo\u017e\u0148uje obej\u00edt mechanismus ov\u011b\u0159ov\u00e1n\u00ed digit\u00e1ln\u00edho podpisu p\u0159i aktualizaci mikrok\u00f3du.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/cpu-amd-zen-5-podverzheny-uyazvimosti-dopuskayushhej-izmenenie-mikrokoda-i-obhod-izolyaczii-sev-snp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47CPU AMD Zen 5 \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0435\u0439 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430 \u0438 \u043e\u0431\u0445\u043e\u0434 \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u0438 SEV-SNP | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f AMD \u0432\u043a\u043b\u044e\u0447\u0438\u043b\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b \u043d\u0430 \u0431\u0430\u0437\u0435 \u043c\u0438\u043a\u0440\u043e\u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b Zen 5 \u0432 \u0441\u043f\u0438\u0441\u043e\u043a \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432, \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 EntrySign, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043f\u0440\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0438 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/cpu-amd-zen-5-podverzheny-uyazvimosti-dopuskayushhej-izmenenie-mikrokoda-i-obhod-izolyaczii-sev-snp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2025-04-11T13:05:18+00:00","article:modified_time":"2025-04-11T13:05:18+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"123472","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:44:58","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 12:10:19","updated":"2026-02-09 17:44:58","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/123472","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=123472"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/123472\/revisions"}],"predecessor-version":[{"id":159262,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/123472\/revisions\/159262"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=123472"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=123472"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=123472"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}