{"id":54924,"date":"2020-01-08T00:00:00","date_gmt":"2020-01-07T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/predlozhen-metod-opredeleniya-kollizij-v-sha-1-prigodnyj-dlya-ataki-na-pgp"},"modified":"2020-02-18T14:02:59","modified_gmt":"2020-02-18T11:02:59","slug":"predlozhen-metod-opredeleniya-kollizij-v-sha-1-prigodnyj-dlya-ataki-na-pgp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/predlozhen-metod-opredeleniya-kollizij-v-sha-1-prigodnyj-dlya-ataki-na-pgp","title":{"rendered":"Pakkus meetodi SHA-1 kokkupuutumiste m\u00e4\u00e4ramiseks, mis sobib PGP r\u00fcnnakuks.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Prantsuse teadlased riiklikust informaatika ja automatiseerimise uurimisinstituudist (INRIA) ja Nanyangi Tehnoloogiainstituudist (Singapur) esitlesid r\u00fcnnaku meetodit Shambles<\/a><\/noindex> (PDF<\/a><\/noindex>), mis esitatakse kui esimene praktiline rakendus r\u00fcnnakule SHA-1 algoritmile, mida saab kasutada vale digitaalsete allkirjade PGP ja GnuPG loomiseks. Uurijad usuvad, et n\u00fc\u00fcd saavad k\u00f5ik praktilised r\u00fcnnakud MD5 suhtes kehtida ka SHA-1 jaoks, kuigi need n\u00f5uavad endiselt olulisi ressursse.<\/p>\n

Meetod p\u00f5hineb m\u00e4\u00e4ratud prefiksiga kolmas r\u00fcnnak<\/a><\/noindex>, v\u00f5imaldades kahe juhusliku andmestiku jaoks leida t\u00e4iendusi, mille lisamine annab tulemuseks kokkup\u00f5rge komplektid, mille puhul SHA-1 algoritmi rakendamine toob kaasa sama tulemush\u00e4\u0161i moodustamise. Teisis\u00f5nu, kahe olemasoleva dokumendi jaoks on v\u00f5imalik arvutada kaks t\u00e4iendust, ja kui \u00fcks lisada esimesesse dokumenti ning teine teise, siis SHA-1 tulemush\u00e4\u0161id nende failide jaoks on samad.<\/p>\n

Uus meetod erineb varasemast sarnastest tehnikatest kollisioonide otsingute t\u00f5hususe suurendamise ja praktilise rakenduse demonstreerimise poolest PGP r\u00fcnnakute jaoks. Eelk\u00f5ige suutsid teadlased koostada kaks avatud PGP-v\u00f5tit eri suurustes (RSA-8192 ja RSA-6144), millel olid erinevad kasutaja tuvastajad ja sertifikaadid, mis p\u00f5hjustasid SHA-1 kollisiooni. Esimene v\u00f5ti<\/a><\/noindex> sisaldas ohvri tuvastajat, samas kui teine v\u00f5ti<\/a><\/noindex> sisaldas r\u00fcndaja nime ja pilti. Sellest tulenevalt oli kollisioonide leidmise t\u00f5ttu tuvastava v\u00f5tme sertifikaat, mis sisaldas r\u00fcndaja v\u00f5tit ja pilti, sama SHA-1 r\u00e4si, mis tuvastussertifikaadil, mis sisaldas ohvri v\u00f5tit ja nime. <\/p>\n

R\u00fcndaja v\u00f5is k\u00fcsida digitaalset allkirja oma v\u00f5tme ja pildi jaoks kolmandalt osapoolelt, seej\u00e4rel edastada digitaalse allkirja ohvri v\u00f5tmele. Digitaalne allkiri j\u00e4\u00e4b kehtivaks konfliktide ja r\u00fcndaja v\u00f5tme kinnitamise t\u00f5ttu sertifitseerimiskeskuse poolt, mis v\u00f5imaldab r\u00fcndajal saada kontrolli ohvri nimega v\u00f5tme \u00fcle (kuna SHA-1 hajusv\u00e4\u00e4rtus m\u00f5lema v\u00f5tme jaoks langeb kokku). L\u00f5puks saab r\u00fcndaja esineda ohvri nime all ja allkirjastada mistahes dokumente tema nimel.<\/p>\n

