{"id":103000,"date":"2022-01-18T15:36:39","date_gmt":"2022-01-18T13:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-hostapd-%d0%b8-wpa_supplicant-2-10"},"modified":"2022-01-18T15:36:39","modified_gmt":"2022-01-18T13:36:39","slug":"%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-hostapd-%d0%b8-wpa_supplicant-2-10","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-hostapd-%d0%b8-wpa_supplicant-2-10","title":{"rendered":"Udgivelse af hostapd og wpa_supplicant 2.10","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Efter halvandet \u00e5r med udvikling er udgivelsen af hostapd\/wpa_supplicant 2.10 klar, et s\u00e6t til underst\u00f8ttelse af tr\u00e5dl\u00f8se protokoller IEEE 802.1X, WPA, WPA2, WPA3 og EAP, der best\u00e5r af applikationen wpa_supplicant til tilslutning til et tr\u00e5dl\u00f8st netv\u00e6rk som klient og baggrundsprocessen hostapd til at sikre drift af adgangspunktet og autentificeringsserveren, som inkluderer komponenter som WPA Authenticator, RADIUS klient\/server autentificering, EAP server. Kildekoderne til projektet distribueres under BSD-licensen.      <\/p>\n<p>Udover funktions\u00e6ndringer i den nye version er der blokkeret en ny angrebsvektor via sidekanaler, der p\u00e5virker metoden til forhandling af forbindelser SAE (Simultaneous Authentication of Equals) og EAP-pwd-protokollen. En angriber, der har mulighed for at udf\u00f8re ikke-privilegeret kode p\u00e5 brugerens system, som tilslutter sig det tr\u00e5dl\u00f8se netv\u00e6rk, kan ved at overv\u00e5ge systemaktiviteten f\u00e5 oplysninger om karakteristikaene for adgangskoden og bruge dem til at lette g\u00e6tningen af adgangskoden i offline-tilstand. Problemet skyldes l\u00e6kage af oplysninger om adgangskodens karakteristika via sidekanaler, som g\u00f8r det muligt at pr\u00e6cisere rigtigheden af de valgte dele af adgangskoden under g\u00e6tningen baseret p\u00e5 indirekte data, s\u00e5som \u00e6ndringer i forsinkelser ved udf\u00f8relse af operationer.     <\/p>\n<p>I mods\u00e6tning til lignende problemer, der blev l\u00f8st i 2019, skyldes den nye s\u00e5rbarhed, at de eksterne kryptografiske primitiv, der anvendes i funktionen crypto_ec_point_solve_y_coord(), ikke sikrede konstant udf\u00f8relsestid, uafh\u00e6ngigt af arten af de behandlede data. Baseret p\u00e5 analyse af CPU-cache-adf\u00e6rd kunne en angriber, der havde mulighed for at k\u00f8re ikke-privilegeret kode p\u00e5 samme CPU-kerne, f\u00e5 oplysninger om udf\u00f8relsen af operationer med adgangskoden i SAE\/EAP-pwd. Problemet p\u00e5virker alle versioner af wpa_supplicant og hostapd, der er bygget med st\u00f8tte for SAE (CONFIG_SAE=y) og EAP-pwd (CONFIG_EAP_PWD=y).        <\/p>\n<p>Andre \u00e6ndringer i de nye udgivelser af hostapd og wpa_supplicant:   <\/p>\n<ul>\n<li class=\"l\"> Muligheden for at bygge med den kryptografiske biblioteks OpenSSL 3.0 er tilf\u00f8jet.\n<li class=\"l\"> Den i opdateringen af WPA3-specifikationen foresl\u00e5ede mekanisme Beacon Protection er implementeret, beregnet til at beskytte mod aktive angreb p\u00e5 det tr\u00e5dl\u00f8se netv\u00e6rk, der manipulerer \u00e6ndringen af Beacon-rammer.\n<li class=\"l\"> Der er tilf\u00f8jet support for DPP 2 (Wi-Fi Device Provisioning Protocol), som definerer en metode til autentificering ved hj\u00e6lp af offentlige n\u00f8gler, anvendt i WPA3-standarden til nem konfiguration af enheder uden sk\u00e6rmgr\u00e6nseflade. Konfigurationen udf\u00f8res ved hj\u00e6lp af en anden, mere avanceret enhed, der allerede er tilsluttet det tr\u00e5dl\u00f8se netv\u00e6rk. For eksempel kan indstillinger for en IoT-enhed uden sk\u00e6rm angives med en smartphone baseret p\u00e5 et QR-kodebillede, trykt p\u00e5 enhedens krop;\n<li class=\"l\"> Der er tilf\u00f8jet support for udvidede n\u00f8gleidentifikatorer (Extended Key ID, IEEE 802.11-2016).