🥇 Mafi kyawun aji: tarihin ma'aunin ɓoye AES

Tun daga Mayu 2020, tallace-tallace na hukuma na WD My Book na waje mai wuyar tafiyarwa wanda ke tallafawa ɓoye kayan aikin AES tare da maɓallin 256-bit ya fara a Rasha. Saboda hane-hane na doka, a baya irin waɗannan na'urorin ana iya siyan su ne kawai a cikin shagunan lantarki na kan layi na ƙasashen waje ko kuma a kasuwar "launin toka", amma yanzu kowa zai iya samun kariya mai kariya tare da garantin shekaru 3 na mallakar mallaka daga Western Digital. Don girmama wannan gagarumin taron, mun yanke shawarar yin ɗan gajeren balaguron balaguro cikin tarihi kuma mu gano yadda Advanced Encryption Standard ya bayyana da kuma dalilin da yasa yake da kyau idan aka kwatanta da gasa mafita.

Na dogon lokaci, ma'auni na hukuma don boye-boye tamani a cikin Amurka shine DES ( Standard Encryption Standard), wanda IBM ya haɓaka kuma an haɗa shi cikin jerin ƙa'idodin sarrafa bayanan tarayya a 1977 (FIPS 46-3). Algorithm ya dogara ne akan ci gaban da aka samu yayin lambar aikin bincike mai suna Lucifer. Lokacin da a ranar 15 ga Mayu, 1973, Ofishin Ma'auni na Ƙasar Amurka ya ba da sanarwar gasa don ƙirƙirar ƙa'idar ɓoyewa ga hukumomin gwamnati, kamfanin na Amurka ya shiga tseren ɓoye tare da nau'i na uku na Lucifer, wanda ya yi amfani da hanyar sadarwar Feitel da aka sabunta. Kuma tare da sauran masu fafatawa, abin ya faskara: babu ko ɗaya daga cikin algorithms ɗin da aka ƙaddamar a gasar ta farko da ta cika ƙaƙƙarfan ƙa'idodin da masana NBS suka tsara.

Tabbas, IBM ba zai iya karɓar shan kashi kawai ba: lokacin da aka sake farawa gasar a ranar 27 ga Agusta, 1974, kamfani na Amurka ya sake gabatar da aikace-aikacen, yana gabatar da ingantaccen sigar Lucifer. A wannan lokacin juri ba shi da koke-koke: bayan gudanar da aikin da ya dace akan kurakuran, IBM ya sami nasarar kawar da duk gazawar, don haka babu abin da za a yi gunaguni. Bayan da ya ci nasara a zaɓen ƙasa, Lucifer ya canza sunansa zuwa DES kuma an buga shi a cikin Rijistar Tarayya a ranar 17 ga Maris, 1975.

Koyaya, yayin taron tattaunawa na jama'a da aka shirya a cikin 1976 don tattauna sabon ma'auni na sirri, ƙwararrun al'ummar DES sun soki sosai. Dalilin haka shi ne canje-canjen da ƙwararrun NSA suka yi wa algorithm: musamman, an rage tsawon maɓalli zuwa 56 ragowa (da farko Lucifer yana goyan bayan aiki tare da maɓallan 64- da 128-bit), kuma an canza ma'anar tubalan permutation. . A cewar masu rubutun ra'ayin yanar gizo, "inganta" ba su da ma'ana kuma kawai abin da Hukumar Tsaro ta Kasa ke ƙoƙari don aiwatar da gyare-gyaren shine samun damar duba takardun da aka ɓoye cikin 'yanci.

Dangane da wadannan zarge-zargen, an kafa wata hukuma ta musamman a karkashin Majalisar Dattawan Amurka, wanda manufarsa ita ce tabbatar da sahihancin ayyukan hukumar ta NSA. A cikin 1978, an buga rahoto bayan binciken, wanda ya bayyana kamar haka:

Wakilan NSA sun shiga cikin kammalawar DES kawai a kaikaice, kuma gudunmawarsu ta shafi canje-canje ne kawai a cikin aiki na tubalan permutation;
sigar karshe ta DES ta juya ta zama mafi juriya ga hacking da bincike na sirri fiye da na asali, don haka canje-canjen sun cancanta;
Maɓalli na tsawon 56 bits ya fi isa ga yawancin aikace-aikacen, saboda karya irin wannan sifa zai buƙaci babban kwamfuta wanda ke kashe akalla dubun miliyoyin daloli, kuma tun da maharan na yau da kullun har ma da ƙwararrun hackers ba su da irin wannan albarkatun. babu abin damuwa.

