{"id":102843,"date":"2022-01-02T21:37:00","date_gmt":"2022-01-02T19:37:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7"},"modified":"2022-01-02T21:37:00","modified_gmt":"2022-01-02T19:37:00","slug":"%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7","title":{"rendered":"Linuxi tuumiku jaoks on ette n\u00e4htud rakendus \/dev\/random, mis on vabastatud SHA-1 sidumisest.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Jason A. Donenfeld, WireGuard VPN autor, on pakkunud v\u00e4lja uuendatud RDRAND pseudorajandi generaatori rakenduse, mis vastutab seadmete \/dev\/random ja \/dev\/urandom t\u00f6\u00f6 eest Linuxi tuumikus. Novembri l\u00f5pus m\u00e4\u00e4rati Jason random draiveri hooldajate hulka ja n\u00fc\u00fcd on ta avaldanud oma t\u00f6\u00f6 esimesed tulemused selle \u00fcmberkujundamiseks. <\/p>\n

Uus elluviimine paistab silma \u00fcleminekuga BLAKE2s r\u00e4si funktsiooni kasutamisele SHA1 asemel entropia kokkusegamisoperatsioonides. Muudatus on aidanud suurendada pseudojuhuslike arvude generaatori turvalisust, eemaldades probleemse SHA1 algoritmi ning v\u00e4listades RNG algv\u00e4\u00e4rtuse \u00fcle kirjutamise. Kuna BLAKE2s algoritm \u00fcletab SHA1-t efektiivsuse poolest, on selle rakendamine positiivselt m\u00f5jutanud pseudojuhuslike arvude generaatori j\u00f5udlust (testimine Intel i7-11850H protsessoriga n\u00e4itas kiiruset\u00f5usu 131%). Veel \u00fcheks plusspunktiks entropia segamise \u00fcleviimisel BLAKE2-le on kasutatavate algoritmide \u00fchtlustamine \u2014 BLAKE2 on juba ChaCha \u0161ifris, mida kasutatakse juhuslike j\u00e4rjestuste v\u00e4ljav\u00f5tmiseks. <\/p>\n

Lisaks on tehtud parandusi kr\u00fcptokindla pseudojuhuslike arvude generaatori CRNG suhtes, mida kasutatakse getrandom kutsumisel. Parandused v\u00e4hendavad aeglase RDRAND generaatori kutse arvu entropia v\u00e4ljat\u00f5mbamisel, mis t\u00f5stab j\u00f5udlust 3,7 korda. Jason n\u00e4itas, et RDRAND kutsumise m\u00f5te on vaid olukordades, kus CRNG ei ole veel t\u00e4ielikult initsialiseeritud, kuid kui CRNG initsialiseerimine on l\u00f5petatud, ei m\u00f5juta selle v\u00e4\u00e4rtus genereeritud j\u00e4rjestuse kvaliteeti ning RDRANDi kutsumisega saab sel juhul ka ilma hakkama. <\/p>\n

Muutused on planeeritud lisamiseks Linuxi tuuma versioonis 5.17 ja on juba l\u00e4binud l\u00e4bivaatuse arendajate Ted Ts\u2019o (random draiveri teine hooldaja), Greg Kroah-Hartmani (Linuxi tuuma stabiilse haru hooldamise eest vastutav) ja Jean-Philippe Aumassoni (BLAKE2\/3 algoritmide autor) poolt.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0436\u0435\u0439\u0441\u043e\u043d \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434 (Jason A. Donenfeld), \u0430\u0432\u0442\u043e\u0440 VPN WireGuard, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b RDRAND, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \/dev\/random \u0438 \/dev\/urandom \u0432 \u044f\u0434\u0440\u0435 Linux. \u0412 \u043a\u043e\u043d\u0446\u0435 \u043d\u043e\u044f\u0431\u0440\u044f \u0414\u0436\u0435\u0439\u0441\u043e\u043d \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u0447\u0438\u0441\u043b\u043e \u043c\u044d\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 random \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u0432\u043e\u0435\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u043a\u0435. \u041d\u043e\u0432\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0430 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u043c \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0445\u0435\u0448-\u0444\u0443\u043d\u043a\u0446\u0438\u0438 BLAKE2s \u0432\u043c\u0435\u0441\u0442\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102843","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Linuxi kerneli jaoks on pakutud SHA-1 sidemest vabastatud \/dev\/random teostust | ProHoster","description":"\u0414\u0436\u0435\u0439\u0441\u043e\u043d \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434 (Jason A. Donenfeld), \u0430\u0432\u0442\u043e\u0440 VPN WireGuard, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b RDRAND, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \/dev\/random \u0438 \/dev\/urandom \u0432 \u044f\u0434\u0440\u0435 Linux.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043b\u044f \u044f\u0434\u0440\u0430 Linux \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \/dev\/random, \u0438\u0437\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043e\u0442 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 \u043a SHA-1 | ProHoster","og:description":"\u0414\u0436\u0435\u0439\u0441\u043e\u043d \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434 (Jason A. Donenfeld), \u0430\u0432\u0442\u043e\u0440 VPN WireGuard, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b RDRAND, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \/dev\/random \u0438 \/dev\/urandom \u0432 \u044f\u0434\u0440\u0435 Linux.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-02T19:37:00+00:00","article:modified_time":"2022-01-02T19:37:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102843","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-02 19:38:23","updated":"2022-09-28 13:59:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102843","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=102843"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/102843\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=102843"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=102843"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=102843"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}