R\u00fcnnak on endiselt piisavalt kulukas, kuid juba t\u00e4itsa kergesti k\u00e4ttesaadav julgeolekuteenistustele ja suurtele ettev\u00f5tetele. Lihtsa kokkup\u00f5rke leidmise jaoks kasutas odavamat GPU-d NVIDIA GTX 970 kulud ulatusid 11 000 dollarini, ning kokkup\u00f5rke leidmine m\u00e4\u00e4ratletud prefiksiga maksis 45 000 dollarit (v\u00f5rdluseks, 2012. aastal hinnati SHA-1 kokkup\u00f5rgete leidmise kulud 2 miljonile dollarile ning 2015. aastal 700 000 dollarile). Praktika r\u00fcnnaku teostamiseks PGP-le kulus kaks kuud arvutusi, kasutades 900 GPU-d NVIDIA GTX 1060, mille rentimise maksumus oli teadlastele 75 000 dollarit.<\/p>\n

Teadlaste ettepanek meetodi osas kokkup\u00f5rgete avastamiseks on umbes 10 korda t\u00f5husam kui varasemad saavutused \u2014 kokkup\u00f5rgete arvutamise keerukust on \u00f5nnestunud v\u00e4hendada 261.2 operatsioonini, v\u00f5rreldes 264.7-ga, ja m\u00e4\u00e4ratletud prefiksiga kokkup\u00f5rgete puhul 263.4 operatsioonini, v\u00f5rreldes 267.1-ga. Teadlased soovitavad v\u00f5imalikult kiiresti liikuda SHA-1 kasutamiselt SHA-256 v\u00f5i SHA-3 kasutamisele, kuna nende prognooside kohaselt langeb r\u00fcnnaku l\u00e4biviimise hind 2025. aastaks 10 000 dollarini.<\/p>\n

GnuPG arendajad said probleemist teada 1. oktoobril (CVE-2019-14855) ja 25. novembril, kui ilmus GnuPG 2.2.18, v\u00f5tsid meetmed probleemsete sertifikaatide blokeerimiseks \u2014 k\u00f5ik SHA-1 digitaalsed identifitseerivad allkirjad, mis on loodud p\u00e4rast eelmise aasta 19. jaanuari, tunnistatakse n\u00fc\u00fcd kehtetuks. CAcert, \u00fcks peamisi sertifitseerimiskeskusi PGP v\u00f5tmete jaoks, plaanib liikuda turvalisemate hash-funktsioonide kasutamisele v\u00f5tmete sertifitseerimiseks. OpenSSL arendajad otsustasid vastusena uue r\u00fcnnakumeetodi teabele keelata SHA-1 vaikimisi esimesel turvatasemel (SHA-1 ei saa kasutada sertifikaatide ja digitaalsete allkirjade jaoks \u00fchenduste loomise protsessis).<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0433\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0442\u0438\u043a\u0435 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u043a\u0435 (INRIA) \u0438 \u041d\u0430\u043d\u044c\u044f\u043d\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 Shambles (PDF), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u043f\u043e\u0434\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0435\u0440\u0432\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c SHA-1, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 PGP \u0438 GnuPG. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0442\u0435\u043f\u0435\u043f\u0440\u044c \u0432\u0441\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 MD5 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0438 \u0434\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-54924","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47SHA-1 kokkuklappimist tuvastamise meetod, sobiv PGP r\u00fcnnaku jaoks | ProHoster","description":"Prantsuse teadlased riiklikust informaatika ja automatiseerimise uurimisinstituudist (INRIA) ja Nanyangi Tehnoloogiainstituudist (Singapur) esitlesid r\u00fcnnaku meetodit","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/predlozhen-metod-opredeleniya-kollizij-v-sha-1-prigodnyj-dlya-ataki-na-pgp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043b\u043b\u0438\u0437\u0438\u0439 \u0432 SHA-1, \u043f\u0440\u0438\u0433\u043e\u0434\u043d\u044b\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 PGP | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0433\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0442\u0438\u043a\u0435 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u043a\u0435 (INRIA) \u0438 \u041d\u0430\u043d\u044c\u044f\u043d\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/predlozhen-metod-opredeleniya-kollizij-v-sha-1-prigodnyj-dlya-ataki-na-pgp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-07T21:00:00+00:00","article:modified_time":"2020-02-18T11:02:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"54924","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 13:11:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:23:15","updated":"2026-01-24 13:11:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/54924","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=54924"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/54924\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=54924"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=54924"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=54924"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}