{"id":97667,"date":"2020-10-20T08:42:25","date_gmt":"2020-10-20T06:42:25","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/shifrovanie-v-mysql-ispolzovanie-master-key"},"modified":"2020-10-20T08:42:25","modified_gmt":"2020-10-20T06:42:25","slug":"shifrovanie-v-mysql-ispolzovanie-master-key","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/shifrovanie-v-mysql-ispolzovanie-master-key","title":{"rendered":"Kr\u00fcpteerimine MySQL-is: peamise v\u00f5tme kasutamine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<h2><\/h2>\n<p><strong><em>Uue kursuse alguse eel\u00f5htul&nbsp;<\/em><\/strong><noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/wMyj\/\"><strong><em>Andmebaasid<\/em><\/strong><\/a><\/noindex><strong><em>&nbsp;j\u00e4tkame MySQL-i kr\u00fcptimist k\u00e4sitleva artiklite seeria avaldamist.<\/em><\/strong><\/p>\n<p><img decoding=\"async\" alt=\"Kr\u00fcpteerimine MySQL-is: peamise v\u00f5tme kasutamine\" src=\"\/wp-content\/uploads\/2020\/10\/762866d2c321acd726e30606c9108122.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Eelmises selle seeria artiklis (<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/otus\/blog\/522092\/\"><u>Kr\u00fcptimine MySQL-is: v\u00f5tmehoidla<\/u><\/a><\/noindex>) r\u00e4\u00e4kisime v\u00f5tmehoidlatest. Selles artiklis k\u00e4sitleme peamise v\u00f5ti (master key) kasutamist ning arutame \u00fcmberv\u00f5tmise \u0161ifreerimise (envelope encryption) eeliseid ja puudusi.&nbsp;<\/p>\n<p>\u00dcmberv\u00f5tmise \u0161ifreerimise idee seisneb selles, et \u0161ifreerimiseks kasutatavad v\u00f5tmed (tabeliruumi v\u00f5tmed) \u0161ifreeritakse teise v\u00f5tmega (peamine v\u00f5ti, master key). Andmete \u0161ifreerimiseks kasutatakse tegelikult tabeliruumi v\u00f5tmeid. Graafiliselt on see kujutatav j\u00e4rgmiselt:<\/p>\n<p><img decoding=\"async\" alt=\"Kr\u00fcpteerimine MySQL-is: peamise v\u00f5tme kasutamine\" src=\"\/wp-content\/uploads\/2020\/10\/385afda0eff739f4720f59799c35b51f.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>Peamine v\u00f5tme (master key) asub v\u00f5tmeh\u00f5lvus (keyring) ja tabeliruumi v\u00f5tmed &#8212; on kr\u00fcpteeritud tabeliruumi peadega (tabeliruumi lehe 0-l).&nbsp;<\/p>\n<p>\u00dclaltoodud joonisel:<\/p>\n<ul>\n<li>\n<p>Tabel A on \u0161ifreeritud v\u00f5tmega 1 (Key 1). V\u00f5ti 1 \u0161ifreeritakse peamise v\u00f5tmega (master key) ja hoitakse kr\u00fcpteeritud kujul tabel A pealkirjas.<\/p>\n<\/li>\n<li>\n<p>Tabel B on \u0161ifreeritud v\u00f5tmega 2 (Key 2). V\u00f5ti 2 \u0161ifreeritakse peamise v\u00f5ti (master key) abil ja hoitakse kr\u00fcpteeritud kujul tabel B pealkirjas.<\/p>\n<\/li>\n<li>\n<p>Ja nii edasi.<\/p>\n<\/li>\n<\/ul>\n<p>Kui server peab tabeli A dekr\u00fcpteerima, saab ta peamise v\u00f5tme ladustatud kohast, loeb tabeli A pealkirjas asuvat kr\u00fcptitud v\u00f5tit 1 ja dekodeerib v\u00f5ti 1. Dekodeeritud v\u00f5ti 1 vahetatakse serveri m\u00e4llu ja kasutatakse tabeli A dekr\u00fcpteerimiseks.<\/p>\n<h3>InnoDB<\/h3>\n<p>InnoDB-s toimub tegelik kr\u00fcpteerimine ja dekr\u00fcpteerimine sisend-v\u00e4ljunditasemel. See t\u00e4hendab, et leht kr\u00fcpteeritakse vahetult enne selle salvestamist kettale ja dekr\u00fcpteeritakse kohe p\u00e4rast selle lugemist kettalt.<\/p>\n<p>InnoDB-s t\u00f6\u00f6tab kr\u00fcpteerimine ainult tabeliruumide tasemel. Ja vaikimisi luuakse k\u00f5ik tabelid eraldi tabeliruumides (<noindex><a rel=\"nofollow\" href=\"https:\/\/dev.mysql.com\/doc\/refman\/8.0\/en\/innodb-file-per-table-tablespaces.html\"><u>file-per-table tablespace<\/u><\/a><\/noindex>). Teisis\u00f5nu, luuakse tabeliruumi, mis v\u00f5ib sisaldada ainult \u00fchte tabelit. Kuigi saate luua tabeleid ka \u00fcldises tabeliruumis (<noindex><a rel=\"nofollow\" href=\"https:\/\/dev.mysql.com\/doc\/refman\/8.0\/en\/general-tablespaces.html\"><u>general tablespace<\/u><\/a><\/noindex>). Kuid igal juhul asub tabel alati mingis tabeli ruumis. Kuna kr\u00fcpteerimine toimub tabeli ruumi tasandil, siis see kas on t\u00e4ielikult kr\u00fcpteeritud v\u00f5i mitte. See t\u00e4hendab, et ei saa peamises tabeliruumi ainult osa tabelitest kr\u00fcpteerida.