\n<li class=\"l\"> Metoden til forhandling af SAE-forbindelser har f\u00e5et tilf\u00f8jet st\u00f8tte til beskyttelsesmekanismen SAE-PK (SAE Public Key). Der er implementeret en tilstand for \u00f8jeblikkelig bekr\u00e6ftelse, der aktiveres med indstillingen &#171;sae_config_immediate=1&#187;, samt en hash-til-element mekanisme, der aktiveres ved at indstille parameteren sae_pwe til v\u00e6rdierne 1 eller 2.\n<li class=\"l\"> EAP-TLS-implementeringen har f\u00e5et tilf\u00f8jet support for TLS 1.3 (deaktiveret som standard).\n<li class=\"l\"> Nye indstillinger (max_auth_rounds, max_auth_rounds_short) er tilf\u00f8jet for at \u00e6ndre gr\u00e6nserne for antallet af EAP-beskeder under autentificeringsprocessen (\u00e6ndring af gr\u00e6nserne kan v\u00e6re n\u00f8dvendig, n\u00e5r der bruges meget store certifikater).\n<li class=\"l\"> Der er tilf\u00f8jet support for PASN (Pre Association Security Negotiation)-mekanismen til oprettelse af en sikker forbindelse og beskyttelse af kontrolrammeudvekslingen p\u00e5 det tidlige stadie af tilslutning.\n<li class=\"l\"> Der er implementeret en Transition Disable-mekanisme, der automatisk deaktiverer roamingtilstand for at styrke sikkerheden, hvilket tillader skift mellem adgangspunkter under bev\u00e6gelse.\n<li class=\"l\"> Support for WEP-protokollen er ekskluderet fra standardbygningerne (for at genindf\u00f8re support for WEP kr\u00e6ves en genopbygning med indstillingen CONFIG_WEP=y). For\u00e6ldet funktionalitet relateret til IAPP-protokollen (Inter-Access Point Protocol) er fjernet. Support for libnl 1.1 er oph\u00f8rt. En byggeindstilling CONFIG_NO_TKIP=y er tilf\u00f8jet til opbygning uden support for TKIP.\n<li class=\"l\"> S\u00e5rbarheder i implementeringen af UPnP (CVE-2020-12695), i P2P\/Wi-Fi Direct-behandleren (CVE-2021-27803) og PMF-beskyttelsesmekanismen (CVE-2019-16275) er blevet afhjulpet.\n<li class=\"l\"> Blandt de hostapd-specifikke \u00e6ndringer kan n\u00e6vnes udvidet support for HEW (High-Efficiency Wireless, IEEE 802.11ax) tr\u00e5dl\u00f8se netv\u00e6rk, inklusive muligheden for at bruge 6 GHz frekvensb\u00e5ndet.\n<li class=\"l\"> \u00c6ndringer specifikke for wpa_supplicant:\n<ul>\n<li class=\"l\"> Der er tilf\u00f8jet support for AP-tilstandsindstillinger for SAE (WPA3-Personal).\n<li class=\"l\"> For EDMG-kanaler (IEEE 802.11ay) er der implementeret support for P2P-tilstand.\n<li class=\"l\"> Forbedret kapacitetsprognose og valg af BSS.\n<li class=\"l\"> Udvidet administrationsgr\u00e6nseflade via D-Bus.\n<li class=\"l\"> Tilf\u00f8jet en ny backend til opbevaring af adgangskoder i en separat fil, der muligg\u00f8r at adskille f\u00f8lsomme oplysninger fra den prim\u00e6re konfigurationsfil.\n<li class=\"l\"> Nye politikker til SCS, MSCS og DSCP er blevet tilf\u00f8jet.    <\/ul>\n<\/ul>\n<p>Kilde: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=56528\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0442\u043e\u0440\u0430 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a hostapd\/wpa_supplicant 2.10, \u043d\u0430\u0431\u043e\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 IEEE 802.1X, WPA, WPA2, WPA3 \u0438 EAP, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0438\u0437 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f wpa_supplicant \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0432 \u0440\u043e\u043b\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u0438 \u0444\u043e\u043d\u043e\u0432\u043e\u0433\u043e \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 hostapd \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0442\u043e\u0447\u043a\u0438 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0438 