{"id":95488,"date":"2020-09-30T07:42:29","date_gmt":"2020-09-30T05:42:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/zachem-nuzhny-fleshki-s-apparatnym-shifrovaniem"},"modified":"2020-09-30T07:42:29","modified_gmt":"2020-09-30T05:42:29","slug":"zachem-nuzhny-fleshki-s-apparatnym-shifrovaniem","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/zachem-nuzhny-fleshki-s-apparatnym-shifrovaniem","title":{"rendered":"Pro\u010d pot\u0159ebujeme USB flash disky s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ahoj, Habr! V koment\u00e1\u0159\u00edch k jednomu z na\u0161ich <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/kingston_technology\/blog\/512078\/\">materi\u00e1l\u016f o flash disc\u00edch<\/a><\/noindex> se \u010dten\u00e1\u0159i zeptali na zaj\u00edmavou ot\u00e1zku: \u201ePro\u010d pot\u0159ebujeme flash disk s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm, kdy\u017e existuje TrueCrypt?\u201c, \u2013 a dokonce vyj\u00e1d\u0159ili n\u011bkter\u00e9 obavy ohledn\u011b toho, \u201eJak se m\u016f\u017eeme ujistit, \u017ee v softwaru a hardwarov\u00e9 \u010d\u00e1sti za\u0159\u00edzen\u00ed Kingston nejsou zadn\u00ed vr\u00e1tka?\u201c. Na tyto ot\u00e1zky jsme stru\u010dn\u011b odpov\u011bd\u011bli, ale pak jsme se rozhodli, \u017ee t\u00e9ma si zaslou\u017e\u00ed podrobnou anal\u00fdzu. T\u00edm se budeme zab\u00fdvat v tomto p\u0159\u00edsp\u011bvku.<\/p>\n<p><img decoding=\"async\" alt=\"Pro\u010d pot\u0159ebujeme USB flash disky s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm?\" src=\"\/wp-content\/uploads\/2020\/09\/28f293543b4bdd12a2a11ae7fcf2e052.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nHardwarov\u00e9 \u0161ifrov\u00e1n\u00ed AES, stejn\u011b jako programov\u00e9, existuje u\u017e dlouho, ale jak konkr\u00e9tn\u011b chr\u00e1n\u00ed d\u016fle\u017eit\u00e1 data na flash disc\u00edch? Kdo certifikuje takov\u00e9 disky a m\u016f\u017eeme t\u011bmto certifikac\u00edm d\u016fv\u011b\u0159ovat? Komu v\u016fbec tyto \u201eslo\u017eit\u011bj\u0161\u00ed\u201c flash disky pot\u0159ebuj\u00ed, kdy\u017e je mo\u017en\u00e9 vyu\u017e\u00edvat bezplatn\u00e9 programy jako TrueCrypt nebo BitLocker. Jak vid\u00edte, t\u00e9ma vznesen\u00e9 v koment\u00e1\u0159\u00edch vyvol\u00e1v\u00e1 skute\u010dn\u011b mnoho ot\u00e1zek. Poj\u010fme se pokusit v\u0161e objasnit.<\/p>\n<h2>Jak se hardwarov\u00e9 \u0161ifrov\u00e1n\u00ed li\u0161\u00ed od programov\u00e9ho?<\/h2>\n<p>\nV p\u0159\u00edpad\u011b flash disk\u016f (ale tak\u00e9 HDD a SSD) k prov\u00e1d\u011bn\u00ed hardwarov\u00e9ho \u0161ifrov\u00e1n\u00ed dat se pou\u017e\u00edv\u00e1 speci\u00e1ln\u00ed \u010dip um\u00edst\u011bn\u00fd na desce za\u0159\u00edzen\u00ed. Ten obsahuje gener\u00e1tor n\u00e1hodn\u00fdch \u010d\u00edsel, kter\u00fd vytv\u00e1\u0159\u00ed \u0161ifrovac\u00ed kl\u00ed\u010de. Data jsou automaticky \u0161ifrov\u00e1na a okam\u017eit\u011b de\u0161ifrov\u00e1na po zad\u00e1n\u00ed u\u017eivatelsk\u00e9ho hesla. V tomto sc\u00e9n\u00e1\u0159i je prakticky nemo\u017en\u00e9 z\u00edskat p\u0159\u00edstup k dat\u016fm bez hesla. <\/p>\n<p>P\u0159i pou\u017eit\u00ed programov\u00e9ho \u0161ifrov\u00e1n\u00ed je \u201eblokace\u201c dat na disku zaji\u0161\u0165ov\u00e1na extern\u00edm softwarem, kter\u00fd slou\u017e\u00ed jako cenov\u011b v\u00fdhodn\u00e1 alternativa k hardwarov\u00fdm metod\u00e1m \u0161ifrov\u00e1n\u00ed. Nev\u00fdhody takov\u00e9ho softwaru mohou spo\u010d\u00edvat v jednoduch\u00e9m po\u017eadavku na pravideln\u00e9 aktualizace, aby nab\u00edzel odolnost v\u016f\u010di neust\u00e1le se zlep\u0161uj\u00edc\u00edm metod\u00e1m hackerstv\u00ed. Nav\u00edc pro de\u0161ifrov\u00e1n\u00ed dat jsou vyu\u017e\u00edv\u00e1ny v\u00fdpo\u010detn\u00ed v\u00fdkon po\u010d\u00edta\u010de (nikoli samostatn\u00e9ho hardwarov\u00e9ho \u010dipu) a v podstat\u011b \u00farove\u0148 ochrany PC ur\u010duje \u00farove\u0148 ochrany disku.