{"id":40628,"date":"2020-02-02T15:06:08","date_gmt":"2020-02-02T12:06:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/google-predstavil-otkrytyj-stek-opensk-dlya-sozdaniya-kriptograficheskih-tokenov"},"modified":"2020-02-02T15:06:08","modified_gmt":"2020-02-02T12:06:08","slug":"google-predstavil-otkrytyj-stek-opensk-dlya-sozdaniya-kriptograficheskih-tokenov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/google-predstavil-otkrytyj-stek-opensk-dlya-sozdaniya-kriptograficheskih-tokenov","title":{"rendered":"Google har pr\u00e6senteret den \u00e5bne stak OpenSK til at skabe kryptografiske tokens","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Google pr\u00e6senterede<\/a><\/noindex> OpenSK-platformen, der g\u00f8r det muligt at oprette firmware til kryptografiske tokens, der fuldt ud overholder standarderne FIDO U2F<\/a><\/noindex> og FIDO2<\/a><\/noindex>. Tokens, der er forberedt med OpenSK, kan anvendes som autentifikatorer til f\u00f8rste gangs og to-faktor autentificering, samt til at bekr\u00e6fte brugerens fysiske tilstedev\u00e6relse. Projektet er skrevet i Rust og distribueres<\/a><\/noindex> er under Apache 2.0-licensen.<\/p>\n

OpenSK giver mulighed for at oprette en egen token til to-faktor autentificering p\u00e5 hjemmesider, som i mods\u00e6tning til f\u00e6rdige l\u00f8sninger fra producenter som Yubico, Feitian, Thetis og Kensington er baseret p\u00e5 fuld \u00e5ben firmware, der er tilg\u00e6ngelig for udvidelse og revision. OpenSK positioneres som en forskningsplatform, som tokenproducenter og entusiaster kan bruge til at udvikle nye funktioner og promovere tokens til masserne. Oprindeligt blev koden til OpenSK udviklet som en applikation til Tock OS<\/a><\/noindex> og testet p\u00e5 Nordic nRF52840-DK og Nordic nRF52840-dongle. <\/p>\n

Udover softwaren inkluderer projektet SLTS<\/a><\/noindex> 3D-printer design til USB-n\u00f8glehus baseret p\u00e5 den popul\u00e6re chip Nordic nRF52840<\/a><\/noindex>, som inkluderer ARM Cortex-M4 mikrokontroller og kryptokopierer
\n ARM TrustZone Cryptocell 310. Nordic nRF52840 er den f\u00f8rste referenceplatform for OpenSK. I OpenSK er der sikret underst\u00f8ttelse af kryptokopiereren ARM CryptoCell og alle de transportformer, som chippen tilbyder, herunder USB, NFC og Bluetooth Low Energy. Ud over brugen af kryptokopiereren er der ogs\u00e5 forberedt separate implementeringer af ECDSA, ECC secp256r1, HMAC-SHA256 og AES256 algoritmer skrevet i Rust.<\/p>\n

\"Google<\/a><\/noindex><\/center><\/p>\n

Det er vigtigt at bem\u00e6rke, at OpenSK ikke er den f\u00f8rste \u00e5bne implementering af firmware til tokens med st\u00f8tte til FIDO2 og U2F, tilsvarende firmware udvikler \u00e5bne projekter Solo<\/a><\/noindex> og Somu<\/a><\/noindex>. I mods\u00e6tning til de n\u00e6vnte projekter er OpenSK ikke skrevet i C, men i Rust, hvilket g\u00f8r det muligt at undg\u00e5 mange s\u00e5rbarheder, der opst\u00e5r fra lav-niveau arbejde med hukommelse, s\u00e5som adgang til hukommelsesomr\u00e5der efter de er frigivet, dereferencering af null-pegere og bufferoverl\u00f8b. <\/p>\n

Den foresl\u00e5ede firmware til installation er baseret p\u00e5 TockOS<\/a><\/noindex>,
\net operativsystem til mikrokontrollere baseret p\u00e5 Cortex-M og RISC-V, der sikrer sandbox-isolering af kernen, drivere og applikationer. OpenSK er designet som et applet til TockOS. Udover OpenSK har Google ogs\u00e5 forberedt en version af TockOS, der er optimeret til Flash-lagring (NVMC) opbevaring<\/a><\/noindex> og et s\u00e6t patches<\/a><\/noindex>. Kernen og driverne i TockOS, ligesom OpenSK, er skrevet i Rust.<\/p>\n

\r\n \"Afspil\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 OpenSK, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430\u043c FIDO U2F \u0438 FIDO2. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c OpenSK \u0442\u043e\u043a\u0435\u043d\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0439 \u0438 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041f\u0440\u043e\u0435\u043a\u0442 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. OpenSK \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":40629,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-40628","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google pr\u00e6senterede den \u00e5bne stak OpenSK til oprettelse af kryptografiske tokens | ProHoster","description":"Google har pr\u00e6senteret platformen OpenSK, der g\u00f8r det muligt at skabe firmware til.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/google-predstavil-otkrytyj-stek-opensk-dlya-sozdaniya-kriptograficheskih-tokenov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0441\u0442\u0435\u043a OpenSK \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 OpenSK, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f.","og:url":"https:\/\/prohoster.info\/da\/blog\/google-predstavil-otkrytyj-stek-opensk-dlya-sozdaniya-kriptograficheskih-tokenov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-02T12:06:08+00:00","article:modified_time":"2020-02-02T12:06:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"40628","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:34:23","updated":"2022-10-02 17:34:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/40628","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=40628"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/40628\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/40629"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=40628"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=40628"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=40628"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}