{"id":184113,"date":"2026-11-03T23:41:02","date_gmt":"2026-11-03T21:41:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/kriptograficheskij-izolyator-itb-s-formalnym-dokazatelstvom-nadyozhnosti"},"modified":"2026-11-03T23:41:07","modified_gmt":"2026-11-03T21:41:07","slug":"itb-cryptographic-isolator-with-formally-proven-reliability","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability","title":{"rendered":"ITB kr\u00fcptograafiline isolaatori konteiner, millel on formaalne usaldusv\u00e4\u00e4rsuse t\u00f5end","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Esitatud on ITB projekt, mis arendab s\u00fcmmeetrilist kr\u00fcptograafilist isolaatorit, mis on m\u00f5eldud standardsete pseudojuhuslike funktsioonide (PRF) ja hajutamisalgoritmide (AES, BLAKE2\/3, Areion jne) m\u00e4hkeks ahelalisse kombineeritud ja topoloogilisse barj\u00e4\u00e4ri. Erinevalt klassikalistest plokk- ja voogkr\u00fcptimise re\u017eiimidest, ITB arhidektuur keskendub sisemise primitiivi struktuursele isoleerimisele, takistades diferentsiaalsete ja lineaarsede karakteristikute, algebralise lineaarimise ja kaudsete kodeeringute levikut SAT\/SMT ja MILP lahendajate vahel barj\u00e4\u00e4ri kaudu. Kood on kirjutatud Go keeles madalamate tasemete optimeerimistega assemblerile arhitektuuridele x86_64 ja ARM64 (Aarch64) ning levitatakse Apache 2.0 litsentsi alusel.<\/p>\n<p>Andmete t\u00f6\u00f6tlemine ITB-s on jagatud kahe omavahel seotud tasandi (Interlocked Barrier) vahel, mida juhitakse kaheksa isoleeritud v\u00f5tme seemne (8-seed isolation) kaudu, kus v\u00f5tme kohaliku arengu toimub otse\u00fchenduse kaskaadis (ChainHash). Esimesel tasandil t\u00e4idab barj\u00e4\u00e4ri j\u00e4rjestamine (Rank Barrier) iga 48-bitise ploki (v\u00f5i 168-bitise ploki puhul 512-bitiste primaarkoodide) v\u00f5tme kombinatoorset permutatsiooni, jaotades plaanitavaid bitte kolmele s\u00f5ltumatule alale, p\u00f5hinedes kaheastmelisel kombinatsiooni leidmisel selle numbriga (tasakaalustatud jagunemise ruum C(48, 16) * C(32, 16) on umbes 2^70.20 ja 168-bitise re\u017eiimi puhul C(168, 56) * C(112, 56) \u2014 umbes 2^258.60). Teisel tasandil kuvab pikselibarj\u00e4\u00e4r (Pixel Barrier) andmed 8-baidiste elementide v\u00f5rku (8 kanalit, iga\u00fches 7 biti andmeid ja 1 bit pseudojuhuslikku m\u00fcra), kasutades pikseli v\u00f5tme 7-bitisest ts\u00fcklilist nihutamist, 7-bitisest kanalite varjestamist ja m\u00fcrabiti asukoha valimist.<\/p>\n<p>Projekti p\u00f5hijooned:<\/p>\n<ul>\n<li class=\"l\"> Eksperimentaalne kontroll isolatsiooniv\u00f5imetest ilmselt mitte-kr\u00fcptograafiliste funktsioonide peal (koormustest n\u00f5rkade primitiivide abil). Repositooriumis on labors\u00fcsteem, mis asendab tavalise hash-funktsiooni FNV-1a barj\u00e4\u00e4ri sees. T\u00e4nu mitte-lineaarsele kombineeritud eristamisele, baitide jagamisele 7-bitiste kanalite piiril (GCD(7, 8) = 1) ja m\u00fcra bitide s\u00fcstimisele igasse baidi, blokeeritakse praktiline p\u00f6\u00f6ramine v\u00f5i lahendatava SAT\/SMT mudeli koostamine avatud ja kr\u00fcpteeritud teksti osas juba v\u00f5rrandite s\u00fcsteemi koostamise etapis.\n<li class=\"l\"> Masinaga kontrollitud formaalne kinnitamine Lean 4 keeles. K\u00f5ik 12 p\u00f5hielementaarset matemaatikat, kombinatoorseid ja bitivector teoreeme konstruktsioonide osas (sealhulgas rakenduslik plaan h\u00fcbriidsede 3-to-8 viisist kolme s\u00f5ltumatult KEM-kanali kaudu APPS.md-s), on t\u00e4ielikult t\u00f5endatud Lean 4-s ilma aksioomide ja t\u00f5endite vahepaladeta.\n<li class=\"l\"> Sisseehitatud kr\u00fctoanal\u00fc\u00fctilise testimise t\u00f6\u00f6riistakomplekt, sealhulgas automatiseeritud kontrollid: statistilised testide paketid, algebralise astme ja mitte-lineaarsuse hindamine, seemnete isolatsiooni kontrollimine m\u00fcra positsioonide filtreerimisel CCA-oraakli kaudu ja haavatavuste otsimine v\u00e4lishaldurite abiga.\n<li class=\"l\"> Kaks t\u00f6\u00f6re\u017eiimi: tavaline autentimismood ja re\u017eiim usutavast eitamisest, mille aluseks on tingimusteta koodimine COBS, kus vale v\u00f5tmega dekr\u00fcpteerimine annab s\u00fcntaktiliselt korrektsed andmed ilma veateateta.\n<li class=\"l\"> Koos kiirete kaasaegsete PRF-dega (AES, BLAKE2\/3, Areion) on konstruktsioon sobiv kaitstud s\u00f5numite vahetamiseks, failide hoidmiseks ja v\u00f5rgutunneliteks. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/et\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\">VPN<\/a>-tunneliteks (grupipakettide j\u00e4rjekorra kulu formaadi jaoks on umbes 15%). Kaitseks tuumade poolte kanali r\u00fcnnakute vastu toimuvad teostused pideva ajaga (constant-time) koos t\u00e4ieliku kohustusliku puhastamisega virnaraamide ja protsessoriregistrite (GPR, XMM\/YMM\/ZMM, NEON) p\u00e4rast kutsumise l\u00f5petamist.