<\/p>\n<p>Hlavn\u00edm rysem za\u0159\u00edzen\u00ed s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm je samostatn\u00fd kryptografick\u00fd procesor, jeho\u017e p\u0159\u00edtomnost n\u00e1m \u0159\u00edk\u00e1, \u017ee \u0161ifrovac\u00ed kl\u00ed\u010de nikdy neopou\u0161t\u011bj\u00ed USB flash disk, na rozd\u00edl od programov\u00fdch kl\u00ed\u010d\u016f, kter\u00e9 mohou b\u00fdt do\u010dasn\u011b ulo\u017eeny v opera\u010dn\u00ed pam\u011bti po\u010d\u00edta\u010de nebo na pevn\u00e9m disku. A proto\u017ee programov\u00e9 \u0161ifrov\u00e1n\u00ed vyu\u017e\u00edv\u00e1 pam\u011b\u0165 po\u010d\u00edta\u010de k uchov\u00e1v\u00e1n\u00ed po\u010dtu pokus\u016f o p\u0159ihl\u00e1\u0161en\u00ed, nem\u016f\u017ee zastavit \u00fatoky hrubou silou na heslo nebo kl\u00ed\u010d. Po\u010det pokus\u016f o p\u0159ihl\u00e1\u0161en\u00ed m\u016f\u017ee b\u00fdt neust\u00e1le resetov\u00e1n \u00fato\u010dn\u00edkem, dokud program pro automatick\u00e9 prolomen\u00ed hesel nenajde spr\u00e1vnou kombinaci.<\/p>\n<p>Mimochodem\u2026, v koment\u00e1\u0159\u00edch k \u010dl\u00e1nku \u201c<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/kingston_technology\/blog\/512078\/\">Kingston DataTraveler: nov\u00e9 generace zabezpe\u010den\u00fdch flash disk\u016f<\/a><\/noindex>\u201d u\u017eivatel\u00e9 tak\u00e9 poznamenali, \u017ee nap\u0159\u00edklad program TrueCrypt m\u00e1 p\u0159enosn\u00fd re\u017eim. To v\u0161ak nen\u00ed velkou v\u00fdhodou. V tomto p\u0159\u00edpad\u011b je toti\u017e \u0161ifrovac\u00ed program ulo\u017een v pam\u011bti flash disku, co\u017e jej \u010din\u00ed zraniteln\u011bj\u0161\u00edm v\u016f\u010di \u00fatok\u016fm.<\/p>\n<p>Z\u00e1v\u011brem: programov\u00fd p\u0159\u00edstup nezaji\u0161\u0165uje tak vysokou \u00farove\u0148 bezpe\u010dnosti jako AES \u0161ifrov\u00e1n\u00ed. Je to sp\u00ed\u0161e z\u00e1kladn\u00ed ochrana. Na druhou stranu v\u0161ak programov\u00e9 \u0161ifrov\u00e1n\u00ed d\u016fle\u017eit\u00fdch dat je st\u00e1le lep\u0161\u00ed ne\u017e \u00fapln\u00e1 absence \u0161ifrov\u00e1n\u00ed. Tento fakt n\u00e1m umo\u017e\u0148uje jasn\u011b rozli\u0161it tyto typy kryptografie: hardwarov\u00e9 \u0161ifrov\u00e1n\u00ed flash disk\u016f je \u010dast\u011bji pot\u0159ebn\u00e9 pro korpor\u00e1tn\u00ed sektor (nap\u0159\u00edklad kdy\u017e zam\u011bstnanci spole\u010dnosti pou\u017e\u00edvaj\u00ed disky vydan\u00e9 v pr\u00e1ci); zat\u00edmco programov\u00e9 je v\u00edce vhodn\u00e9 pro pot\u0159eby u\u017eivatel\u016f.<\/p>\n<p><img decoding=\"async\" alt=\"Pro\u010d pot\u0159ebujeme USB flash disky s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm?\" src=\"\/wp-content\/uploads\/2020\/09\/3c3a4aeb2e28f43c2010f8dd3e0334d8.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNicm\u00e9n\u011b, Kingston d\u011bl\u00ed sv\u00e9 modely \u00falo\u017ei\u0161\u0165 (nap\u0159\u00edklad IronKey S1000) na verze Basic a Enterprise. Co se t\u00fd\u010de funk\u010dnosti a ochrann\u00fdch vlastnost\u00ed, jsou prakticky identick\u00e9, ale podnikov\u00e1 verze nab\u00edz\u00ed mo\u017enost spr\u00e1vy \u00falo\u017ei\u0161t\u011b pomoc\u00ed softwaru SafeConsole\/IronKey EMS. D\u00edky tomuto softwaru \u00falo\u017ei\u0161t\u011b pracuje bu\u010f s cloudov\u00fdmi, nebo s lok\u00e1ln\u00edmi servery pro vzd\u00e1len\u00e9 prov\u00e1d\u011bn\u00ed politik ochrany heslem a p\u0159\u00edstupu. U\u017eivatel\u00e9 maj\u00ed mo\u017enost obnovy ztracen\u00fdch hesel a administr\u00e1to\u0159i mohou p\u0159ep\u00ednat nepou\u017e\u00edvan\u00e1 \u00falo\u017ei\u0161t\u011b na nov\u00e9 \u00fakoly.<\/p>\n<h2>Jak funguj\u00ed flash disky Kingston s AES \u0161ifrov\u00e1n\u00edm?<\/h2>\n<p>\nKingston pou\u017e\u00edv\u00e1 256-bitov\u00e9 hardwarov\u00e9 \u0161ifrov\u00e1n\u00ed AES-XTS (s pou\u017eit\u00edm dodate\u010dn\u00e9ho plnohodnotn\u00e9ho kl\u00ed\u010de) pro v\u0161echny sv\u00e9 bezpe\u010dn\u00e9 disky. Jak ji\u017e bylo zm\u00edn\u011bno v\u00fd\u0161e, flash disky obsahuj\u00ed ve sv\u00e9 komponentn\u00ed z\u00e1kladn\u011b samostatn\u00fd \u010dip pro \u0161ifrov\u00e1n\u00ed a de\u0161ifrov\u00e1n\u00ed dat, kter\u00fd slou\u017e\u00ed jako neust\u00e1le aktivn\u00ed gener\u00e1tor n\u00e1hodn\u00fdch \u010d\u00edsel. <\/p>\n<p>Kdy\u017e poprv\u00e9 p\u0159ipoj\u00edte za\u0159\u00edzen\u00ed k USB portu, pr\u016fvodce inicializac\u00ed v\u00e1m