{"id":54924,"date":"2020-01-08T00:00:00","date_gmt":"2020-01-07T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/predlozhen-metod-opredeleniya-kollizij-v-sha-1-prigodnyj-dlya-ataki-na-pgp"},"modified":"2020-02-18T14:02:59","modified_gmt":"2020-02-18T11:02:59","slug":"predlozhen-metod-opredeleniya-kollizij-v-sha-1-prigodnyj-dlya-ataki-na-pgp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/predlozhen-metod-opredeleniya-kollizij-v-sha-1-prigodnyj-dlya-ataki-na-pgp","title":{"rendered":"On esitatud SHA-1 kokkulangevuste m\u00e4\u00e4ramise meetod, mis sobib PGP r\u00fcnnakuks.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Prantsuse riikliku informaatika ja automatiseerimise uurimisinstituudi (INRIA) ning Nanyangi Tehnoloogia \u00dclikooli (Singapur) teadlased on esitanud r\u00fcnnaku meetodi Shambles<\/a><\/noindex> (PDF<\/a><\/noindex>), mis esitleb esimest praktilist teost SHA-1 algoritmi r\u00fcnnakust, mida saab kasutada vale PGP ja GnuPG digitaalsete allkirjade loomisel. Teadlased usuvad, et n\u00fc\u00fcd v\u00f5ivad k\u00f5ik praktilised r\u00fcnnakud MD5-le kehtida ka SHA-1-le, kuigi need n\u00f5uavad endiselt m\u00e4rkimisv\u00e4\u00e4rseid ressursse.<\/p>\n

Meetod p\u00f5hineb antud prefiksiga koliisioonir\u00fcnnakul<\/a><\/noindex>, mis v\u00f5imaldab kahe juhusliku andmekogumi jaoks leida t\u00e4iendusi, mille lisamine toob kaasa kokkup\u00f5rkeid, mille puhul SHA-1 algoritmi rakendamine toob kaasa sama hash'i tulemuse. Teisis\u00f5nu, kahe olemasoleva dokumendi puhul saab arvutada kaks t\u00e4iendust, ja kui \u00fcks lisada esimesesse dokumenti ja teine teise, siis nende failide SHA-1 hash'id on identsed.<\/p>\n

Uus meetod erineb varasematest sarnastest tehnikatest koliisiooniotsingu efektiivsuse t\u00f5stmise ja praktilise rakenduse demonstreerimise poolest PGP r\u00fcnnaku jaoks. Eelk\u00f5ige suutsid teadlased ette valmistada kaks erineva suurusega avatud PGP-v\u00f5tit (RSA-8192 ja RSA-6144) erinevate kasutaja identifikaatoritega ja sertifikaatidega, mis p\u00f5hjustavad SHA-1 koliisioonide teket. Esimene v\u00f5ti<\/a><\/noindex> sisaldas ohvri identifikaatorit, samas kui teine v\u00f5ti<\/a><\/noindex> sisaldas r\u00fcndaja nime ja pilti. Samuti, kuna koliisioonide leidmine v\u00f5imaldas identifitseerida v\u00f5tmete sertifikaati, mis sisaldas v\u00f5tme ja r\u00fcndaja pilti, oli sellel sama SHA-1 hash nagu identifitseerimiseritifikaadiga, mis sisaldas v\u00f5tme ja ohvri nime. <\/p>\n

R\u00fcndaja v\u00f5is paluda digitaalset allkirja oma v\u00f5tme ja pildi jaoks kolmandas osas asuvas sertifitseerimiskeskuses, mille j\u00e4rel sai ta digitaalallkirja r\u00fcndaja v\u00f5tmele ja seej\u00e4rel \u00fcles laadida ohvri v\u00f5tme digitaalallkirja. Digitaalne allkiri j\u00e4\u00e4b kehtima koliisiooni ja r\u00fcndaja v\u00f5tme sertifitseerimiskeskuse kinnituse t\u00f5ttu, mis v\u00f5imaldab r\u00fcndajal omada kontrolli ka ohvri nimega v\u00f5tme \u00fcle (kuna SHA-1 hash m\u00f5lema v\u00f5tme jaoks kattub). L\u00f5pptulemusena saab r\u00fcndaja esitada end ohvrina ja allkirjastada mis tahes dokumendi tema nimel.<\/p>\n

R\u00fcnnak on endiselt piisavalt kallis, kuid juba on see t\u00e4iesti taskukohane eriteenistustele ja suurtele korporatsioonidele. Lihtsa kokkup\u00f5rke valimise hind odava Nvidia GTX 970 GPU kasutamisel oli 11 tuhat dollarit, ning kokkup\u00f5rke valimise hind m\u00e4\u00e4ratud prefiksiga - 45 tuhat dollarit (v\u00f5rdluseks, 2012. aastal hinnati SHA-1 kokkup\u00f5rke leidmise kulud 2 miljoni dollariga, 2015. aastal - 700 tuhande dollariga). Praktiseerimise r\u00fcnnaku l\u00e4biviimiseks PGP-le oli vajalik kaks kuud arvutust\u00f6\u00f6d, kaasates 900 Nvidia GTX 1060 GPU-d, mille rentimine maksis teadlastele 75 tuhat dollarit.<\/p>\n