An tabbatar da sakamakon da hukumar ta samu a wani bangare a cikin 1990, lokacin da masu rubutun ra'ayin yanar gizo na Isra'ila Eli Biham da Adi Shamir, suna aiki akan manufar cryptanalysis daban-daban, sun gudanar da babban binciken block algorithms, gami da DES. Masanan kimiyyar sun kammala da cewa sabon tsarin haɓakawa ya fi juriya ga hare-hare fiye da na asali, wanda ke nufin cewa NSA a zahiri ta taimaka toshe ramuka da yawa a cikin algorithm.

Adi Shamir

A lokaci guda kuma, ƙayyadadden tsayin maɓalli ya zama matsala, kuma yana da matukar mahimmanci a wancan, wanda aka tabbatar a cikin 1998 mai gamsarwa ta ƙungiyar jama'a ta Electronic Frontier Foundation (EFF) a matsayin wani ɓangare na gwajin DES Challenge II. wanda aka gudanar a ƙarƙashin inuwar RSA Laboratory. An gina babban kwamfuta na musamman don fasa DES, mai suna EFF DES Cracker, wanda John Gilmore, wanda ya kafa EFF kuma darektan aikin Kalubale na DES, da Paul Kocher, wanda ya kafa bincike na Cryptography suka kirkira.

Mai sarrafa EFF DES Cracker

Tsarin da suka ɓullo da shi ya sami nasarar samun mabuɗin samfurin rufaffiyar ta amfani da ƙarfi a cikin sa'o'i 56 kawai, wato, cikin ƙasa da kwanaki uku. Don yin wannan, DES Cracker yana buƙatar bincika kusan kashi ɗaya cikin huɗu na duk haɗuwa mai yuwuwa, wanda ke nufin cewa ko da a cikin mafi ƙarancin yanayi, hacking zai ɗauki kimanin awanni 224, wato, ba fiye da kwanaki 10 ba. A sa'i daya kuma, kudin da babban kwamfuta ya yi la'akari da kudaden da aka kashe wajen tsara shi, dala dubu 250 ne kawai. Ba shi da wuya a yi tsammani cewa a yau yana da sauƙi kuma mai rahusa don fashe irin wannan lambar: ba wai kawai kayan aikin sun yi ƙarfi sosai ba, har ma da haɓaka fasahar Intanet, mai gwanin kwamfuta ba dole ba ne ya saya ko hayar kayan aiki masu mahimmanci - ya isa sosai don ƙirƙirar botnet na PC ɗin da ke kamuwa da cutar.

Wannan gwaji ya nuna a fili yadda rashin aiki na DES yake. Kuma tun lokacin da aka yi amfani da algorithm a kusan kashi 50% na mafita a fagen ɓoye bayanan (bisa ga kimanta EFF guda ɗaya), tambayar neman madadin ta zama mafi mahimmanci fiye da kowane lokaci.

Sabbin kalubale - sabuwar gasa

Don yin gaskiya, ya kamata a ce neman wanda zai maye gurbin Standard Encryption Standard ya fara kusan lokaci guda tare da shirye-shiryen EFF DES Cracker: Cibiyar Matsayi da Fasaha ta Amurka (NIST) a baya a cikin 1997 ta sanar da ƙaddamar da wani tsari. gasar boye-boye algorithm tsara don gano sabon "ma'aunin zinare" don tsaro na crypto. Kuma idan a zamanin da, an gudanar da irin wannan taron na musamman "don mutanenmu," to, tare da la'akari da rashin nasara na shekaru 30 da suka gabata, NIST ta yanke shawarar bude gasar gaba daya: kowane kamfani da kowane mutum zai iya shiga cikin gasar. shi, ba tare da la’akari da wuri ko ɗan ƙasa ba.

