{"id":35556,"date":"2019-10-31T22:04:59","date_gmt":"2019-10-31T19:04:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/v-openssh-dobavlena-zashhita-ot-atak-po-storonnim-kanalam\/"},"modified":"2019-10-31T22:04:59","modified_gmt":"2019-10-31T19:04:59","slug":"v-openssh-dobavlena-zashhita-ot-atak-po-storonnim-kanalam","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/v-openssh-dobavlena-zashhita-ot-atak-po-storonnim-kanalam","title":{"rendered":"OpenSSH har f\u00e5et beskyttelse mod angreb via sidekanaler","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Damien Miller (djm @) tilf\u00f8jet<\/a><\/noindex> i OpenSSH en forbedring, som skal hj\u00e6lpe med at beskytte mod forskellige angreb via sidekanaler, s\u00e5som Spectre, Meltdown<\/a><\/noindex>, RowHammer<\/a><\/noindex> og RAMBleed<\/a><\/noindex>. Den tilf\u00f8jede beskyttelse har til form\u00e5l at forhindre genoprettelse af den private n\u00f8gle, der befinder sig i hukommelsen, ved at bruge data l\u00e6kager via sidekanaler.<\/p>\n

Essensen af beskyttelse er, at de private n\u00f8gler, n\u00e5r de ikke bruges, krypteres ved hj\u00e6lp af en symmetrisk n\u00f8gle, der er indhentet fra en forholdsvis stor \"forh\u00e5ndsn\u00f8gle\" (prekey), der best\u00e5r af tilf\u00e6ldigt genererede data (i \u00f8jeblikket er st\u00f8rrelsen 16 KB).
\nSet fra et implementeringsperspektiv krypteres private n\u00f8gler, n\u00e5r de indl\u00e6ses i hukommelsen, og de bliver derefter automatisk og gennemsigtigt dekrypteret, n\u00e5r de bruges til signaturer eller ved gemmning\/serialisering.<\/p>\n

For at gennemf\u00f8re et succesfuldt angreb skal angribere genoprette hele prekey med h\u00f8j n\u00f8jagtighed, f\u00f8r de kan fors\u00f8ge at dekryptere den beskyttede private n\u00f8gle. Dog har den nuv\u00e6rende generation af angreb en s\u00e5dan fejlrate i genoprettelse af bits, at umuligheden af korrekt genoprettelse af den forudg\u00e5ende n\u00f8gle er meget lille.<\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u044d\u043c\u0438\u0435\u043d \u041c\u0438\u043b\u043b\u0435\u0440 (djm @) \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0432 OpenSSH \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u043f\u043e\u043c\u043e\u0447\u044c \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u0442\u0430\u043a\u0438\u043c \u043a\u0430\u043a Spectre, Meltdown, RowHammer \u0438 RAMBleed. \u0414\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0437\u0430\u0449\u0438\u0442\u0430 \u043f\u0440\u0438\u0437\u0432\u0430\u043d\u0430 \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430, \u043d\u0430\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e\u0441\u044f \u0432 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438, \u043f\u043e\u043b\u044c\u0437\u0443\u044f\u0441\u044c \u0443\u0442\u0435\u0447\u043a\u0430\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c. \u0421\u0443\u0442\u044c \u0437\u0430\u0449\u0438\u0442\u044b \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435 \u043a\u043b\u044e\u0447\u0438, \u0432 \u043c\u043e\u043c\u0435\u043d\u0442\u044b, \u043a\u043e\u0433\u0434\u0430 \u043e\u043d\u0438 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35556","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Der er tilf\u00f8jet beskyttelse mod angreb via sidekanaler i OpenSSH | ProHoster","description":"Damien Miller (djm @) har tilf\u00f8jet i OpenSSH en forbedring, som skal hj\u00e6lpe med at beskytte mod forskellige angreb via sidekanaler.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/v-openssh-dobavlena-zashhita-ot-atak-po-storonnim-kanalam","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 OpenSSH \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0437\u0430\u0449\u0438\u0442\u0430 \u043e\u0442 \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c | ProHoster","og:description":"\u0414\u044d\u043c\u0438\u0435\u043d \u041c\u0438\u043b\u043b\u0435\u0440 (djm @) \u0434\u043e\u0431\u0430\u0432\u0438\u043b \u0432 OpenSSH \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0435, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0434\u043e\u043b\u0436\u043d\u043e \u043f\u043e\u043c\u043e\u0447\u044c \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u043e\u0442 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u0430\u0442\u0430\u043a \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/v-openssh-dobavlena-zashhita-ot-atak-po-storonnim-kanalam","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:04:59+00:00","article:modified_time":"2019-10-31T19:04:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35556","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 23:46:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:00:24","updated":"2026-01-21 23:46:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/35556","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=35556"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/35556\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=35556"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=35556"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=35556"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}