Efter syv \u00e5rs udvikling er version 1.0 af kommandolinjev\u00e6rkt\u00f8jet sq blevet frigivet til arbejde med OpenPGP-artefakter. V\u00e6rkt\u00f8jet er udviklet af Sequoia PGP-projektet, som ogs\u00e5 udvikler et funktionsbibliotek med implementering af OpenPGP-standarden (RFC-4880). Udgivelsen af version 1.0 markerer den f\u00f8rste stabile version af projektet, hvilket indeb\u00e6rer stabilisering af kodebasen og oph\u00f8r af \u00e6ndringer, der bryder bagudkompatibiliteten. Koden er skrevet i Rust og distribueres under GPLv2+-licensen. <\/p>\n
V\u00e6rkt\u00f8jet er inkluderet i distributionen af Red Hat Enterprise Linux 10 som et alternativ til GnuPG, det bruges til at arbejde med PGP i pakkeh\u00e5ndtererne DNF og RPM, og anvendes som standard i den eksperimentelle gren af pakkeh\u00e5ndteren APT, n\u00e5r Sequoia-komponenter er tilg\u00e6ngelige i systemet. Den n\u00f8gleserver, der er oprettet af Sequoias udviklere, Hagrid, anvendes p\u00e5 tjenesten keys.openpgp.org. <\/p>\n
Sequoia-projektet er oprettet af tre udviklere af GnuPG fra firmaet g10code, som specialiserer sig i revision af kryptosystemer og udvikling af udvidelser til GnuPG. Projektets m\u00e5l er at redesignse arkitekturen og implementere nye teknikker til at \u00f8ge sikkerheden og p\u00e5lideligheden af kodebasen. Ud over brugen af Rust for at reducere sandsynligheden for hukommelsesfejl, implementerer Sequoia ekstra fejlbeskyttelse p\u00e5 API-niveau. For eksempel tillader API'et ikke utilsigtet eksport af materialet fra den hemmelige n\u00f8gle og beskytter mod at springe vigtige handlinger over i opdateringen af den digitale underskrift. For yderligere isolering anvendes procesopdeling for de tjenester, der arbejder med \u00e5bne og lukkede n\u00f8gler. <\/p>\n
Ud over funktionerne til datakryptering, arbejde med elektroniske underskrifter og n\u00f8gleadministration, der ligner mulighederne i gpg, tilbyder sq desuden en decentraliseret infrastruktur for offentlige n\u00f8gler (PKI). PKI bruges til autentificering af certifikater og meddelelser og sikrer, at den modtagne offentlige n\u00f8gle og den accepterede meddelelse er knyttet til den angivne forfatter og ikke er genereret af en angriber. <\/p>\n
N\u00e5r certifikatet downloades fra keys.openpgp.org eller en anden n\u00f8gleserver, gemmer sq-v\u00e6rkt\u00f8jet automatisk informationen om certifikatet p\u00e5 det lokale system og bruger denne information ved efterf\u00f8lgende operationer for at identificere falske certifikater. Det skal bem\u00e6rkes, at det implementerede system kan fungere som grundlag for at opbygge et tilsvarende distribueret certifikationscenter (CA), der d\u00e6kker forskellige n\u00f8gleservere. <\/p>\n
For eksempel, f\u00f8r brugeren verificerer de downloadede OS Qubes-versioner, kan han f\u00f8rst kontrollere Qubes-certifikatet, der gives fra hovedn\u00f8gleserveren for Qubes-projektet: sq network search https:\/\/keys.qubes-os.org\/keys\/qubes-release-4.2-signing-key.asc <\/p>\n
Den angivne kommando vil hente certifikatet fra serveren keys.qubes-os.org og derefter kontrollere dets tilg\u00e6ngelighed p\u00e5 kendte n\u00f8gleservere, s\u00e5som keys.openpgp.org og keyserver.ubuntu.com, eller fors\u00f8ge at f\u00e5 det via WKD (Web Key Directory) og DANE (DNS-Based Authentication of Named Entities) mekanismer. Derefter vil v\u00e6rkt\u00f8jet sammenligne de modtagne certifikater, og hvis de tilh\u00f8rer den samme ejer, vil det foresl\u00e5 at bruge kommandoen «sq pki link add» til at gemme certifikatet p\u00e5 det lokale system for fremtidige kontroller. Efter gemning vil certifikatet blive anset for at v\u00e6re p\u00e5lideligt, og for at downloade versioner med kontrol af deres \u00e6gthed, vil det v\u00e6re tilstr\u00e6kkeligt at udf\u00f8re kommandoen: sq download —signature-url https:\/\/mirrors.edge.kernel.org\/qubes\/iso\/Qubes-R4.2.3-x86_64.iso.asc —url https:\/\/mirrors.edge.kernel.org\/qubes\/iso\/Qubes-R4.2.3-x86_64.iso —output \/tmp\/qubes.iso \u041f\u043e\u0441\u043b\u0435 \u0441\u0435\u043c\u0438 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 sq 1.0, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u0430\u043c\u0438 OpenPGP. \u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Sequoia PGP, \u0442\u0430\u043a\u0436\u0435 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u043c \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 OpenPGP (RFC-4880). \u0412\u044b\u043f\u0443\u0441\u043a 1.0 \u043e\u0442\u043c\u0435\u0447\u0435\u043d \u043a\u0430\u043a \u043f\u0435\u0440\u0432\u044b\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u043e\u0437\u043d\u0430\u0447\u0430\u044e\u0449\u0438\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u043a\u043e\u0434\u043e\u0432\u043e\u0439 \u0431\u0430\u0437\u044b \u0438 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u0435 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u043d\u0430\u0440\u0443\u0448\u0430\u044e\u0449\u0438\u0445 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u0438\u043c\u043e\u0441\u0442\u044c. \u041a\u043e\u0434 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-121004","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Den f\u00f8rste stabile udgave af PGP-v\u00e6rkt\u00f8jet sq fra Sequoia-projektet | ProHoster","description":"Efter syv \u00e5rs udvikling er frigivet kommandolinjev\u00e6rkt\u00f8jet sq 1.0, som er designet til at arbejde med OpenPGP-artefakter.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/pervyj-stabilnyj-reliz-pgp-instrumentariya-sq-ot-proekta-sequoia","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0435\u0440\u0432\u044b\u0439 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 \u0440\u0435\u043b\u0438\u0437 PGP-\u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f sq \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Sequoia | ProHoster","og:description":"\u041f\u043e\u0441\u043b\u0435 \u0441\u0435\u043c\u0438 \u043b\u0435\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d \u0440\u0435\u043b\u0438\u0437 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 sq 1.0, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u043e\u0433\u043e \u0434\u043b\u044f \u0440\u0430\u0431\u043e\u0442\u044b \u0441 \u0430\u0440\u0442\u0435\u0444\u0430\u043a\u0442\u0430\u043c\u0438 OpenPGP.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/pervyj-stabilnyj-reliz-pgp-instrumentariya-sq-ot-proekta-sequoia","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-12-17T13:46:01+00:00","article:modified_time":"2024-12-17T13:46:01+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"121004","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 08:57:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 08:57:19","updated":"2026-01-23 08:57:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/121004","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=121004"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/121004\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=121004"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=121004"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=121004"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"