nab\u00eddne nastavit hlavn\u00ed heslo pro p\u0159\u00edstup k za\u0159\u00edzen\u00ed. Po aktivaci disku algoritmy \u0161ifrov\u00e1n\u00ed automaticky za\u010dnou pracovat podle u\u017eivatelsk\u00fdch preferenc\u00ed. <\/p>\n<p>P\u0159itom pro u\u017eivatele princip fungov\u00e1n\u00ed flash disku z\u016fstane nezm\u011bn\u011bn \u2013 st\u00e1le bude moci stahovat a umis\u0165ovat soubory do pam\u011bti za\u0159\u00edzen\u00ed, jako p\u0159i pr\u00e1ci s b\u011b\u017en\u00fdm USB flash diskem. Jedin\u00fdm rozd\u00edlem je, \u017ee p\u0159i p\u0159ipojen\u00ed flash disku k nov\u00e9mu po\u010d\u00edta\u010di budete muset zadat nastaven\u00e9 heslo pro p\u0159\u00edstup k va\u0161im informac\u00edm.<\/p>\n<h2>Pro\u010d a komu jsou pot\u0159eba flash disky s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm?<\/h2>\n<p>\nPro organizace, ve kter\u00fdch jsou d\u016fv\u011brn\u00e9 informace sou\u010d\u00e1st\u00ed podnik\u00e1n\u00ed (a\u0165 u\u017e se jedn\u00e1 o finan\u010dn\u00ed, zdravotn\u00ed nebo st\u00e1tn\u00ed instituce), je \u0161ifrov\u00e1n\u00ed nejspolehliv\u011bj\u0161\u00edm prost\u0159edkem ochrany. <noindex><a rel=\"nofollow\" href=\"https:\/\/kings.tn\/KingstoneDatatrevelerFlashUSBHabr\">V tomto ohledu jsou flash disky s podporou 256-bitov\u00e9ho<\/a><\/noindex> Hardwarov\u00e9 \u0161ifrov\u00e1n\u00ed AES je \u0161k\u00e1lovateln\u00e9 \u0159e\u0161en\u00ed, kter\u00e9 m\u016f\u017ee pou\u017e\u00edvat jak\u00e1koli spole\u010dnost: od jednotlivc\u016f a mal\u00fdch podnik\u016f a\u017e po velk\u00e9 korporace, stejn\u011b jako vojensk\u00e9 a vl\u00e1dn\u00ed organizace. Pokud se na tuto problematiku pod\u00edv\u00e1me konkr\u00e9tn\u011bji, pou\u017eit\u00ed \u0161ifrovan\u00fdch USB flashdisk\u016f je nezbytn\u00e9:<\/p>\n<ul>\n<li>Pro zaji\u0161t\u011bn\u00ed bezpe\u010dnosti d\u016fv\u011brn\u00fdch dat spole\u010dnosti<\/li>\n<li>Pro ochranu informac\u00ed o z\u00e1kazn\u00edc\u00edch<\/li>\n<li>Pro ochranu spole\u010dnost\u00ed p\u0159ed ztr\u00e1tou zisku a loajality z\u00e1kazn\u00edk\u016f<\/li>\n<\/ul>\n<p>\nJe t\u0159eba poznamenat, \u017ee n\u011bkte\u0159\u00ed v\u00fdrobci zabezpe\u010den\u00fdch flashdisk\u016f (mezi nimi i spole\u010dnost Kingston) nab\u00edzej\u00ed podnik\u016fm individu\u00e1ln\u00ed \u0159e\u0161en\u00ed, kter\u00e1 jsou navr\u017eena podle pot\u0159eb a \u00fakol\u016f z\u00e1kazn\u00edk\u016f. Ale i masov\u011b vyr\u00e1b\u011bn\u00e9 \u0159ady (kde jsou i flashdisky DataTraveler) skv\u011ble pln\u00ed sv\u00e9 \u00fakoly a dok\u00e1\u017e\u00ed zajistit korpor\u00e1tn\u00ed \u00farove\u0148 bezpe\u010dnosti.<\/p>\n<p><img decoding=\"async\" alt=\"Pro\u010d pot\u0159ebujeme USB flash disky s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm?\" src=\"\/wp-content\/uploads\/2020\/09\/1a7da32b0922526ed61e43cf12531522.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2>1. Zaji\u0161t\u011bn\u00ed bezpe\u010dnosti d\u016fv\u011brn\u00fdch dat spole\u010dnosti<\/h2>\n<p>\nV roce 2017 objevil obyvatel Lond\u00fdna v jednom z park\u016f USB flashdisk, na kter\u00e9m byly nechr\u00e1n\u011bn\u00e9 informace t\u00fdkaj\u00edc\u00ed se bezpe\u010dnosti leti\u0161t\u011b Heathrow, v\u010detn\u011b um\u00edst\u011bn\u00ed kamer, podrobn\u00fdch informac\u00ed o opat\u0159en\u00edch k ochran\u011b p\u0159i p\u0159\u00edletu vysok\u00fdch vl\u00e1dn\u00edch \u010dinitel\u016f. Na flashdisku tak\u00e9 byla data elektronick\u00fdch propustek a k\u00f3dy pro p\u0159\u00edstup do uzav\u0159en\u00fdch z\u00f3n leti\u0161t\u011b.<\/p>\n<p>Analytici uv\u00e1d\u011bj\u00ed jako p\u0159\u00ed\u010dinu podobn\u00fdch situac\u00ed kybernetickou negramotnost zam\u011bstnanc\u016f spole\u010dnost\u00ed, kte\u0159\u00ed mohou \u201evysadit\u201c tajn\u00e9 \u00fadaje z vlastn\u00ed nedbalosti. Flashdisky s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm z\u010d\u00e1sti tuto problematiku \u0159e\u0161\u00ed, proto\u017ee v p\u0159\u00edpad\u011b ztr\u00e1ty takov\u00e9ho za\u0159\u00edzen\u00ed je zotaven\u00ed p\u0159\u00edstupu k dat\u016fm na n\u011bm bez master hesla t\u00e9ho\u017e zam\u011bstnance bezpe\u010dnostn\u00ed slu\u017eby nemo\u017en\u00e9. V ka\u017ed\u00e9m p\u0159\u00edpad\u011b to neodstra\u0148uje pot\u0159ebu \u0161kolit zam\u011bstnance o manipulaci s flashdisky, i kdy\u017e jde o za\u0159\u00edzen\u00ed chr\u00e1n\u011bn\u00e1 \u0161ifrov\u00e1n\u00edm.