Uurijate pakutud kokkup\u00f5rgete avastamise meetod on umbes 10 korda t\u00f5husam kui varasemad saavutused - kokkup\u00f5rgete arvutamise keerukust \u00f5nnestus v\u00e4hendada 261,2 operatsioonini, asemel 264,7, ning m\u00e4\u00e4ratud prefiksiga kokkup\u00f5rgete jaoks 263,4 operatsioonini, asemel 267,1. Uurijad soovitavad v\u00f5imalikult kiiresti \u00fcle minna SHA-1 kasutamiselt SHA-256 v\u00f5i SHA-3 kasutusele, sest nende prognooside kohaselt langeb r\u00fcnnaku l\u00e4biviimise hind 2025. aastaks 10 tuhande dollarini.<\/p>\n

GnuPG arendajad teavitati probleemist 1. oktoobril (CVE-2019-14855) ja 25. novembril GnuPG 2.2.18 v\u00e4ljaandmisel v\u00f5eti meetmeid probleemsete sertifikaatide blokeerimiseks - k\u00f5ik SHA-1 digitaalsete allkirjade identifitseerivad allkirjad, mis on loodud p\u00e4rast 19. jaanuari eelmisel aastal, tunnistatakse n\u00fc\u00fcd kehtetuks. CAcert, \u00fcks peamisi PGP v\u00f5tmete sertifitseerimiskeskusi, kavatseb \u00fcle minna turvalisematest hash-funktsioonidest v\u00f5tmete sertifitseerimiseks. OpenSSL arendajad, reageerides uue r\u00fcndemeetodi teabele, otsustasid keelata SHA-1 ettepanekute vaikimisi esimesel turvatasemel (SHA-1 ei saa kasutada sertifikaatide ja digitaalsete allkirjade jaoks \u00fchenduse loomise protsessis).<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0433\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0442\u0438\u043a\u0435 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u043a\u0435 (INRIA) \u0438 \u041d\u0430\u043d\u044c\u044f\u043d\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 Shambles (PDF), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u043f\u043e\u0434\u043d\u043e\u0441\u0438\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0435\u0440\u0432\u0430\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c SHA-1, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0444\u0438\u043a\u0442\u0438\u0432\u043d\u044b\u0445 \u0446\u0438\u0444\u0440\u043e\u0432\u044b\u0445 \u043f\u043e\u0434\u043f\u0438\u0441\u0435\u0439 PGP \u0438 GnuPG. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u043b\u0430\u0433\u0430\u044e\u0442, \u0447\u0442\u043e \u0442\u0435\u043f\u0435\u043f\u0440\u044c \u0432\u0441\u0435 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 MD5 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0438 \u0434\u043b\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-54924","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Pakutud on SHA-1 kollisioonide m\u00e4\u00e4ramise meetod, mis sobib PGP r\u00fcnnaku jaoks | ProHoster","description":"Prantsuse riikliku informaatika ja automatiseerimise uurimisinstituudi (INRIA) ning Nanyangi Tehnoloogia \u00dclikooli (Singapur) teadlased on esitanud r\u00fcnnaku meetodi","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/predlozhen-metod-opredeleniya-kollizij-v-sha-1-prigodnyj-dlya-ataki-na-pgp","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d \u043c\u0435\u0442\u043e\u0434 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043a\u043e\u043b\u043b\u0438\u0437\u0438\u0439 \u0432 SHA-1, \u043f\u0440\u0438\u0433\u043e\u0434\u043d\u044b\u0439 \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 PGP | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u0433\u043e \u0433\u043e\u0441\u0443\u0434\u0430\u0440\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u0439 \u0432 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0442\u0438\u043a\u0435 \u0438 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u043a\u0435 (INRIA) \u0438 \u041d\u0430\u043d\u044c\u044f\u043d\u0441\u043a\u043e\u0433\u043e \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 (\u0421\u0438\u043d\u0433\u0430\u043f\u0443\u0440) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0438 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/predlozhen-metod-opredeleniya-kollizij-v-sha-1-prigodnyj-dlya-ataki-na-pgp","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-01-07T21:00:00+00:00","article:modified_time":"2020-02-18T11:02:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"54924","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 13:11:22","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 18:23:15","updated":"2026-01-24 13:11:22","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/54924","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=54924"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/54924\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=54924"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=54924"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=54924"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}