{"id":112854,"date":"2024-01-12T15:10:27","date_gmt":"2024-01-12T13:10:27","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa"},"modified":"2024-01-12T15:10:27","modified_gmt":"2024-01-12T13:10:27","slug":"proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa","title":{"rendered":"OpenSSH projekt avaldas plaani DSA toe l\u00f5petamiseks.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

OpenSSH projekti arendajad esitasid plaani l\u00f5petada DSA-p\u00f5histe v\u00f5tmete toetamine. T\u00e4nap\u00e4evaste standardite kohaselt ei paku DSA-v\u00f5tmed piisavat kaitset, kuna need kasutavad vaid 160-bitist privaatv\u00f5tme suurust ja SHA1 r\u00e4simist, mis vastab turvalisuse poolest umbes 80-bitisest s\u00fcmmeetrilisest v\u00f5tmes\u00fcsteemist tingitud kaitse tasemele. <\/p>\n

DSA v\u00f5tmete kasutamine l\u00f5petati vaikimisi 2015. aastal, kuid DSA toetamine j\u00e4i valikuliseks, kuna see algoritm on ainus, mis peab SSHv2 protokollis olema kohustuslikult rakendatud. See n\u00f5ue lisati, kuna SSHv2 protokolli loomise ja kinnitamise ajal olid k\u00f5ik alternatiivsed algoritmid patendi alla kuuluvad. Alates siis on olukord muutunud, RSA-ga seotud patendid on aegunud ning lisatud on ECDSA algoritm, mis \u00fcletab DSA-d oluliselt j\u00f5udluse ja turvalisuse poolest, samuti EdDSA, mis on ECDSA-st turvalisem ja kiirem. Ainus tegur DSA toetamise j\u00e4tkamisel oli \u00fchilduvuse s\u00e4ilitamine vanade seadmetega. <\/p>\n

Hinnates olukorda kaasaja reaalsustes j\u00f5udsid OpenSSH arendajad j\u00e4reldusele, et DSA turvamat algoritmi toe j\u00e4tkamiseks kulutatud ressursid ei ole \u00f5igustatud ning selle eemaldamine soodustab DSA toe l\u00f5petamist teistes SSH rakendustes ja kr\u00fcptograafiaraamatukogudes. Aprilliks planeeritud OpenSSH v\u00e4ljaandes on plaanis s\u00e4ilitada DSA kogum, kuid anda v\u00f5imalus DSA v\u00e4lja l\u00fclitada kompileerimise k\u00e4igus. Juuni v\u00e4ljaandes on DSA vaikimisi v\u00e4lja l\u00fclitatud, kui see kokku pannakse, ja 2025. aasta alguses eemaldatakse DSA rakendus koodibaasist. <\/p>\n

Kasutajad, kes vajavad DSA kliendipoolset tuge, saavad kasutada varasemaid OpenSSH harude alternatiivseid versioone, n\u00e4iteks Debianis pakutavat paketiga \u00abopenssh-client-ssh1\u00bb, mis on koostatud OpenSSH 7.5 baasil ja on m\u00f5eldud SSH-serveritega \u00fchenduse loomiseks SSHv1 protokolli kaudu, mille tugi l\u00f5petati OpenSSH 7.6 versioonis kuus aastat tagasi.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenSSH \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u043b\u0430\u043d \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 DSA. \u041f\u043e \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c \u043c\u0435\u0440\u043a\u0430\u043c DSA-\u043a\u043b\u044e\u0447\u0438 \u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0442 \u0434\u043e\u043b\u0436\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0449\u0438\u0442\u044b, \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0440\u0430\u0437\u043c\u0435\u0440 \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u0432\u0441\u0435\u0433\u043e \u0432 160 \u0431\u0438\u0442 \u0438 \u0445\u044d\u0448 SHA1, \u0447\u0442\u043e \u043f\u043e \u0443\u0440\u043e\u0432\u043d\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 80 \u0440\u0430\u0437\u0440\u044f\u0434\u043d\u043e\u043c\u0443 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u043e\u043c\u0443 \u043a\u043b\u044e\u0447\u0443. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0439 DSA \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u043e \u0432 2015 \u0433\u043e\u0434\u0443, \u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112854","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH projekt avaldas plaani DSA toetamise l\u00f5petamiseks | ProHoster","description":"OpenSSH projekti arendajad on esitanud plaani l\u00f5petada DSA-algoritmil p\u00f5hinevate v\u00f5tmete toetamine. T\u00e4nap\u00e4eva standardite kohaselt ei paku DSA-v\u00f5tmed piisavat kaitse taset, kuna need kasutavad vaid 160-bitist privaatv\u00f5tme suurust ja SHA1 r\u00e4simist, mis vastab ligikaudu 80-bitisele s\u00fcmpetrilisele v\u00f5tmele. DSA v\u00f5tit ei ole alates 2015. aastast vaikimisi lubatud, kuid toetus on","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 OpenSSH \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043b\u0430\u043d \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 DSA | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenSSH \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u043b\u0430\u043d \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 DSA. \u041f\u043e \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c \u043c\u0435\u0440\u043a\u0430\u043c DSA-\u043a\u043b\u044e\u0447\u0438 \u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0442 \u0434\u043e\u043b\u0436\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0449\u0438\u0442\u044b, \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0440\u0430\u0437\u043c\u0435\u0440 \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u0432\u0441\u0435\u0433\u043e \u0432 160 \u0431\u0438\u0442 \u0438 \u0445\u044d\u0448 SHA1, \u0447\u0442\u043e \u043f\u043e \u0443\u0440\u043e\u0432\u043d\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 80 \u0440\u0430\u0437\u0440\u044f\u0434\u043d\u043e\u043c\u0443 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u043e\u043c\u0443 \u043a\u043b\u044e\u0447\u0443. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0439 DSA \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u043e \u0432 2015 \u0433\u043e\u0434\u0443, \u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-12T13:10:27+00:00","article:modified_time":"2024-01-12T13:10:27+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/112854","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=112854"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/112854\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=112854"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=112854"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=112854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}