{"id":113107,"date":"2024-01-24T23:28:03","date_gmt":"2024-01-24T21:28:03","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-cryptsetup-2-7-s-podderzhkoj-apparatnogo-diskovogo-shifrovaniya-opal"},"modified":"2024-01-24T23:28:03","modified_gmt":"2024-01-24T21:28:03","slug":"vypusk-cryptsetup-2-7-s-podderzhkoj-apparatnogo-diskovogo-shifrovaniya-opal","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-cryptsetup-2-7-s-podderzhkoj-apparatnogo-diskovogo-shifrovaniya-opal","title":{"rendered":"Cryptsetup 2.7 v\u00e4ljaanne, mis toetab OPAL-i riistvaralist kettakodeerimist","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Avaldatud on Cryptsetup 2.7 utiliitide komplekt, mis on ette n\u00e4htud Linuxi kettasegmentide kr\u00fcptimise seadistamiseks dm-crypt mooduli abil. Toetatakse t\u00f6\u00f6tamist dm-crypt, LUKS, LUKS2, BITLK, loop-AES ja TrueCrypt\/VeraCrypt sektsioonidega. Komplekti kuuluvad ka utiliidid veritysetup ja integritysetup, et seadistada andmete terviklikkuse kontrolli vahendid, mis p\u00f5hinevad dm-verity ja dm-integrity moodulitel.    <\/p>\n<p>Peamised t\u00e4iustused:  <\/p>\n<ul>\n<li class=\"l\"> Rakendatud on OPAL kettakr\u00fcpteerimise riistvaramehhanismi tugi, mida toetavad omashifrujevad (SED - Self-Encrypting Drives) SATA ja NVMe kettaseadmed, millel on OPAL2 TCG liides, kus riistvara kr\u00fcpteerimise seade on otse kontrollerisse integreeritud. \u00dchelt poolt on OPAL kr\u00fcpteerimine seotud patenteeritud riistvaraga ja ei ole avalikuks auditeerimiseks k\u00e4ttesaadav, kuid teisest k\u00fcljest v\u00f5ib seda kasutada programmilise kr\u00fcpteerimise t\u00e4iendava kaitse tasemena, ilma et see v\u00e4hendaks sooritust ja koormaks CPU-d.\n<p>OPAL kasutamiseks LUKS2-s on vajalik Linuxi tuuma koos CONFIG_BLK_SED_OPAL seadistusega ja Cryptsetup'i aktiveerimine (OPAL tugi on vaikimisi v\u00e4lja l\u00fclitatud). LUKS2 OPAL seadistamine toimub sarnaselt programmilise kr\u00fcpteerimisega - metaandmed salvestatakse LUKS2 p\u00e4isesse. V\u00f5ti jaotatakse programmikate jaoks (dm-crypt) ja OPAL-i avamisv\u00f5tme vahel. OPALit saab kasutada nii koos programmilise kr\u00fcpteerimisega (cryptsetup luksFormat --hw-opal ) kui ka eraldi (cryptsetup luksFormat --hw-opal-only ). OPAL-i aktiveerimine ja deaktiveerimine toimub sama meetodi kaudu (open, close, luksSuspend, luksResume), nagu LUKS2 seadmete puhul.    <\/p>\n<li class=\"l\"> Plain-re\u017eiimis, kus meistriv\u00f5ti ja p\u00e4is ei ole kettal salvestatud, kasutatakse vaikimisi kr\u00fcptimist aes-xts-plain64 ja hash-algoritmi sha256 (CBC-re\u017eiimi asemel, mis kannatab j\u00f5udluse probleemide all, on kasutusele v\u00f5etud XTS, ning aegunud rippmena hash'i asemel sha256).\n<li class=\"l\"> K\u00e4skudes open ja luksResume on lubatud jagamisv\u00f5tme salvestamine kasutaja valitud v\u00f5tmehoidlas s\u00fcdamikus (keyring). Paljusid cryptsetup-i k\u00e4ske on t\u00e4iendatud valikuga '--volume-key-keyring' (n\u00e4iteks 'cryptsetup open  --link-vk-to-keyring \"@s::%user:testkey\" tst').\n<li class=\"l\"> S\u00fcsteemides, kus ei ole vahetusfaili, kasutatakse PBKDF Argon2 vormindamisel v\u00f5i v\u00f5tmeaugu loomisel n\u00fc\u00fcd ainult pool vabast m\u00e4lust, lahendades m\u00e4lupuuduse probleemi v\u00e4ikese RAM-iga s\u00fcsteemides.\n<li class=\"l\"> Lisatud on valik '--external-tokens-path', et m\u00e4\u00e4rata LUKS2 v\u00e4listokenite t\u00f6\u00f6tlejate (pluginad) kataloog.\n<li class=\"l\"> Tcrypt toetab n\u00fc\u00fcd VeraCrypti jaoks Blake2 hash-algoritmi.\n<li class=\"l\"> Lisatud on Aria plokiahelkr\u00fcptimise toetus.\n<li class=\"l\"> Argon2 tugi on lisatud OpenSSL 3.2 ja libgcrypti rakendustes, mis v\u00f5imaldab v\u00e4ltida libargon'i kasutamist.    <\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=60493\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430\u0431\u043e\u0440 \u0443\u0442\u0438\u043b\u0438\u0442 Cryptsetup 2.7, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u0432 Linux \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u043e\u0434\u0443\u043b\u044f dm-crypt. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0440\u0430\u0431\u043e\u0442\u0430 \u0441 \u0440\u0430\u0437\u0434\u0435\u043b\u0430\u043c\u0438 dm-crypt, LUKS, LUKS2, BITLK, loop-AES \u0438 TrueCrypt\/VeraCrypt. \u0412 \u0441\u043e\u0441\u0442\u0430\u0432 \u0442\u0430\u043a\u0436\u0435 \u0432\u0445\u043e\u0434\u044f\u0442 \u0443\u0442\u0438\u043b\u0438\u0442\u044b veritysetup \u0438 integritysetup \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0440\u0435\u0434\u0441\u0442\u0432 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u0438 \u0434\u0430\u043d\u043d\u044b\u0445 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043c\u043e\u0434\u0443\u043b\u0435\u0439 dm-verity \u0438 dm-integrity. \u041a\u043b\u044e\u0447\u0435\u0432\u044b\u0435 \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u044f: \u0420\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-113107","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.1.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430\u0431\u043e\u0440 \u0443\u0442\u0438\u043b\u0438\u0442 Cryptsetup 2.7, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u0432 Linux \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u043e\u0434\u0443\u043b\u044f dm-crypt.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-cryptsetup-2-7-s-podderzhkoj-apparatnogo-diskovogo-shifrovaniya-opal\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.1.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Cryptsetup 2.7 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f OPAL | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430\u0431\u043e\u0440 \u0443\u0442\u0438\u043b\u0438\u0442 Cryptsetup 2.7, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u0432 Linux \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u043e\u0434\u0443\u043b\u044f dm-crypt.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-cryptsetup-2-7-s-podderzhkoj-apparatnogo-diskovogo-shifrovaniya-opal\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2024-01-24T21:28:03+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2024-01-24T21:28:03+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cryptsetup 2.7 v\u00e4ljaandmine, mis toetab OPAL riistvaralist kettakr\u00fcpteerimist | ProHoster","description":"K\u00e4ivitati Cryptsetup 2.7 utiliidid, mis on m\u00f5eldud Linuxi kettajaotuste kr\u00fcpteerimise seadistamiseks dm-crypt mooduli abil.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-cryptsetup-2-7-s-podderzhkoj-apparatnogo-diskovogo-shifrovaniya-opal","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a Cryptsetup 2.7 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0433\u043e \u0434\u0438\u0441\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f OPAL | ProHoster","og:description":"\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d \u043d\u0430\u0431\u043e\u0440 \u0443\u0442\u0438\u043b\u0438\u0442 Cryptsetup 2.7, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u0441\u043a\u043e\u0432\u044b\u0445 \u0440\u0430\u0437\u0434\u0435\u043b\u043e\u0432 \u0432 Linux \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 \u043c\u043e\u0434\u0443\u043b\u044f dm-crypt.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vypusk-cryptsetup-2-7-s-podderzhkoj-apparatnogo-diskovogo-shifrovaniya-opal","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-01-24T21:28:03+00:00","article:modified_time":"2024-01-24T21:28:03+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113107","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=113107"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/113107\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=113107"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=113107"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=113107"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}