<\/p>\n<h2>2. Ochrana informac\u00ed o z\u00e1kazn\u00edc\u00edch<\/h2>\n<p>\nJe\u0161t\u011b d\u016fle\u017eit\u011bj\u0161\u00edm \u00fakolem pro jakoukoli organizaci je p\u00e9\u010de o z\u00e1kaznick\u00e1 data, kter\u00e1 by nem\u011bla b\u00fdt vystavena riziku kompromitace. Mimochodem, tato informace se nej\u010dast\u011bji p\u0159en\u00e1\u0161\u00ed mezi r\u016fzn\u00fdmi sektory podnik\u00e1n\u00ed a obvykle m\u00e1 d\u016fv\u011brn\u00fd charakter: nap\u0159\u00edklad m\u016f\u017ee obsahovat \u00fadaje o finan\u010dn\u00edch operac\u00edch, zdravotn\u00ed historii apod.<\/p>\n<h2>3. Ochrana proti ztr\u00e1t\u011b zisku a loajality z\u00e1kazn\u00edk\u016f<\/h2>\n<p>\nPou\u017eit\u00ed USB za\u0159\u00edzen\u00ed s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm m\u016f\u017ee pomoci p\u0159edej\u00edt ni\u010div\u00fdm n\u00e1sledk\u016fm pro organizace. Firmy, kter\u00e9 poru\u0161uj\u00ed z\u00e1kon o ochran\u011b osobn\u00edch \u00fadaj\u016f, mohou b\u00fdt pokutov\u00e1ny na vysok\u00e9 \u010d\u00e1stky. Proto je t\u0159eba se pt\u00e1t, zda stoj\u00ed za to riskovat v\u00fdm\u011bnu informac\u00ed bez \u0159\u00e1dn\u00e9 ochrany?<\/p>\n<p>I kdy\u017e nebereme v \u00favahu finan\u010dn\u00ed d\u016fsledky, mno\u017estv\u00ed \u010dasu a zdroj\u016f investovan\u00fdch do opravy vznikl\u00fdch bezpe\u010dnostn\u00edch chyb m\u016f\u017ee b\u00fdt tak\u00e9 zna\u010dn\u00e9. Nav\u00edc, pokud \u00fanik dat ohrozil \u00fadaje o z\u00e1kazn\u00edc\u00edch, firma riskuje loajalitu k zna\u010dce, zejm\u00e9na na trz\u00edch, kde existuj\u00ed konkurenti nab\u00edzej\u00edc\u00ed podobn\u00fd produkt nebo slu\u017ebu.<\/p>\n<h2>Kdo zaru\u010duje absenci \u201ebackdoor\u016f\u201c od v\u00fdrobce p\u0159i pou\u017e\u00edv\u00e1n\u00ed flash disk\u016f s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm?<\/h2>\n<p>\nV n\u00e1mi nastolen\u00e9m t\u00e9matu je tato ot\u00e1zka snad jednou z nejd\u016fle\u017eit\u011bj\u0161\u00edch. Mezi koment\u00e1\u0159i k \u010dl\u00e1nku o disk\u00e1ch Kingston DataTraveler jsme narazili na je\u0161t\u011b jednu zaj\u00edmavou ot\u00e1zku: \u201eM\u00e1te audit va\u0161ich za\u0159\u00edzen\u00ed od nez\u00e1visl\u00fdch odborn\u00edk\u016f?\u201c. No..., zcela logick\u00fd z\u00e1jem: u\u017eivatel\u00e9 cht\u011bj\u00ed m\u00edt jistotu, \u017ee na\u0161e USB disky nemaj\u00ed b\u011b\u017en\u00e9 chyby, jako je slab\u00e9 \u0161ifrov\u00e1n\u00ed nebo mo\u017enost obch\u00e1zen\u00ed zad\u00e1v\u00e1n\u00ed hesla. A v t\u00e9to \u010d\u00e1sti \u010dl\u00e1nku v\u00e1m \u0159ekneme, jak\u00e9 certifika\u010dn\u00ed postupy disky Kingston podstupuj\u00ed, ne\u017e z\u00edskaj\u00ed status skute\u010dn\u011b bezpe\u010dn\u00fdch flash disk\u016f.<\/p>\n<p>Kdo zaru\u010duje spolehlivost? Mohli bychom snad \u0159\u00edci, \u017ee \"Kingston vyrobil \u2013 on tak\u00e9 zaru\u010duje\". V tomto p\u0159\u00edpad\u011b by v\u0161ak takov\u00e9 prohl\u00e1\u0161en\u00ed bylo nespr\u00e1vn\u00e9, proto\u017ee v\u00fdrobce je zainteresovanou stranou. Proto v\u0161echny produkty proch\u00e1zej\u00ed kontrolou t\u0159et\u00edmi stranami s nez\u00e1vislou expert\u00edzou. Konkr\u00e9tn\u011b jsou disky Kingston s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm (s v\u00fdjimkou DTLPG3) \u00fa\u010dastn\u00edky programu validace kryptografick\u00fdch modul\u016f (Cryptographic Module Validation Program nebo CMVP) a jsou certifikov\u00e1ny podle feder\u00e1ln\u00edho standardu zpracov\u00e1n\u00ed informac\u00ed (Federal Information Processing Standard nebo FIPS). Disky jsou tak\u00e9 certifikov\u00e1ny podle standard\u016f GLBA, HIPPA, HITECH, PCI a GTSA.<\/p>\n<p><img decoding=\"async\" alt=\"Pro\u010d pot\u0159ebujeme USB flash disky s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm?\" src=\"\/wp-content\/uploads\/2020\/09\/f0ce4f1a2d086a61d0d9522955a10305.