{"id":112854,"date":"2024-01-12T15:10:27","date_gmt":"2024-01-12T13:10:27","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa"},"modified":"2024-01-12T15:10:27","modified_gmt":"2024-01-12T13:10:27","slug":"proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa","title":{"rendered":"OpenSSH projekt avaldas plaani DSA toe l\u00f5petamiseks","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

OpenSSH projekti arendajad on esitanud plaani peatada DSA algoritmi p\u00f5histel v\u00f5tmete toetus. Kaasaegsete standardite kohaselt ei paku DSA v\u00f5tmed piisavat kaitse taset, kuna need kasutavad ainult 160-bitist privaatv\u00f5tme suurust ja SHA1 hajutust, mis vastab ligikaudu 80-bitise s\u00fcmmeetrilise v\u00f5tme turvalisusele. <\/p>\n

DSA v\u00f5tmete kasutamine l\u00f5petati vaikimisi 2015. aastal, kuid DSA toe j\u00e4tmine valikuna oli vajalik, kuna see algoritm on ainus, mis on protokollis SSHv2 kohustuslik. T\u00f5uge sellele n\u00f5udele tulenes asjaolust, et protokolli SSHv2 loomise ja kinnitamise ajal olid k\u00f5ik alternatiivsed algoritmid patenteeritud. Alates sellest ajast on olukord muutunud: RSA-ga seotud patendid on aegunud, lisandunud on ECDSA algoritm, mis \u00fcletab DSA-d oluliselt j\u00f5udluse ja turvalisuse poolest, samuti EdDSA, mis on ECDSA-st turvalisem ja kiirem. Ainukeseks teguriks DSA toe j\u00e4tkamiseks on olnud \u00fchilduvuse s\u00e4ilitamine vanade seadmetega. <\/p>\n

Olemasolevat olukorda hinnates j\u00f5udsid OpenSSH arendajad j\u00e4reldusele, et DSA algoritmi toetamisse investeeritud kulud ei ole \u00f5igustatud ning selle eemaldamine v\u00f5imaldab julgustada DSA toe katkestamist ka teistes SSH ja kr\u00fcptograafia teostustes. Aprillis v\u00e4lja antud OpenSSH versioonis plaanitakse s\u00e4ilitada DSA koosseis, kuid pakkuda v\u00f5imalust DSA staadiumist kompilatsiooni ajal v\u00e4lja l\u00fclitada. Juuni v\u00e4ljaandes on DSA vaikimisi v\u00e4lja l\u00fclitatud ning 2025. aasta alguseks eemaldatakse DSA rakendus koodibaasist. <\/p>\n

Kasutajad, kellele on vajalik kliendipoolne DSA-tugi, saavad kasutada varasemate OpenSSH harude alternatiivseid kogumeid, n\u00e4iteks Debiani paketti \"openssh-client-ssh1\", mis on koostatud OpenSSH 7.5 p\u00f5hjal ja m\u00f5eldud SSH-serveritega \u00fchendamiseks SSHv1 protokolli kasutades, mille tugi l\u00f5petati OpenSSH 7.6 kuus aastat tagasi.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenSSH \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u043b\u0430\u043d \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 DSA. \u041f\u043e \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u043c \u043c\u0435\u0440\u043a\u0430\u043c DSA-\u043a\u043b\u044e\u0447\u0438 \u043d\u0435 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u044e\u0442 \u0434\u043e\u043b\u0436\u043d\u043e\u0433\u043e \u0443\u0440\u043e\u0432\u043d\u044f \u0437\u0430\u0449\u0438\u0442\u044b, \u0442\u0430\u043a \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442 \u0440\u0430\u0437\u043c\u0435\u0440 \u0437\u0430\u043a\u0440\u044b\u0442\u043e\u0433\u043e \u043a\u043b\u044e\u0447\u0430 \u0432\u0441\u0435\u0433\u043e \u0432 160 \u0431\u0438\u0442 \u0438 \u0445\u044d\u0448 SHA1, \u0447\u0442\u043e \u043f\u043e \u0443\u0440\u043e\u0432\u043d\u044e \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u043d\u043e 80 \u0440\u0430\u0437\u0440\u044f\u0434\u043d\u043e\u043c\u0443 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u043e\u043c\u0443 \u043a\u043b\u044e\u0447\u0443. \u041f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0435\u0439 DSA \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u043e \u0432 2015 \u0433\u043e\u0434\u0443, \u043d\u043e \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-112854","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47OpenSSH projekt avaldas plaani DSA toe l\u00f5petamiseks | ProHoster","description":"OpenSSH projekti arendajad on esitanud plaani peatada DSA algoritmi p\u00f5histel v\u00f5tmete toetus.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0435\u043a\u0442 OpenSSH \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u043b\u0430\u043d \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 DSA | ProHoster","og:description":"\u0420\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 OpenSSH \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043f\u043b\u0430\u043d \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 \u043a\u043b\u044e\u0447\u0435\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u0430 DSA.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-12T13:10:27+00:00","article:modified_time":"2024-01-12T13:10:27+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/112854","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=112854"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/112854\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=112854"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=112854"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=112854"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}