{"id":99236,"date":"2021-02-22T22:22:43","date_gmt":"2021-02-22T20:22:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov"},"modified":"2021-02-22T22:22:43","modified_gmt":"2021-02-22T20:22:43","slug":"vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","title":{"rendered":"Udgivelse af passwdqc 2.0.0 med support for eksterne filtre","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En ny version af passwdqc er blevet udgivet \u2014 et v\u00e6rkt\u00f8js\u00e6t til kontrol af kompleksiteten af adgangskoder og adgangsfraser, der inkluderer modulen pam_passwdqc, programmerne pwqcheck, pwqfilter (tilf\u00f8jet i denne version) og pwqgen til manuel brug eller brug i scripts, samt biblioteket libpasswdqc. B\u00e5de systemer med PAM (de fleste Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX) og uden PAM underst\u00f8ttes (interfacet passwordcheck underst\u00f8ttes i OpenBSD, der medf\u00f8lger en wrapper til brug af pwqcheck fra PHP, og der findes en betalt version til Windows, samt programmerne og biblioteket kan ogs\u00e5 bruges p\u00e5 andre systemer). <\/p>\n

I forhold til tidligere versioner er der tilf\u00f8jet support for eksterne filfiltre til adgangskoder, herunder bin\u00e6re, som i \u00f8jeblikket er en implementering af et forbedret cuckoo-filter. Dette filter vil garanteret ikke lade nogen af de forbudte adgangskorder slippe igennem, men kan lejlighedsvis resultere i falske positiver, hvis sandsynlighed, under de anvendte indstillinger og algoritmer i passwdqc, er ubetydelig lav. Tjek af en adgangskode mod filteret kr\u00e6ver ikke mere end to tilf\u00e6ldige l\u00e6seadgang til disken, hvilket er meget hurtigt og som regel ikke skaber overdreven belastning. server<\/a>. <\/p>\n

For at skabe og arbejde med bin\u00e6re filtre i passwdqc er programmet pwqfilter tilf\u00f8jet. Det kan skabe et filter b\u00e5de fra en liste af selve adgangskoderne samt fra deres MD4- eller NTLM-hashes. Support for NTLM-hashes giver mulighed for at importere adgangskoder fra HIBP-listen (Pwned Passwords), der distribueres i denne form. Der er lagt meget arbejde i at optimere pwqfilter med hensyn til hastighed, kompaktheden af de resulterende filtre, samt niveauet for falske positiver. For eksempel tager det omkring 8 minutter p\u00e5 en Core i7-4770K-processor at skabe et cuckoo-filter med en belastningsgrad p\u00e5 98% fra filen pwned-passwords-ntlm-ordered-by-hash-v7.txt, der fylder 21 GiB (22 GB) og indeholder over 613 millioner linjer. Det resulterende filter fylder 2,3 GiB (2,5 GB) og har et niveau for falske positiver p\u00e5 omkring 1 p\u00e5 1,15 milliarder. Med en lavere \u00f8nsket belastningsgrad kan filteret oprettes meget hurtigere og vil have et endnu lavere niveau for falske positiver, men dets st\u00f8rrelse vil blive st\u00f8rre. <\/p>\n

passwdqc h\u00e5ndterer meget godt at forhindre svage adgangskoder uden brug af eksterne filer. Deres anvendelse kan dog \u00f8ge effektiviteten af passwdqc endnu mere uden at p\u00e5f\u00f8re brugerne v\u00e6sentlig ulempe, eller det kan give mulighed for at sl\u00e6kke p\u00e5 andre begr\u00e6nsninger. NIST anbefaler at kontrollere brugernes valgte adgangskoder mod kendte l\u00e6kager. For Openwall-projektet er dette en potentiel mulighed for at finansiere udviklingen af passwdqc (og mere) gennem salg af f\u00e6rdige filtre, uden at begr\u00e6nse brugerne i muligheden for at oprette egne filtre ved hj\u00e6lp af det frigitte program pwqfilter under en fri licens. <\/p>\n

pwqfilter arbejder med vilk\u00e5rlige strenge og kan anvendes i stedet for grep til mange form\u00e5l, selv dem der ikke vedr\u00f8rer adgangskoder og sikkerhed. I betragtning af dette har pwqfilter flere muligheder, der ligner dem, der findes i grep, undg\u00e5r at bruge optionsnavne, der ville v\u00e6re i modstrid med dem i grep, og bruger de samme returkoder som i grep. <\/p>\n

For opgaver hvor falske alarmer er ekstremt u\u00f8nskede, kan deres niveau reduceres, for eksempel til \u00e9n pr. kvintillion (million milliarder) ved en belastningsfaktor op til 44 %. (Den klassiske cuckoo-filter giver ikke et s\u00e5 betydeligt fald i niveauet af falske alarmer ved at s\u00e6nke belastningsfaktoren. I passwdqc opn\u00e5s dette gennem forbedringer af algoritmen).
\n
Kilde: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f passwdqc — \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0440\u0430\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c pam_passwdqc, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b pwqcheck, pwqfilter (\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438) \u0438 pwqgen \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0438\u043b\u0438 \u0438\u0437 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libpasswdqc. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 PAM (\u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX), \u0442\u0430\u043a \u0438 \u0431\u0435\u0437 PAM (\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 passwordcheck […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99236","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Udgivelse af passwdqc 2.0.0 med support for eksterne filtre | ProHoster","description":"En ny version af passwdqc er udgivet - et v\u00e6rkt\u00f8jss\u00e6t til kontrol af kompleksiteten af adgangskoder og adgangsfrase, der inkluderer modulet pam_passwdqc, programmerne pwqcheck, pwqfilter (tilf\u00f8jet i denne version) og pwqgen.","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a passwdqc 2.0.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 | ProHoster","og:description":"\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f passwdqc - \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0440\u0430\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c pam_passwdqc, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b pwqcheck, pwqfilter (\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438) \u0438 pwqgen \u0434\u043b\u044f.","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-02-22T20:22:43+00:00","article:modified_time":"2021-02-22T20:22:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99236","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[],"defaultGraph":"","defaultPostTypeGraph":""},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:53:59","updated":"2026-02-22 15:29:50","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/99236","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=99236"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/99236\/revisions"}],"predecessor-version":[{"id":162219,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/99236\/revisions\/162219"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=99236"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=99236"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=99236"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}