Wannan tsarin ya baratar da kansa har ma a mataki na zabar masu neman: daga cikin marubutan da suka nemi shiga gasar Advanced Encryption Standard akwai shahararrun masu binciken kiredit na duniya (Ross Anderson, Eli Biham, Lars Knudsen) da ƙananan kamfanonin IT da suka kware a cybersecurity (Counterpane). , da manyan kamfanoni (German Deutsche Telekom), da cibiyoyin ilimi (KU Leuven, Belgium), da kuma masu farawa da ƙananan kamfanoni waɗanda kaɗan suka ji labarin a wajen ƙasashensu (misali, Tecnologia Apropriada Internacional daga Costa Rica).

Abin sha'awa, wannan lokacin NIST ta amince da buƙatun asali guda biyu kawai don shiga algorithms:

toshe bayanan dole ne ya kasance yana da ƙayyadaddun girman 128 bits;
algorithm dole ne ya goyi bayan aƙalla maɓalli uku: 128, 192 da 256 bits.

Samun irin wannan sakamakon ya kasance mai sauƙi, amma, kamar yadda suke faɗa, shaidan yana cikin cikakkun bayanai: akwai wasu buƙatun sakandare da yawa, kuma ya fi wuya a cika su. A halin yanzu, bisa tushensu ne masu bitar NIST suka zaɓi ƴan takarar. Ga sharuddan da masu neman nasara suka cika:

iya jure duk wani harin cryptanalytic da aka sani a lokacin gasar, gami da hare-hare ta hanyar tashoshi na uku;
rashin maɓallan ɓoye masu rauni da daidai daidai (daidai yana nufin waɗannan maɓallan waɗanda, ko da yake suna da bambance-bambance masu mahimmanci daga juna, suna haifar da sifa iri ɗaya);
Gudun ɓoyewa yana da kwanciyar hankali kuma kusan iri ɗaya akan duk dandamali na yanzu (daga 8 zuwa 64-bit);
ingantawa don tsarin multiprocessor, goyon baya don daidaitawa na ayyuka;
ƙananan buƙatun don adadin RAM;
babu hani don amfani a daidaitattun yanayi (a matsayin tushen gina ayyukan zanta, PRNGs, da sauransu);
Tsarin algorithm dole ne ya zama mai ma'ana kuma mai sauƙin fahimta.

Batu na ƙarshe na iya zama baƙon abu, amma idan kun yi tunani game da shi, yana da ma'ana, saboda ingantaccen tsarin algorithm yana da sauƙin yin nazari, kuma yana da wahala a ɓoye "alamar" a ciki, tare da taimakon wanda mai haɓakawa zai iya samun damar rufaffen bayanai mara iyaka.

Karɓar aikace-aikacen ga Advanced Encryption Standard gasar ya ɗauki shekara ɗaya da rabi. Jimlar algorithms 15 sun shiga ciki:

CAST-256, wanda kamfanin Kanada Entrust Technologies ya haɓaka bisa CAST-128, wanda Carlisle Adams da Stafford Tavares suka kirkira;
Crypton, wanda masanin kirista Chae Hoon Lim ya kirkira daga kamfanin tsaro na yanar gizo na Koriya ta Kudu Future Systems;
DEAL, wanda masanin lissafin Danish Lars Knudsen ya gabatar da manufarsa, kuma daga baya Richard Outerbridge ya kirkiro ra'ayoyinsa, wanda ya nemi shiga gasar;
DFC, aikin haɗin gwiwa na Makarantar Ilimi ta Paris, Cibiyar Nazarin Kimiyya ta Faransa (CNRS) da kamfanin sadarwa na Faransa Telecom;
E2, wanda aka haɓaka a ƙarƙashin kulawar babban kamfanin sadarwa na Japan, Nippon Telegraph da Telephone;
FROG, ƙwararren kamfanin Costa Rica Tecnologia Apropriada Internacional;
HPC, wanda Ba'amurke masanin kiredit kuma masanin lissafi Richard Schreppel daga Jami'ar Arizona ya kirkiro;
LOKI97, wanda ƙwararrun masu rubutun ra'ayin yanar gizo na Australiya Lawrence Brown da Jennifer Seberry suka kirkira;
Magenta, wanda Michael Jacobson da Klaus Huber suka kirkira don kamfanin sadarwa na Jamus Deutsche Telekom AG;
MARS daga IBM, a cikin halittar da Don Coppersmith, daya daga cikin marubutan Lucifer, ya shiga;
RC6, wanda Ron Rivest, Matt Robshaw da Ray Sydney suka rubuta musamman don gasar AES;
Rijndael, wanda Vincent Raymen da Johan Damen na Jami'ar Katolika ta Leuven suka kirkira;
SAFER +, wanda kamfanin Cylink na Californian ya haɓaka tare da Cibiyar Nazarin Kimiyya ta Jamhuriyar Armeniya;
Maciji, wanda Ross Anderson, Eli Beham da Lars Knudsen suka kirkiro;
Twofish, wanda ƙungiyar bincike ta Bruce Schneier ta haɓaka bisa ga Blowfish cryptographic algorithm wanda Bruce ya gabatar a baya a 1993.

