{"id":100468,"date":"2021-06-08T10:22:35","date_gmt":"2021-06-08T08:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej"},"modified":"2021-06-08T10:22:35","modified_gmt":"2021-06-08T08:22:35","slug":"v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/de\/blog\/news\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","title":{"rendered":"In Fedora 35 ist der \u00dcbergang zu yescrypt f\u00fcr die Passwort-Hashing vorgesehen.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Geplant ist der \u00dcbergang zur Verwendung des Passwort-Hashing-Schemas yescrypt in Fedora 35. Diese \u00c4nderung wurde bisher vom FESCo-Komitee (Fedora Engineering Steering Committee), das f\u00fcr die technische Entwicklung der Fedora-Distribution zust\u00e4ndig ist, noch nicht gepr\u00fcft. Im Falle einer Genehmigung werden ab Fedora 35 die Passw\u00f6rter neuer Benutzer in \/etc\/shadow standardm\u00e4\u00dfig mit yescrypt gehasht. Die Unterst\u00fctzung \u00e4lterer Hashes, die mit dem zuvor verwendeten Algorithmus sha512crypt erstellt wurden, bleibt erhalten und wird als Option verf\u00fcgbar sein. Unter den Distributionen, die bereits zu yescrypt gewechselt sind, sind ALT Linux, Debian Testing und Kali Linux zu nennen. <\/p>\n

Yescrypt erweitert die M\u00f6glichkeiten des klassischen scrypt durch die Unterst\u00fctzung von Schemen mit erh\u00f6htem RAM-Verbrauch und verringert die Effizienz von Angriffen, die GPU, FPGA und spezialisierte Chips verwenden. Die Sicherheit von Yescrypt wird durch die Verwendung bew\u00e4hrter kryptografischer Primitiven wie SHA-256, HMAC und PBKDF2 gew\u00e4hrleistet. <\/p>\n

Zu den Nachteilen des in Fedora verwendeten Algorithmus sha512crypt geh\u00f6rt die Effizienz nur bei einer Salt-Gr\u00f6\u00dfe von \u00fcber 90 Bit (mindestens 128 Bit empfohlen); Anf\u00e4lligkeit gegen\u00fcber DoS-Angriffen durch die Erzeugung von parasit\u00e4rer CPU-Last beim Hashing langer Passw\u00f6rter; Anf\u00e4lligkeit f\u00fcr Angriffe zur Bestimmung der Passwortgr\u00f6\u00dfe anhand passiver Analyse der Hash-Verarbeitungszeiten; und das Arbeiten ohne Anwendung einer kryptografischen Schl\u00fcsselerzeugungsfunktion (KDF).
\n
Quelle: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Fedora 35 \u043d\u0430\u043c\u0435\u0447\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0445\u0435\u043c\u044b \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 yescrypt. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043e \u043a\u043e\u043c\u0438\u0442\u0435\u0442\u043e\u043c FESCo (Fedora Engineering Steering Committee), \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u043c \u0437\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Fedora. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0434\u043e\u0431\u0440\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 Fedora 35 \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \/etc\/shadow \u0431\u0443\u0434\u0443\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0445\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 yescrypt. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0441\u0442\u0430\u0440\u044b\u0445 \u0445\u044d\u0448\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100468","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 In Fedora 35 ist der \u00dcbergang zu yescrypt f\u00fcr die Passwort-Hashing vorgesehen | ProHoster","description":"F\u00fcr die Umsetzung in Fedora 35 ist der \u00dcbergang zur Verwendung des Passwort-Hashing-Schemas yescrypt geplant.","canonical_url":"https:\/\/prohoster.info\/de\/blog\/news\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"de_DE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Fedora 35 \u043d\u0430\u043c\u0435\u0447\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 yescrypt \u0434\u043b\u044f \u0445\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 | ProHoster","og:description":"\u0414\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Fedora 35 \u043d\u0430\u043c\u0435\u0447\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0445\u0435\u043c\u044b \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 yescrypt.","og:url":"https:\/\/prohoster.info\/de\/blog\/news\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-08T08:22:35+00:00","article:modified_time":"2021-06-08T08:22:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100468","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-08 08:28:46","updated":"2022-10-01 09:33:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/100468","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/comments?post=100468"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/posts\/100468\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/media?parent=100468"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/categories?post=100468"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/de\/wp-json\/wp\/v2\/tags?post=100468"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}