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2>1. Program validace kryptografick\u00fdch modul\u016f<\/h2>\n<p>\nProgram CMVP je spole\u010dn\u00fd projekt N\u00e1rodn\u00edho institutu standard\u016f a technologi\u00ed p\u0159i Ministerstvu obchodu USA a Kanadsk\u00e9ho centra kybernetick\u00e9 bezpe\u010dnosti. C\u00edlem projektu je stimulovat popt\u00e1vku po prov\u011b\u0159en\u00fdch kryptografick\u00fdch za\u0159\u00edzen\u00edch a poskytnout bezpe\u010dnostn\u00ed ukazatele feder\u00e1ln\u00edm \u00fa\u0159ad\u016fm a regulovan\u00fdm odv\u011btv\u00edm (jako jsou finan\u010dn\u00ed a zdravotnick\u00e9 instituce), kter\u00e9 se pou\u017e\u00edvaj\u00ed p\u0159i n\u00e1kupu vybaven\u00ed.<\/p>\n<p>Kontroly za\u0159\u00edzen\u00ed na shodu s sadou kryptografick\u00fdch po\u017eadavk\u016f a po\u017eadavk\u016f na bezpe\u010dnost prov\u00e1d\u011bj\u00ed nez\u00e1visl\u00e9 laborato\u0159e kryptografie a testov\u00e1n\u00ed bezpe\u010dnosti akreditovan\u00e9 NVLAP (National Voluntary Laboratory Accreditation Program \/ \"N\u00e1rodn\u00ed program dobrovoln\u00e9 akreditace laborato\u0159\u00ed\"). P\u0159itom je ka\u017ed\u00e9 laborato\u0159n\u00ed vyj\u00e1d\u0159en\u00ed ov\u011b\u0159eno na shodu s Feder\u00e1ln\u00edm standardem zpracov\u00e1n\u00ed informac\u00ed (FIPS) 140-2 a potvrzeno CMVP.<\/p>\n<p>Moduly potvrzen\u00e9 jako spl\u0148uj\u00edc\u00ed standard FIPS 140-2 jsou doporu\u010dov\u00e1ny k pou\u017e\u00edv\u00e1n\u00ed feder\u00e1ln\u00edmi \u00fa\u0159ady USA a Kanady do 22. z\u00e1\u0159\u00ed 2026. Po tomto datu budou za\u0159azeny do archiva\u010dn\u00edho seznamu, i kdy\u017e st\u00e1le mohou b\u00fdt pou\u017e\u00edv\u00e1ny. 22. z\u00e1\u0159\u00ed 2020 skon\u010dilo p\u0159ij\u00edm\u00e1n\u00ed \u017e\u00e1dost\u00ed o validaci podle standardu FIPS 140-3. Po dokon\u010den\u00ed zkou\u0161ek budou za\u0159\u00edzen\u00ed na p\u011bt let p\u0159evedena do aktivn\u00edho seznamu prov\u011b\u0159en\u00fdch a spolehliv\u00fdch za\u0159\u00edzen\u00ed. Pokud kryptografick\u00e9 za\u0159\u00edzen\u00ed neprojde zkou\u0161kou \u2013 jeho pou\u017eit\u00ed ve st\u00e1tn\u00edch instituc\u00edch USA a Kanady se nedoporu\u010duje.<\/p>\n<h2>2. Jak\u00e9 bezpe\u010dnostn\u00ed po\u017eadavky klade certifikace FIPS?<\/h2>\n<p>\nZ\u00edsk\u00e1n\u00ed dat i z necertifikovan\u00e9ho \u0161ifrovan\u00e9ho disku je obt\u00ed\u017en\u00e9 a pro n\u011bkoho t\u011b\u017eko p\u0159ekonateln\u00e9, tak\u017ee p\u0159i v\u00fdb\u011bru spot\u0159ebitelsk\u00e9ho \u00falo\u017ei\u0161t\u011b pro dom\u00e1c\u00ed pou\u017eit\u00ed se certifikac\u00ed nen\u00ed t\u0159eba se p\u0159\u00edli\u0161 ob\u00e1vat. V korpor\u00e1tn\u00ed sf\u00e9\u0159e je situace v\u0161ak jin\u00e1: p\u0159i v\u00fdb\u011bru zabezpe\u010den\u00fdch USB disk\u016f firmy \u010dasto posuzuj\u00ed \u00farovn\u011b certifikace FIPS. Ne ka\u017ed\u00fd m\u00e1 jasnou p\u0159edstavu o tom, co tyto \u00farovn\u011b znamenaj\u00ed. <\/p>\n<p>Sou\u010dasn\u00fd standard FIPS 140-2 definuje \u010dty\u0159i r\u016fzn\u00e9 \u00farovn\u011b bezpe\u010dnosti, kter\u00fdm mohou odpov\u00eddat flash disky. Prvn\u00ed \u00farove\u0148 zaji\u0161\u0165uje m\u00edrnou sadu bezpe\u010dnostn\u00edch funkc\u00ed. \u010ctvrt\u00e1 \u00farove\u0148 \u2013 zahrnuje p\u0159\u00edsn\u00e9 po\u017eadavky na sebesamoprotekci za\u0159\u00edzen\u00ed. \u00darovn\u011b dv\u011b a t\u0159i zaji\u0161\u0165uj\u00ed gradaci t\u011bchto po\u017eadavk\u016f a tvo\u0159\u00ed jakousi zlatou st\u0159edn\u00ed cestu.<\/p>\n<ol>\n<li>Prvn\u00ed \u00farove\u0148 bezpe\u010dnosti: pro USB disky certifikovan\u00e9 na prvn\u00ed \u00farovni se p\u0159edpokl\u00e1d\u00e1 pou\u017eit\u00ed alespo\u0148 jednoho \u0161ifrovac\u00edho algoritmu nebo jin\u00e9 funkce zabezpe\u010den\u00ed. <\/li>\n<li>Druh\u00e1 \u00farove\u0148 bezpe\u010dnosti: zde se od disku vy\u017eaduje nejen zaji\u0161t\u011bn\u00ed kryptografick\u00e9 ochrany, ale tak\u00e9 registrace neopr\u00e1vn\u011bn\u00fdch z\u00e1sah\u016f na mikroprogramov\u00e9 \u00farovni, pokud se n\u011bkdo pokus\u00ed disk otev\u0159\u00edt.