Dangane da sakamakon zagaye na farko, an tantance 5 na karshe da suka hada da maciji, Twofish, MARS, RC6 da Rijndael. Membobin juri sun sami aibi a kusan kowane ɗayan lissafin algorithms, sai ɗaya. Wanene ya yi nasara? Bari mu ƙara ƙaddamarwa kaɗan kuma mu fara la'akari da babban amfani da rashin amfani na kowane mafita da aka jera.

MARS

A cikin yanayin "allahn yaki", masana sun lura da ainihin hanyar ɓoye bayanan da ɓoye bayanan, amma wannan shine inda aka iyakance amfaninsa. Algorithm na IBM ya kasance abin mamaki mai tsananin yunwar ƙarfi, yana mai da shi bai dace da aiki a cikin mahalli masu takurawa albarkatu ba. Akwai kuma matsaloli tare da daidaita lissafin. Don yin aiki yadda ya kamata, MARS na buƙatar tallafin kayan masarufi don haɓaka 32-bit da jujjuya-bit mai canzawa, wanda ya sake sanya iyakancewa akan jerin dandamali masu tallafi.

MARS kuma ya zama mai rauni ga lokaci da hare-haren wutar lantarki, yana da matsaloli tare da faɗaɗa maɓallin tashi sama, kuma rikiɗewar sa ya sa ya zama da wahala a bincika gine-ginen kuma ya haifar da ƙarin matsaloli a matakin aiwatarwa. A takaice, idan aka kwatanta da sauran 'yan wasan karshe, MARS ya yi kama da ainihin baƙon waje.

RC6

Algorithm ya gaji wasu sauye-sauye daga magabacinsa, RC5, wanda aka yi bincike sosai a baya, wanda, tare da tsari mai sauƙi da gani, ya sa ya zama cikakke ga masana kuma ya kawar da kasancewar "alamomi." Bugu da ƙari, RC6 ya nuna saurin sarrafa bayanan rikodin akan dandamali na 32-bit, kuma an aiwatar da hanyoyin ɓoyewa da ɓoyewa gaba ɗaya.

Koyaya, algorithm yana da matsaloli iri ɗaya kamar na MARS da aka ambata a sama: akwai rauni ga hare-haren tashoshi na gefe, dogaron aiki akan tallafi don ayyukan 32-bit, da kuma matsaloli tare da lissafin layi ɗaya, faɗaɗa maɓalli, da buƙatu akan albarkatun kayan masarufi. . Dangane da haka, bai dace da matsayin mai nasara ba.

Kifi biyu

Twofish ya juya ya zama mai saurin gaske kuma an inganta shi sosai don aiki akan na'urori marasa ƙarfi, ya yi kyakkyawan aiki na faɗaɗa maɓalli kuma ya ba da zaɓuɓɓukan aiwatarwa da yawa, wanda ya ba da damar daidaita shi a hankali zuwa takamaiman ayyuka. A lokaci guda, "kifi biyu" ya juya ya zama mai rauni ga hare-hare ta hanyar tashoshi na gefe (musamman, dangane da lokaci da amfani da wutar lantarki), ba su da abokantaka na musamman tare da tsarin multiprocessor kuma sun kasance masu rikitarwa, wanda, ta hanya. , kuma ya shafi saurin fadada maɓalli.