&nbsp;<\/p>\n<p>Kui mingil p\u00f5hjusel on teil file-per-table v\u00e4lja l\u00fclitatud, siis k\u00f5ik tabelid luuakse s\u00fcsteemi tabeli ruumis (system tablespace). <noindex><a rel=\"nofollow\" href=\"https:\/\/www.percona.com\/software\/mysql-database\/percona-server\"><u>Percona Server for MySQL<\/u><\/a><\/noindex> s\u00fcsteemi tabeli ruumi saab kr\u00fcpteerida muutuja innodb<em>sys<\/em>tablespace<em>kr\u00fcptimise v\u00f5i kr\u00fcpteerimise niitide (encryption threads) kasutamisega, kuid see on endiselt eksperimentaalne funktsioon. MySQL-is seda ei ole.<\/em><\/p>\n<p><em>Enne kui liigume edasi, peame vaatama peamise v\u00f5tme identifikaatori (master key ID) struktuuri. See koosneb UUID-st, v\u00f5tme<\/em>ID ja prefiks &#171;INNODBKey&#187;. See n\u00e4eb v\u00e4lja j\u00e4rgmine: INNODBKey-UUID-KEY<em>ID.<\/em><\/p>\n<p><em>UUID &#8212; on serveri uuid, mis on kr\u00fcpteeritud tabeliruumi jaoks. KEY<\/em>ID &#8212; on lihtsalt pidevalt kasvav v\u00e4\u00e4rtus. Peamise v\u00f5tme KEY esmakordsel loomisel<em>ID v\u00f5rdne 1. V\u00f5tme vahetamisel, kui luuakse uus peamine v\u00f5ti, on KEY<\/em>ID = 2 ja edasi. Peamiste v\u00f5tmete rotatsiooni kohta r\u00e4\u00e4gime j\u00e4rgmistel artikkelidel selles seerias.<\/p>\n<p>N\u00fc\u00fcd, kui me teame, kuidas peamise v\u00f5tme identifikaator v\u00e4lja n\u00e4eb, vaatame paroolitud tabeliruumi pealkirja. Kui tabeliruumi kr\u00fcptitakse, lisatakse teave kr\u00fcpteerimise kohta pealkirjale. See n\u00e4eb v\u00e4lja j\u00e4rgmine:<\/p>\n<p><img decoding=\"async\" alt=\"Kr\u00fcpteerimine MySQL-is: peamise v\u00f5tme kasutamine\" src=\"\/wp-content\/uploads\/2020\/10\/0703933a85f0a106c07c0dbd6b7f4186.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p>KEY ID &#8212; on KEY<em>ID peamise v\u00f5tme identifikaatorist, millest me juba r\u00e4\u00e4kisime. UUID &#8212; on serveri uuid, mida kasutatakse ka peamise v\u00f5tme identifikaatoris. TABLESPACE KEY &#8212; tabeliruumi v\u00f5tme, mis koosneb 256 bitist, juhuslikult genereeritud serveri poolt. Vektorite algatamine (IV, initialization vector) koosneb samuti 256 juhuslikult genereeritud bitist (kuigi see peaks olema 128 bitti). IV kasutatakse AES-i kr\u00fcpteerimise ja dekodeerimise algatamiseks (256 bitist kasutatakse ainult 128). L\u00f5pus on olemas TABLESPACE KEY ja IV kontrollsummana CRC32.<\/em><\/p>\n<p><em>Kogu selle aja olen ma natuke lihtsustanud, \u00f6eldes, et pealkirjas on tabeliruumi kr\u00fcpteeritud v\u00f5ti. Tegelikult hoitakse ja kr\u00fcpteeritakse tabeliruumi v\u00f5ti ja initsialiseerimise vektor koos p\u00f5hi v\u00f5tmega. Pea meeles, et enne tabeliruumi v\u00f5ti ja initsialiseerimise vektori kr\u00fcpteerimist arvutatakse nende jaoks CRC32.<\/em><\/p>\n<h3>Miks on vaja CRC32?<\/h3>\n<p><em>Lihtsalt, selleks et veenduda p\u00f5hi v\u00f5tme kehtivuses. P\u00e4rast tabeliruumi v\u00f5tme ja initsialiseerimise vektori kr\u00fcpteerimist arvutatakse kontrollsummari ja v\u00f5rreldakse seda pealkirjas hoitava CRC32-ga. Kui kontrollsummad kattuvad, siis on meil \u00f5ige p\u00f5hi v\u00f5ti ja tabeliruumi v\u00f5ti. Vastupidisel juhul m\u00e4rgistatakse tabeliruum puuduvaks (me ei saa seda siiski kr\u00fcpteerida).<\/em><\/p>\n<p><em>Te v\u00f5id k\u00fcsida: millal toimub v\u00f5tmete kontroll? Vastus on &#8212; serveri k\u00e4ivitamisel. Server, millel on kr\u00fcpteeritud tabelid&nbsp; \/ tabeliruumi, loeb k\u00e4ivitamisel UUID, KEY<\/em>ID p\u00e4isest ja genereerib peav\u00f5tme identifikaatori. Seej\u00e4rel saadakse vajalik peav\u00f5ti eraldi hoidlast (keyring), dekodeeritakse tabeliruumi v\u00f5ti ja kontrollitakse kontrollsummat. Veel kord, kui kontrollsumma vastab, siis on k\u00f5ik korras, kui ei &#8212; tabeliruumi m\u00e4rgistatakse puuduvaks.