{"id":40628,"date":"2020-02-02T15:06:08","date_gmt":"2020-02-02T12:06:08","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/google-predstavil-otkrytyj-stek-opensk-dlya-sozdaniya-kriptograficheskih-tokenov"},"modified":"2020-02-02T15:06:08","modified_gmt":"2020-02-02T12:06:08","slug":"google-predstavil-otkrytyj-stek-opensk-dlya-sozdaniya-kriptograficheskih-tokenov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/fr\/blog\/google-predstavil-otkrytyj-stek-opensk-dlya-sozdaniya-kriptograficheskih-tokenov","title":{"rendered":"Google a pr\u00e9sent\u00e9 la pile ouverte OpenSK pour la cr\u00e9ation de jetons cryptographiques","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

La soci\u00e9t\u00e9 Google pr\u00e9sent\u00e9e<\/a><\/noindex> la plateforme OpenSK, permettant de cr\u00e9er des firmwares pour des jetons cryptographiques, enti\u00e8rement conformes aux normes FIDO U2F<\/a><\/noindex> et FIDO2<\/a><\/noindex>. Les jetons pr\u00e9par\u00e9s avec OpenSK peuvent \u00eatre utilis\u00e9s comme authentificateurs pour l'authentification primaire et \u00e0 deux facteurs, ainsi que pour confirmer la pr\u00e9sence physique de l'utilisateur. Le projet est \u00e9crit en Rust et est distribu\u00e9<\/a><\/noindex> sous licence Apache 2.0.<\/p>\n

OpenSK permet la cr\u00e9ation de son propre jeton pour l'authentification \u00e0 deux facteurs sur des sites, qui, contrairement aux solutions pr\u00eates \u00e0 l'emploi fournies par des fabricants tels que Yubico, Feitian, Thetis et Kensington, est construit sur un firmware enti\u00e8rement ouvert, disponible pour extension et audit. OpenSK se positionne comme une plateforme de recherche que les fabricants de jetons et les passionn\u00e9s peuvent utiliser pour d\u00e9velopper de nouvelles fonctionnalit\u00e9s et promouvoir les jetons aupr\u00e8s du grand public. Le code OpenSK a \u00e9t\u00e9 initialement d\u00e9velopp\u00e9 comme une application pour Tock OS<\/a><\/noindex> et test\u00e9 sur les cartes Nordic nRF52840-DK et Nordic nRF52840-dongle. <\/p>\n

En plus du logiciel, le projet comprend sont fournis<\/a><\/noindex> des mod\u00e8les pour imprimer en 3D le bo\u00eetier d'un USB key fob bas\u00e9 sur le chipset populaire Nordic nRF52840<\/a><\/noindex>, qui comprend un microcontr\u00f4leur ARM Cortex-M4 et un cryptoacc\u00e9l\u00e9rateur
\n ARM TrustZone Cryptocell 310. Le Nordic nRF52840 est la premi\u00e8re plateforme de r\u00e9f\u00e9rence pour OpenSK. OpenSK offre un support pour le cryptoacc\u00e9l\u00e9rateur ARM CryptoCell et tous les types de transport fournis par la puce, y compris USB, NFC et Bluetooth Low Energy. En plus d'utiliser le cryptoacc\u00e9l\u00e9rateur, OpenSK propose \u00e9galement des impl\u00e9mentations distinctes des algorithmes ECDSA, ECC secp256r1, HMAC-SHA256 et AES256, \u00e9crites en Rust.<\/p>\n

\"Google<\/a><\/noindex><\/center><\/p>\n

Il convient de noter qu'OpenSK n'est pas la premi\u00e8re impl\u00e9mentation ouverte de firmware pour des jetons avec support FIDO2 et U2F, des firmwares analogues d\u00e9veloppent des projets ouverts Solo<\/a><\/noindex> et Somu<\/a><\/noindex>. Par rapport aux projets mentionn\u00e9s, OpenSK est \u00e9crit non pas en C, mais en Rust, permettant d'\u00e9viter de nombreuses vuln\u00e9rabilit\u00e9s r\u00e9sultant d'une manipulation de la m\u00e9moire \u00e0 bas niveau, telles que l'acc\u00e8s \u00e0 la m\u00e9moire apr\u00e8s sa lib\u00e9ration, le d\u00e9r\u00e9f\u00e9rencement de pointeurs nuls et les d\u00e9passements de tampon. <\/p>\n

Le firmware propos\u00e9 pour installation est bas\u00e9 sur TockOS<\/a><\/noindex>,
\nsyst\u00e8me d'exploitation pour microcontr\u00f4leurs bas\u00e9 sur Cortex-M et RISC-V, offrant une isolation sandbox du noyau, des pilotes et des applications. OpenSK est pr\u00e9sent\u00e9 sous la forme d'un applet pour TockOS. En plus d'OpenSK, Google a \u00e9galement pr\u00e9par\u00e9 pour TockOS une version optimis\u00e9e pour les m\u00e9moires Flash (NVMC) stockage<\/a><\/noindex> et un ensemble patches<\/a><\/noindex>. Le noyau et les pilotes dans TockOS, tout comme OpenSK, sont \u00e9crits en Rust.<\/p>\n

\r\n \"Lire\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Source : opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 OpenSK, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0442\u043e\u043a\u0435\u043d\u043e\u0432, \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0445 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430\u043c FIDO U2F \u0438 FIDO2. \u041f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c OpenSK \u0442\u043e\u043a\u0435\u043d\u044b \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0442\u044c\u0441\u044f \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u0432 \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u043e\u0439 \u0438 \u0434\u0432\u0443\u0445\u0444\u0430\u043a\u0442\u043e\u0440\u043d\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0444\u0438\u0437\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f. \u041f\u0440\u043e\u0435\u043a\u0442 \u043d\u0430\u043f\u0438\u0441\u0430\u043d \u043d\u0430 \u044f\u0437\u044b\u043a\u0435 Rust \u0438 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e\u0434 \u043b\u0438\u0446\u0435\u043d\u0437\u0438\u0435\u0439 Apache 2.0. OpenSK \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":40629,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-40628","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Google a introduit la pile ouverte OpenSK pour la cr\u00e9ation de jetons cryptographiques | ProHoster","description":"La soci\u00e9t\u00e9 Google a pr\u00e9sent\u00e9 la plateforme OpenSK, permettant de cr\u00e9er des firmwares pour.","canonical_url":"https:\/\/prohoster.info\/fr\/blog\/google-predstavil-otkrytyj-stek-opensk-dlya-sozdaniya-kriptograficheskih-tokenov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"fr_FR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0439 \u0441\u0442\u0435\u043a OpenSK \u0434\u043b\u044f \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0442\u043e\u043a\u0435\u043d\u043e\u0432 | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Google \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0443 OpenSK, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 \u0434\u043b\u044f.","og:url":"https:\/\/prohoster.info\/fr\/blog\/google-predstavil-otkrytyj-stek-opensk-dlya-sozdaniya-kriptograficheskih-tokenov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-02-02T12:06:08+00:00","article:modified_time":"2020-02-02T12:06:08+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"40628","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:34:23","updated":"2022-10-02 17:34:48","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/40628","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/comments?post=40628"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/posts\/40628\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media\/40629"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/media?parent=40628"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/categories?post=40628"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/fr\/wp-json\/wp\/v2\/tags?post=40628"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}