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0442\u0430\u043a\u0438\u0435 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u044b \u043a\u0430\u043a WPA Authenticator, \u043a\u043b\u0438\u0435\u043d\u0442\/\u0441\u0435\u0440\u0432\u0435\u0440 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 RADIUS, \u0441\u0435\u0440\u0432\u0435\u0440 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-103000","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0442\u043e\u0440\u0430 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a hostapd\/wpa_supplicant 2.10, \u043d\u0430\u0431\u043e\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 IEEE 802.1X, WPA, WPA2, WPA3 \u0438 EAP, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0438\u0437 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f wpa_supplicant \u0434\u043b\u044f.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/da\/blog\/news\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-hostapd-%d0%b8-wpa_supplicant-2-10\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"da_DK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a hostapd \u0438 wpa_supplicant 2.10 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0442\u043e\u0440\u0430 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a hostapd\/wpa_supplicant 2.10, \u043d\u0430\u0431\u043e\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 IEEE 802.1X, WPA, WPA2, WPA3 \u0438 EAP, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0438\u0437 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f wpa_supplicant \u0434\u043b\u044f.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/da\/blog\/news\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-hostapd-%d0%b8-wpa_supplicant-2-10\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2022-01-18T13:36:39+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2022-01-18T13:36:39+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Udgivelse af hostapd og wpa_supplicant 2.10 | ProHoster","description":"Efter halvandet \u00e5rs udvikling er udgivelsen af hostapd\/wpa_supplicant 2.10 klar, et s\u00e6t til at underst\u00f8tte tr\u00e5dl\u00f8se protokoller IEEE 802.1X, WPA, WPA2, WPA3 og EAP, best\u00e5ende af applikationen wpa_supplicant.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-hostapd-%d0%b8-wpa_supplicant-2-10","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a hostapd \u0438 wpa_supplicant 2.10 | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0442\u043e\u0440\u0430 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u0432\u044b\u043f\u0443\u0441\u043a hostapd\/wpa_supplicant 2.10, \u043d\u0430\u0431\u043e\u0440\u0430 \u0434\u043b\u044f \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u043e\u0432 IEEE 802.1X, WPA, WPA2, WPA3 \u0438 EAP, \u0441\u043e\u0441\u0442\u043e\u044f\u0449\u0435\u0433\u043e \u0438\u0437 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f wpa_supplicant \u0434\u043b\u044f.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/%d0%b2%d1%8b%d0%bf%d1%83%d1%81%d0%ba-hostapd-%d0%b8-wpa_supplicant-2-10","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-18T13:36:39+00:00","article:modified_time":"2022-01-18T13:36:39+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"103000","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-18 13:37:44","updated":"2022-09-28 16:29:49","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/103000","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=103000"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/103000\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=103000"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=103000"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=103000"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}