<\/p>\n<p>Kui olete lugenud selle seeria eelmist artiklit (<noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/otus\/blog\/522092\/\"><u>Kr\u00fcptimine MySQL-is: v\u00f5tmehoidla<\/u><\/a><\/noindex>), siis v\u00f5ite meenutada, et serveri v\u00f5tmehoidlat kasutades saab server k\u00e4ivitamisel ainult v\u00f5tme identifikaatorite nimekirja, t\u00e4psemalt key id ja user id, kuna see paar m\u00e4\u00e4ratleb v\u00f5tme \u00fcheselt. Ja n\u00fc\u00fcd \u00fctlen, et server k\u00e4ivitamisel saab k\u00f5ik v\u00f5tmed, mis on vajalikud tabeliruumide v\u00f5tmete dekr\u00fcpteerimise v\u00f5imaluse kontrollimiseks. Miks siis initsialiseerimise korral, serveri v\u00f5tmehoidla puhul, laaditakse ainult key<em>id ja user<\/em>id, mitte k\u00f5ik v\u00f5tmed? Sest sul ei pruugi olla vaja k\u00f5iki v\u00f5tmeid. See on peamiselt seotud peavarju v\u00f5tme p\u00f6\u00f6ramisega. Peate v\u00f5tme p\u00f6\u00f6ramisel luuakse uus peav\u00f5ti, kuid vanad v\u00f5tmed ei kustutata. Seega v\u00f5ib teie serveri v\u00f5tmehoidlas olla palju v\u00f5tmeid, mis ei ole serverile vajalikud ja seega ei tuuakse serveri k\u00e4ivitamisel \u00fcles.<\/p>\n<p>On aeg r\u00e4\u00e4kida peavarju v\u00f5tmega kr\u00fcpteerimise plussidest ja miinustest. Suurim eelis on see, et teil on vaid \u00fcks kr\u00fcpteerimisv\u00f5ti (peav\u00f5ti), mis hoitakse eraldi teie kr\u00fcptitud andmetest. See muudab serveri k\u00e4ivitamise kiireks ja hoidlana v\u00e4iksemaks, h\u00f5lbustades haldamist. Lisaks on ainus peav\u00f5ti kergesti uuesti genereeritav.<\/p>\n<p>Kuid peamise v\u00f5tmega kr\u00fcpteerimisel on \u00fcks suur puudus: p\u00e4rast seda, kui tabeliruumi kr\u00fcptitakse tablespace_key abil, j\u00e4\u00e4b see alati sama v\u00f5tmega kr\u00fcptituks. Peamise v\u00f5tme vahetamine ei aita siin. Miks see on puudus? Me teame, et MySQL-is on vigu, mis v\u00f5ivad p\u00f5hjustada ootamatuid krahhe ja luua core-faili. Kuna core-fail sisaldab serveri m\u00e4lu dumpi, v\u00f5ib juhtuda, et dumpis on dekr\u00fcpteeritud tabeliruumi v\u00f5ti. Veel hullem on see, et dekr\u00fcpteeritud tabeliruumi v\u00f5tmed talletatakse m\u00e4lus, mis v\u00f5ib kettale vahetuda. V\u00f5ite \u00f6elda, et see ei ole puudus, kuna teil on nende failide ja vahetusruumi juurde p\u00e4\u00e4semiseks vaja root-\u00f5igusi. Jah. Kuid root on vajalik vaid hetkeks. Kui keegi p\u00e4\u00e4seb juurde dekr\u00fcpteeritud tabeliruumi v\u00f5tmele, saab ta \/ ta j\u00e4tkata selle kasutamist andmete dekr\u00fcpteerimiseks, isegi ilma root-\u00f5igusteta. Lisaks v\u00f5ib kettast varastada ja vahetusruumi \/ core-faile saab kolmandate osapoolte t\u00f6\u00f6riistadega lugeda. TDE eesm\u00e4rk on muuta see loetamatuks, isegi kui kettast varastatakse. <noindex><a rel=\"nofollow\" href=\"https:\/\/www.percona.com\/software\/mysql-database\/percona-server\"><u>Percona Server for MySQL<\/u><\/a><\/noindex> on v\u00f5imalus uuesti kr\u00fcpteerida tabeliruumi uute genereeritud v\u00f5tmetega. Seda funktsiooni nimetatakse kr\u00fcptimise niitideks (encryption threads) ja artikli kirjutamise ajal on see endiselt eksperimentaalne.