<\/li>\n<li>T\u0159et\u00ed \u00farove\u0148 bezpe\u010dnosti: zahrnuje prevenci proti hackingu prost\u0159ednictv\u00edm zni\u010den\u00ed \"kl\u00ed\u010d\u016f\" \u0161ifrov\u00e1n\u00ed. To znamen\u00e1, \u017ee je vy\u017eadov\u00e1na odezva na pokusy o pr\u016fnik. T\u0159et\u00ed \u00farove\u0148 tak\u00e9 zaru\u010duje vy\u0161\u0161\u00ed \u00farove\u0148 ochrany proti elektromagnetick\u00e9mu ru\u0161en\u00ed: to znamen\u00e1, \u017ee nen\u00ed mo\u017en\u00e9 \u010d\u00edst data z flash disku pomoc\u00ed bezdr\u00e1tov\u00fdch hackovac\u00edch za\u0159\u00edzen\u00ed.<\/li>\n<li>\u010ctvrt\u00e1 \u00farove\u0148 bezpe\u010dnosti: nejvy\u0161\u0161\u00ed \u00farove\u0148, kter\u00e1 p\u0159edpokl\u00e1d\u00e1 \u00faplnou ochranu kryptografick\u00e9ho modulu, kter\u00e1 zaji\u0161\u0165uje maxim\u00e1ln\u00ed pravd\u011bpodobnost odhalen\u00ed a protiopat\u0159en\u00ed v\u016f\u010di jak\u00fdmkoli pokus\u016fm o neopr\u00e1vn\u011bn\u00fd p\u0159\u00edstup ze strany ciz\u00edho u\u017eivatele. Flash disky, kter\u00e9 z\u00edskaly certifikaci \u010dtvrt\u00e9 \u00farovn\u011b, zahrnuj\u00ed tak\u00e9 takov\u00e9 ochrann\u00e9 mo\u017enosti, kter\u00e9 neumo\u017e\u0148uj\u00ed hacking prost\u0159ednictv\u00edm zm\u011bny nap\u011bt\u00ed a teploty okoln\u00edho prost\u0159ed\u00ed.<\/li>\n<\/ol>\n<p>\nPodle standardu FIPS 140-2 t\u0159et\u00ed \u00farovn\u011b jsou certifikov\u00e1ny n\u00e1sleduj\u00edc\u00ed \u00falo\u017ei\u0161t\u011b Kingston: DataTraveler DT2000, DataTraveler DT4000G2, IronKey S1000, IronKey D300. Kl\u00ed\u010dovou vlastnost\u00ed t\u011bchto \u00falo\u017ei\u0161\u0165 je schopnost reagovat na pokusy o neautorizovan\u00fd p\u0159\u00edstup: p\u0159i desetin\u00e1sobn\u00e9m chybn\u00e9m zad\u00e1n\u00ed hesla dojde k vymaz\u00e1n\u00ed dat na \u00falo\u017ei\u0161ti.<\/p>\n<h2>Co dal\u0161\u00edho um\u00ed USB flash disky Kingston krom\u011b \u0161ifrov\u00e1n\u00ed? <\/h2>\n<p>\nKdy\u017e se mluv\u00ed o \u00fapln\u00e9 bezpe\u010dnosti dat, vedle hardwarov\u00e9ho \u0161ifrov\u00e1n\u00ed flash disk\u016f p\u0159ich\u00e1zej\u00ed na pomoc vestav\u011bn\u00e9 antiviry, ochrana proti vn\u011bj\u0161\u00edm vliv\u016fm, synchronizace s osobn\u00edmi cloudov\u00fdmi slu\u017ebami a dal\u0161\u00ed funkce, o kter\u00fdch si pov\u00edme n\u00ed\u017ee. Mezi flash disky s programov\u00fdm \u0161ifrov\u00e1n\u00edm nen\u00ed \u017e\u00e1dn\u00fd v\u00fdrazn\u00fd rozd\u00edl. \"\u010e\u00e1bel\" se skr\u00fdv\u00e1 v detailech. A zde je n\u011bkolik z nich.<\/p>\n<p><b>1. Kingston DataTraveler 2000<\/b><\/p>\n<p><img decoding=\"async\" alt=\"Pro\u010d pot\u0159ebujeme USB flash disky s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm?\" src=\"\/wp-content\/uploads\/2020\/09\/a1c47ccd1206c8bd962c359f6e0c74ef.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nVezm\u011bme si jako p\u0159\u00edklad USB flash disk <noindex><a rel=\"nofollow\" href=\"https:\/\/kings.tn\/KingstonDatarraveler2000Habr\">Kingston DataTraveler 2000<\/a><\/noindex>. To je jeden z flash disk\u016f s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm, ale p\u0159itom jedin\u00fd s vlastn\u00ed fyzickou kl\u00e1vesnic\u00ed na t\u011ble. Tato 11-tla\u010d\u00edtkov\u00e1 kl\u00e1vesnice \u010din\u00ed DT2000 zcela nez\u00e1visl\u00fdm na hostitelsk\u00fdch syst\u00e9mech (abyste mohli pou\u017e\u00edvat DataTraveler 2000, mus\u00edte stisknout tla\u010d\u00edtko \"Kl\u00ed\u010d\", pot\u00e9 zadat sv\u00e9 heslo a znovu stisknout tla\u010d\u00edtko \"Kl\u00ed\u010d\"). Krom\u011b toho m\u00e1 tento flash disk stupe\u0148 ochrany IP57 proti vod\u011b a prachu (co\u017e je p\u0159ekvapuj\u00edc\u00ed, proto\u017ee Kingston to nikde neuv\u00e1d\u00ed ani na obalu, ani v parametrech na ofici\u00e1ln\u00edch str\u00e1nk\u00e1ch).