Serpent

Algorithm yana da tsari mai sauƙi kuma mai sauƙin fahimta, wanda ya sauƙaƙe sauƙaƙe bincikensa, baya buƙatar musamman akan ƙarfin dandamalin kayan masarufi, yana da tallafi don faɗaɗa maɓallai akan tashi, kuma yana da sauƙin gyarawa, wanda ya sa ya fice daga cikin sa. 'yan adawa. Duk da wannan, maciji ya kasance, bisa ƙa'ida, ya fi jinkiri a cikin 'yan wasan ƙarshe, haka ma, hanyoyin rufaffen asiri da ɓata bayanai a cikinsa sun bambanta sosai kuma suna buƙatar hanyoyin aiwatarwa daban-daban.

Rijndael

Rijndael ya kasance yana kusa da manufa: algorithm cikakke ya cika buƙatun NIST, alhalin ba ƙasa da ƙasa ba, kuma dangane da jimillar halaye, wanda ya fi na masu fafatawa. Reindal yana da rauni guda biyu ne kawai: rashin ƙarfi ga hare-haren amfani da makamashi akan hanyar faɗaɗa maɓalli, wanda ke da takamaiman yanayi, da wasu matsaloli tare da faɗaɗa maɓallin tashi sama (wannan tsarin yana aiki ba tare da hani ga masu fafatawa biyu kawai ba - maciji da kifi biyu) . Bugu da ƙari, a cewar masana, Reindal yana da ɗan ƙaramin yanki na ƙarfin rubutun kalmomi fiye da maciji, Twofish da MARS, wanda, duk da haka, ya fi ramawa ta hanyar juriya ga yawancin nau'o'in hare-haren tashoshi da yawa. na zaɓuɓɓukan aiwatarwa.

WD My Book na waje yana goyan bayan ɓoyayyen kayan aikin AES-256

Godiya ga haɗewar babban abin dogaro da aiki, Advanced Encryption Standard cikin sauri ya sami karɓuwa a duniya cikin sauri, ya zama ɗaya daga cikin shahararrun algorithms ɓoyayyen simmetric a cikin duniya kuma an haɗa shi cikin ɗakunan karatu da yawa (OpenSSL, GnuTLS, Linux's Crypto API, da sauransu). AES yanzu ana amfani dashi sosai a cikin masana'antu da aikace-aikacen mabukaci, kuma ana tallafawa a cikin na'urori iri-iri. Musamman, ana amfani da boye-boye na kayan aikin AES-256 a cikin Western Digital's My Book iyali na abubuwan tafiyarwa na waje don tabbatar da kariyar bayanan da aka adana. Bari mu dubi waɗannan na'urori sosai.

Layin WD My Book na faifan faifai na tebur ya ƙunshi nau'ikan nau'ikan iyakoki guda shida: 4, 6, 8, 10, 12 da 14 terabytes, yana ba ku damar zaɓar na'urar da ta dace da bukatunku. Ta hanyar tsoho, HDDs na waje suna amfani da tsarin fayil na exFAT, wanda ke tabbatar da dacewa tare da kewayon tsarin aiki, gami da Microsoft Windows 7, 8, 8.1 da 10, da kuma Apple macOS version 10.13 (High Sierra) da mafi girma. Masu amfani da Linux OS suna da damar hawa rumbun kwamfutarka ta amfani da direban exfat-nofuse.

Littafina yana haɗi zuwa kwamfutarka ta amfani da kebul na USB 3.0 mai sauri, wanda ya dace da baya tare da USB 2.0. A gefe guda, wannan yana ba ka damar canja wurin fayiloli a cikin mafi girman saurin da zai yiwu, saboda USB SuperSpeed bandwidth shine 5 Gbps (wato 640 MB / s), wanda ya fi isa. A lokaci guda, fasalin dacewa na baya yana tabbatar da tallafi ga kusan kowace na'ura da aka saki a cikin shekaru 10 da suka gabata.

Kodayake Littafin Nawa baya buƙatar ƙarin shigarwar software godiya ga fasahar Plug da Play wanda ke ganowa da daidaita na'urori ta atomatik, har yanzu muna ba da shawarar yin amfani da fakitin software na WD Discovery na mallakar mallaka wanda ya zo tare da kowace na'ura.