<\/p>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/otus.pw\/wMyj\/\"><strong>Tutvuge kursusega<\/strong><\/a><\/noindex><\/p>\n<h3>Loe edasi:<\/h3>\n<ul>\n<li>\n<p><noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/otus\/blog\/522092\/\">Kr\u00fcptimine MySQL-is: v\u00f5tmehoidla<\/a><\/noindex><\/p>\n<\/li>\n<\/ul>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/otus\/blog\/524050\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0441\u0442\u0430\u0440\u0442\u0430 \u043d\u043e\u0432\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u043d\u0430 \u043a\u0443\u0440\u0441&nbsp;\u00ab\u0411\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445\u00bb&nbsp;\u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0438\u044e \u0441\u0442\u0430\u0442\u0435\u0439 \u043f\u0440\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 MySQL. \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u044d\u0442\u043e\u0439 \u0441\u0435\u0440\u0438\u0438 (\u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 MySQL: \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043a\u043b\u044e\u0447\u0435\u0439) \u043c\u044b \u0433\u043e\u0432\u043e\u0440\u0438\u043b\u0438 \u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u0445 \u043a\u043b\u044e\u0447\u0435\u0439. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 (master key), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0441\u0443\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u043e\u0438\u043d\u0441\u0442\u0432\u0430 \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u043e\u0432 (envelope encryption).&nbsp; \u0418\u0434\u0435\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u043e\u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":97668,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-97667","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0441\u0442\u0430\u0440\u0442\u0430 \u043d\u043e\u0432\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u043d\u0430 \u043a\u0443\u0440\u0441 \u00ab\u0411\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445\u00bb \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0438\u044e \u0441\u0442\u0430\u0442\u0435\u0439 \u043f\u0440\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 MySQL.\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u044d\u0442\u043e\u0439 \u0441\u0435\u0440\u0438\u0438 (\u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 MySQL: \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043a\u043b\u044e\u0447\u0435\u0439) \u043c\u044b \u0433\u043e\u0432\u043e\u0440\u0438\u043b\u0438 \u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u0445 \u043a\u043b\u044e\u0447\u0435\u0439. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 (master key), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0441\u0443\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u043e\u0438\u043d\u0441\u0442\u0432\u0430 \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u043e\u0432 (envelope encryption). \u0418\u0434\u0435\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u043e\u0432 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/shifrovanie-v-mysql-ispolzovanie-master-key\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 MySQL: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 Master Key | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0441\u0442\u0430\u0440\u0442\u0430 \u043d\u043e\u0432\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u043d\u0430 \u043a\u0443\u0440\u0441 \u00ab\u0411\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445\u00bb \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0438\u044e \u0441\u0442\u0430\u0442\u0435\u0439 \u043f\u0440\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 MySQL.\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u044d\u0442\u043e\u0439 \u0441\u0435\u0440\u0438\u0438 (\u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 MySQL: \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043a\u043b\u044e\u0447\u0435\u0439) \u043c\u044b \u0433\u043e\u0432\u043e\u0440\u0438\u043b\u0438 \u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u0445 \u043a\u043b\u044e\u0447\u0435\u0439. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 (master key), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0441\u0443\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u043e\u0438\u043d\u0441\u0442\u0432\u0430 \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u043e\u0432 (envelope encryption). \u0418\u0434\u0435\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u043e\u0432 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/shifrovanie-v-mysql-ispolzovanie-master-key\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-10-20T06:42:25+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-10-20T06:42:25+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kr\u00fcptimine MySQL-is: peamise v\u00f5tme kasutamine | ProHoster","description":"Uue grupi alustamise eel\u00f5htul kursusel \u201eAndmebaasid\u201c j\u00e4tkame artiklite seeria avaldamist MySQL kr\u00fcptimise teemal. Selle seeria eelmises artiklis (Kr\u00fcptimine MySQL-is: v\u00f5tmehoidla) r\u00e4\u00e4kisime v\u00f5tmehoidlatest. K\u00e4esolevas artiklis k\u00e4sitleme, kuidas kasutatakse peamist v\u00f5tit (master key) ning arutame \u00fcmbriku kr\u00fcptimise (envelope encryption) eeliseid ja puudusi. \u00dcmbriku kr\u00fcptimise idee seisneb","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/shifrovanie-v-mysql-ispolzovanie-master-key","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 MySQL: \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 Master Key | ProHoster","og:description":"\u0412 \u043f\u0440\u0435\u0434\u0434\u0432\u0435\u0440\u0438\u0438 \u0441\u0442\u0430\u0440\u0442\u0430 \u043d\u043e\u0432\u043e\u0433\u043e \u043d\u0430\u0431\u043e\u0440\u0430 \u043d\u0430 \u043a\u0443\u0440\u0441 \u00ab\u0411\u0430\u0437\u044b \u0434\u0430\u043d\u043d\u044b\u0445\u00bb \u043f\u0440\u043e\u0434\u043e\u043b\u0436\u0430\u0435\u043c \u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0441\u0435\u0440\u0438\u044e \u0441\u0442\u0430\u0442\u0435\u0439 \u043f\u0440\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 MySQL.\u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u044d\u0442\u043e\u0439 \u0441\u0435\u0440\u0438\u0438 (\u0428\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0432 MySQL: \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0435 \u043a\u043b\u044e\u0447\u0435\u0439) \u043c\u044b \u0433\u043e\u0432\u043e\u0440\u0438\u043b\u0438 \u043e \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430\u0445 \u043a\u043b\u044e\u0447\u0435\u0439. \u0412 \u044d\u0442\u043e\u0439 \u0441\u0442\u0430\u0442\u044c\u0435 \u043c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c, \u043a\u0430\u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0433\u043b\u0430\u0432\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 (master key), \u0430 \u0442\u0430\u043a\u0436\u0435 \u043e\u0431\u0441\u0443\u0434\u0438\u043c \u0434\u043e\u0441\u0442\u043e\u0438\u043d\u0441\u0442\u0432\u0430 \u0438 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043c\u0435\u0442\u043e\u0434\u043e\u043c \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u043e\u0432 (envelope encryption). \u0418\u0434\u0435\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043a\u043e\u043d\u0432\u0435\u0440\u0442\u043e\u0432 \u0437\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/shifrovanie-v-mysql-ispolzovanie-master-key","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-10-20T06:42:25+00:00","article:modified_time":"2020-10-20T06:42:25+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"97667","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 10:15:28","updated":"2022-10-03 07:13:51"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/97667","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=97667"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/97667\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/97668"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=97667"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=97667"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=97667"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}