{"id":123602,"date":"2025-04-19T15:05:06","date_gmt":"2025-04-19T13:05:06","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-python-zadejstvovany-kriptofunkczii-s-matematicheskim-dokazatelstvom-nadyozhnosti"},"modified":"2025-04-19T15:05:06","modified_gmt":"2025-04-19T13:05:06","slug":"v-python-zadejstvovany-kriptofunkczii-s-matematicheskim-dokazatelstvom-nadyozhnosti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/v-python-zadejstvovany-kriptofunkczii-s-matematicheskim-dokazatelstvom-nadyozhnosti","title":{"rendered":"Pythonis on kaasatud kr\u00fcptofunktsioonid, millel on matemaatiline t\u00f5end usaldusv\u00e4\u00e4rsuse kohta.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
On the successful completion of the initiative to replace the Python implementations of cryptographic algorithms offered in the hashlib and hmac modules with options that have mathematical proof of reliability prepared by the HACL* project. The work to transition to functions with mathematical proof of reliability has been underway since 2022 and was initiated after a buffer overflow was discovered in the implementation of the SHA3 algorithm used in the Python hashlib module. <\/p>\n
The main repository of the CPython project accepted code with new implementations of cryptographic hash functions and HMAC (hash-based message authentication code). All default hash functions and HMACs provided in Python have been replaced with verified variants. Among other things, an implementation of HMAC-BLAKE2, which uses AVX2 SIMD instructions to accelerate computations, has been added. It is expected that the verified code will be included in the upcoming autumn release of Python 3.14. <\/p>\n
The new implementations of cryptographic functions have been transferred from the HACL* library developed by researchers from the French National Institute for Research in Computer Science and Automation (INRIA), a division of Microsoft Research, and Carnegie Mellon University. The HACL* library supports standard cryptographic functions sufficient for functioning TLS 1.3 and full support of the NaCl (Networking and Cryptography library) API, such as Curve25519, Ed25519, AES-GCM, Chacha20, Poly1305, SHA-2, SHA-3, HMAC, and HKDF. In terms of performance, the HACL* library is close to OpenSSL, but unlike the latter, it provides additional guarantees of reliability and security. <\/p>\n
The HACL* code is written in a subset of the functional language F*, which offers a system of dependent types and refinements that allow for precise specifications (mathematical models) and ensures the absence of implementation errors through SMT formulas and supporting proof tools. The reference code in F* is translated into C code using the KaRaMeL compiler and is available for integration with other projects. <\/p>\n
Verification involves defining detailed specifications that describe all possible behaviors of the program and forming a mathematical proof that the written code fully complies with the prepared specifications. Verification guarantees that the program will operate only as the developers intended and that it does not have certain classes of errors, such as buffer overflows, pointer dereferencing, accessing already freed memory areas, or double freeing of memory blocks. During compilation, strict type and value checks are enforced \u2014 one component will never pass parameters to another component that do not match the specifications and will not gain access to the internal states of other components. <\/p>\n
\u00dcleminekuprotsess verifitseeritud koodile v\u00f5ttis aega kaks ja pool aastat ning n\u00f5udis HACL* teegi t\u00e4iustamist, mille funktsionaalsust laiendati olemasoleva hashlib funktsionaalsuse sujuvaks asendamiseks vajalike omadustega. N\u00e4iteks HACL*s lisati HMAC-i voogedastuse re\u017eiimi toimetamine, laiendati Blake2 algoritmide t\u00f6\u00f6re\u017eiime ning rakendati uus SHA3 API, mis katab k\u00f5ik Keclaki perekonna algoritmide variandid, samuti tagatakse vajalikke veateate vahendeid (nt m\u00e4luhaldusprobleemide puhul) ja t\u00f6\u00f6tati v\u00e4lja skriptid HACL* uute versioonide automaatseks Python reposse \u00fcleviimiseks. \n Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"