Saitin ya ƙunshi aikace-aikace masu zuwa:

WD Drive Utilities

Shirin yana ba ku damar samun bayanai na yau da kullun game da halin yanzu na tuƙi bisa bayanan SMART kuma bincika rumbun kwamfutarka don ɓangarori marasa kyau. Bugu da kari, tare da taimakon Drive Utilities, za ka iya sauri halakar da duk bayanan da aka ajiye a kan Littafina: a wannan yanayin, ba kawai za a share fayiloli ba, amma kuma gaba daya sake rubuta sau da yawa, ta yadda ba zai yiwu ba. don mayar da su bayan an kammala aikin.

WD Ajiyayyen

Yin amfani da wannan kayan aiki, zaku iya saita ma'ajin ajiya bisa ƙayyadadden jadawali. Yana da kyau a faɗi cewa WD Ajiyayyen yana goyan bayan aiki tare da Google Drive da Dropbox, yayin da yake ba ku damar zaɓar kowane haɗin haɗin tushen-wuri yayin ƙirƙirar madadin. Don haka, zaku iya saita canja wurin bayanai ta atomatik daga Littafina zuwa gajimare ko shigo da mahimman fayiloli da manyan fayiloli daga ayyukan da aka lissafa zuwa duka rumbun kwamfutarka na waje da na'ura na gida. Bugu da kari, yana yiwuwa a yi aiki tare da asusun Facebook ɗin ku, wanda ke ba ku damar ƙirƙirar kwafin hotuna da bidiyo ta atomatik daga bayanan martabar ku.

WD Tsaro

Tare da taimakon wannan kayan aiki ne za ku iya ƙuntata hanyar shiga tuƙi tare da kalmar sirri da sarrafa ɓoyayyen bayanai. Abin da kawai ake buƙata don wannan shine saka kalmar sirri (mafi girman tsayinsa zai iya kaiwa haruffa 25), bayan haka duk bayanan da ke cikin diski za a ɓoye, kuma waɗanda suka san kalmar wucewa za su iya samun damar adana fayilolin. Don ƙarin dacewa, WD Security yana ba ku damar ƙirƙirar jerin amintattun na'urori waɗanda, idan an haɗa su, za su buɗe Littafina ta atomatik.

Muna jaddada cewa WD Security kawai yana ba da ingantaccen mahalli na gani don sarrafa kariya ta sirri, yayin da ɓoyayyen bayanai ke aiwatar da ita ta hanyar tuƙi ta waje da kanta a matakin kayan aiki. Wannan tsarin yana ba da fa'idodi masu yawa masu mahimmanci, wato:

na'ura mai bazuwar lambar bazuwar hardware, maimakon PRNG, yana da alhakin ƙirƙirar maɓallan ɓoyewa, wanda ke taimakawa wajen cimma babban digiri na entropy da ƙara ƙarfin rubutun su;
a lokacin tsarin ɓoyewa da ɓoyewa, ba a zazzage maɓallan sirri a cikin RAM ɗin kwamfutar ba, kuma ba a ƙirƙira kwafin fayilolin da aka sarrafa na wucin gadi a cikin ɓoyayyun manyan fayiloli a kan injin tsarin, wanda ke taimakawa rage yuwuwar kutsawar su;
saurin sarrafa fayil baya dogara ta kowace hanya akan aikin na'urar abokin ciniki;
Bayan kunna kariyar, ɓoye fayil ɗin za a aiwatar ta atomatik, "a kan tashi", ba tare da buƙatar ƙarin ayyuka daga ɓangaren mai amfani ba.

Duk abubuwan da ke sama suna ba da garantin tsaro na bayanai kuma suna ba ku damar kusan kawar da yiwuwar satar bayanan sirri gaba ɗaya. Yin la'akari da ƙarin ƙarfin tuƙi, wannan ya sa Littafina ya zama mafi kyawun na'urorin ajiya masu kariya da ake samu a kasuwar Rasha.

source: www.habr.com

Mafi kyawu a cikin Aji: Tarihin Ma'aunin Rufe AES