<\/p>\n<p>Uvnit\u0159 DataTraveler 2000 je lithium-polymerov\u00e1 baterie (s kapacitou 40 mAh), a Kingston doporu\u010duje z\u00e1kazn\u00edk\u016fm p\u0159ipojit \u00falo\u017ei\u0161t\u011b k USB portu alespo\u0148 na hodinu, ne\u017e ho za\u010dnou pou\u017e\u00edvat, aby se baterie mohla nab\u00edt. Mimochodem, v jednom z p\u0159edchoz\u00edch materi\u00e1l\u016f <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/kingston_technology\/blog\/519268\/\">jsme psali, co se stane s flash diskem, kter\u00fd se nab\u00edj\u00ed z powerbanky<\/a><\/noindex>: nen\u00ed d\u016fvod k obav\u00e1m \u2013 ve nab\u00edje\u010dce se flash disk neaktivuje, proto\u017ee neexistuj\u00ed \u017e\u00e1dosti k \u0159adi\u010di ze strany syst\u00e9mu. Proto nikdo neukradne va\u0161e data prost\u0159ednictv\u00edm bezdr\u00e1tov\u00e9ho \u00fatoku.<\/p>\n<p><b>2. Kingston DataTraveler Locker+ G3<\/b><\/p>\n<p><img decoding=\"async\" alt=\"Pro\u010d pot\u0159ebujeme USB flash disky s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm?\" src=\"\/wp-content\/uploads\/2020\/09\/fb25f5a5b82d6f87cef9a154040b0238.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPokud mluv\u00edme o modelu Kingston <noindex><a rel=\"nofollow\" href=\"https:\/\/kings.tn\/KingstoneDatatravelerLockerPlusG3Habr\">DataTraveler Locker+ G3<\/a><\/noindex> \u2013 p\u0159itahuje pozornost mo\u017enost\u00ed nastaven\u00ed z\u00e1lohov\u00e1n\u00ed dat z flash disku do cloudov\u00e9ho \u00falo\u017ei\u0161t\u011b Google, OneDrive, Amazon Cloud nebo Dropbox. Synchronizace dat s t\u011bmito slu\u017ebami je tak\u00e9 zaji\u0161t\u011bna. <\/p>\n<p>Jedna z ot\u00e1zek, kter\u00e9 n\u00e1m \u010dten\u00e1\u0159i kladou, zn\u00ed: \u201eJak z\u00edskat \u0161ifrovan\u00e1 data z z\u00e1lohy?\u201c. Je to velmi jednoduch\u00e9. P\u0159i synchronizaci s cloudem se informace de\u0161ifruj\u00ed a bezpe\u010dnost z\u00e1lohy na cloudu z\u00e1vis\u00ed na mo\u017enostech samotn\u00e9ho cloudu. Tyto postupy se proto prov\u00e1d\u011bj\u00ed v\u00fdhradn\u011b na \u017e\u00e1dost u\u017eivatele. Bez jeho souhlasu \u017e\u00e1dn\u00fd export dat do cloudu nebude.<\/p>\n<p><b>3. Kingston DataTraveler Vault Privacy 3.0<\/b><\/p>\n<p><img decoding=\"async\" alt=\"Pro\u010d pot\u0159ebujeme USB flash disky s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm?\" src=\"\/wp-content\/uploads\/2020\/09\/b0151c58494eaafd5a54e323b586747f.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nToto za\u0159\u00edzen\u00ed od Kingstonu <noindex><a rel=\"nofollow\" href=\"https:\/\/kings.tn\/KingstonedatatravelerVaultPrivacy30Habr\">DataTraveler Vault Privacy 3.0<\/a><\/noindex> je tak\u00e9 dod\u00e1v\u00e1no s vestav\u011bn\u00fdm antivirov\u00fdm programem Drive Security od spole\u010dnosti ESET. Ten chr\u00e1n\u00ed data p\u0159ed \u00fatoky vir\u016f, \u0161pehovac\u00edch program\u016f, trojsk\u00fdch kon\u00ed, \u010derv\u016f, rootkit\u016f a p\u0159ed p\u0159ipojen\u00edm k ciz\u00edm po\u010d\u00edta\u010d\u016fm. Antivirov\u00fd program okam\u017eit\u011b upozorn\u00ed majitele za\u0159\u00edzen\u00ed na potenci\u00e1ln\u00ed hrozby, pokud jsou detekov\u00e1ny. U\u017eivatel nemus\u00ed instalovat antivirov\u00fd software s\u00e1m a platit za tuto mo\u017enost. ESET Drive Security je p\u0159edinstalov\u00e1n na flash disku s licenc\u00ed na p\u011bt let. <\/p>\n<p>Kingston DT Vault Privacy 3.0 je navr\u017een p\u0159edev\u0161\u00edm pro IT specialisty. Umo\u017e\u0148uje administr\u00e1tor\u016fm pou\u017e\u00edvat ho jako samostatn\u00fd \u00falo\u017ei\u0161t\u011b nebo ho p\u0159idat jako sou\u010d\u00e1st \u0159e\u0161en\u00ed pro centr\u00e1ln\u00ed spr\u00e1vu, a tak\u00e9 m\u016f\u017ee b\u00fdt pou\u017e\u00edv\u00e1n pro nastaven\u00ed nebo vzd\u00e1len\u00e9 obnoven\u00ed hesel a nastaven\u00ed politik za\u0159\u00edzen\u00ed. Kingston dokonce p\u0159idal USB 3.0, kter\u00e9 umo\u017e\u0148uje p\u0159enos chr\u00e1n\u011bn\u00fdch dat mnohem rychleji ne\u017e p\u0159es USB 2.0.<\/p>\n<p>Celkov\u011b je DT Vault Privacy 3.0 vynikaj\u00edc\u00ed volbou pro korpor\u00e1tn\u00ed sektor a organizace, kter\u00e9 vy\u017eaduj\u00ed maxim\u00e1ln\u00ed ochranu sv\u00fdch dat. Doporu\u010duje se tak\u00e9 v\u0161em u\u017eivatel\u016fm, kte\u0159\u00ed pou\u017e\u00edvaj\u00ed po\u010d\u00edta\u010de nach\u00e1zej\u00edc\u00ed se v ve\u0159ejn\u00fdch s\u00edt\u00edch.<\/p>\n<p>Pro v\u00edce informac\u00ed o produktech Kingston se obracejte na <noindex><a rel=\"nofollow\" href=\"https:\/\/kings.tn\/KingstoneDatatrevelerFlashUSBHabr\">ofici\u00e1ln\u00ed webov\u00e9 str\u00e1nky spole\u010dnosti<\/a><\/noindex>.