\n<li class=\"l\"> x86_64 arhitektuuri jaoks on rakendatud assembleri tuumad, kasutades BMI2 (PEXT\/PDEP), AES-NI, VAES, AVX2 ja AVX-512 k\u00e4ske, samas kui ARM64 (Aarch64) p\u00f5hineb NEONi, kr\u00fcptolaiendite ja SVE2 laienditel (\u00fclekantaval tagasip\u00f6\u00f6rdumisel puhtale Go-le). \u00dche C ABI (libitb3) peale on ette valmistatud m\u00e4hised 33 programmeerimiskeele jaoks.\n<\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=66610\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 ITB, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u044b\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 (PRF) \u0438 \u0445\u044d\u0448-\u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432 (AES, BLAKE2\/3, Areion \u0438 \u0434\u0440\u0443\u0433\u0438\u0445) \u0432 \u0441\u0446\u0435\u043f\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0442\u043e\u0440\u043d\u044b\u0439 \u0438 \u0442\u043e\u043f\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0440\u044c\u0435\u0440. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u043b\u043e\u0447\u043d\u044b\u0445 \u0438 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u044b\u0445 \u0440\u0435\u0436\u0438\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 ITB \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u0443\u044e \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u0430, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0434\u0438\u0444\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0438 \u043b\u0438\u043d\u0435\u0439\u043d\u044b\u0445 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a, \u0430\u043b\u0433\u0435\u0431\u0440\u0430\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043b\u0438\u043d\u0435\u0430\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u044f\u043c\u044b\u0445 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184113","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 ITB, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u044b\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 (PRF) \u0438 \u0445\u044d\u0448-\u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432 (AES, BLAKE2\/3, Areion \u0438 \u0434\u0440\u0443\u0433\u0438\u0445) \u0432 \u0441\u0446\u0435\u043f\u043b\u0435\u043d\u043d\u044b\u0439.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440 ITB \u0441 \u0444\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 ITB, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u044b\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 (PRF) \u0438 \u0445\u044d\u0448-\u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432 (AES, BLAKE2\/3, Areion \u0438 \u0434\u0440\u0443\u0433\u0438\u0445) \u0432 \u0441\u0446\u0435\u043f\u043b\u0435\u043d\u043d\u044b\u0439.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-11-03T21:41:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-11-03T21:41:07+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47ITB kr\u00fcptograafiline isolaator koos formaalse usaldusv\u00e4\u00e4rsuse t\u00f5endiga | ProHoster","description":"Esitatud projekt ITB, mis arendab s\u00fcmmeetrilist kr\u00fcptograafilist isolaatorit, mis on m\u00f5eldud standardsete pseudojuhuslike funktsioonide (PRF) ja r\u00e4simisprimaatide (AES, BLAKE2\/3, Areion ja teised) pakkimiseks ahelas.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440 ITB \u0441 \u0444\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 ITB, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u044b\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 (PRF) \u0438 \u0445\u044d\u0448-\u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432 (AES, BLAKE2\/3, Areion \u0438 \u0434\u0440\u0443\u0433\u0438\u0445) \u0432 \u0441\u0446\u0435\u043f\u043b\u0435\u043d\u043d\u044b\u0439.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-11-03T21:41:02+00:00","article:modified_time":"2026-11-03T21:41:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184113","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=184113"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184113\/revisions"}],"predecessor-version":[{"id":184114,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/184113\/revisions\/184114"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=184113"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=184113"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=184113"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}