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/kingston_technology\/blog\/521084\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440! \u0412 \u043a\u043e\u043c\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f\u0445 \u043a \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u043d\u0430\u0448\u0438\u0445 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432 \u043f\u0440\u043e \u0444\u043b\u0435\u0448-\u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u0438 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0438 \u0437\u0430\u0434\u0430\u043b\u0438 \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0439 \u0432\u043e\u043f\u0440\u043e\u0441: \u201c\u0417\u0430\u0447\u0435\u043c \u043d\u0443\u0436\u043d\u0430 \u0444\u043b\u0435\u0448\u043a\u0430 \u0441 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c, \u043a\u043e\u0433\u0434\u0430 \u0435\u0441\u0442\u044c TrueCrypt?\u201d, \u2013 \u0438 \u0434\u0430\u0436\u0435 \u0432\u044b\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043e\u043f\u0430\u0441\u0435\u043d\u0438\u044f \u043f\u043e \u0447\u0430\u0441\u0442\u0438 \u0442\u043e\u0433\u043e \u201c\u041a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0443\u0431\u0435\u0434\u0438\u0442\u044c\u0441\u044f, \u0447\u0442\u043e \u0432 \u0441\u043e\u0444\u0442\u0435 \u0438 \u0445\u0430\u0440\u0434\u0432\u0430\u0440\u043d\u043e\u0439 \u0447\u0430\u0441\u0442\u0438 \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u044f Kingston \u043d\u0435\u0442 \u0437\u0430\u043a\u043b\u0430\u0434\u043e\u043a?\u201d. \u041c\u044b \u0435\u043c\u043a\u043e \u043e\u0442\u0432\u0435\u0442\u0438\u043b\u0438 \u043d\u0430 \u044d\u0442\u0438 \u0432\u043e\u043f\u0440\u043e\u0441\u044b, \u043d\u043e \u0437\u0430\u0442\u0435\u043c \u0440\u0435\u0448\u0438\u043b\u0438, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":95489,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-95488","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440!\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/zachem-nuzhny-fleshki-s-apparatnym-shifrovaniem\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0417\u0430\u0447\u0435\u043c \u043d\u0443\u0436\u043d\u044b \u0444\u043b\u0435\u0448\u043a\u0438 \u0441 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440!\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/zachem-nuzhny-fleshki-s-apparatnym-shifrovaniem\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-09-30T05:42:29+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-09-30T05:42:29+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pro\u010d jsou pot\u0159eba flash disky s hardwarov\u00fdm \u0161ifrov\u00e1n\u00edm? | ProHoster","description":"Ahoj, Habr!","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/zachem-nuzhny-fleshki-s-apparatnym-shifrovaniem","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0417\u0430\u0447\u0435\u043c \u043d\u0443\u0436\u043d\u044b \u0444\u043b\u0435\u0448\u043a\u0438 \u0441 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u043c \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435\u043c? | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442, \u0425\u0430\u0431\u0440!","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/zachem-nuzhny-fleshki-s-apparatnym-shifrovaniem","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-30T05:42:29+00:00","article:modified_time":"2020-09-30T05:42:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"95488","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:04:41","updated":"2022-09-28 09:04:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/95488","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=95488"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/95488\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/95489"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=95488"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=95488"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=95488"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}