Cov tswv cuab ntawm Pawg Neeg Saib Xyuas Kev Ruaj Ntseg Hauv Google tau tshaj tawm cov tsev qiv ntawv qhib, Paranoid, tsim los txheeb xyuas cov khoom tsis muaj zog cryptographic, xws li cov yuam sij rau pej xeem thiab cov npe digital, tsim hauv cov khoom siv tsis zoo (HSM) thiab software systems. Cov cai tau sau hauv Python thiab muab faib raws li Apache 2.0 daim ntawv tso cai.
Qhov project yuav muaj txiaj ntsig zoo rau kev ntsuas tsis ncaj rau kev siv cov algorithms thiab cov tsev qiv ntawv uas paub qhov khoob thiab qhov tsis zoo uas cuam tshuam rau kev ntseeg tau ntawm cov yuam sij tsim thiab kos npe digital yog tias cov khoom cuav raug txheeb xyuas yog tsim los ntawm cov khoom siv uas tsis tuaj yeem txheeb xyuas lossis los ntawm cov khoom kaw uas sawv cev rau ib qho. lub thawv dub. Lub tsev qiv ntawv kuj tseem tuaj yeem txheeb xyuas cov lej pseudorandom rau qhov kev ntseeg siab ntawm lawv lub tshuab hluav taws xob, thiab los ntawm ntau cov khoom pov thawj, txheeb xyuas cov teeb meem tsis paub yav dhau los uas tshwm sim los ntawm kev ua haujlwm yuam kev lossis kev siv cov tshuab hluav taws xob tsis txaus ntseeg pseudorandom.
Thaum siv lub tsev qiv ntawv uas tau thov los xyuas cov ntsiab lus ntawm CT (Certificate Transparency) pej xeem log, uas suav nrog cov ntaub ntawv hais txog ntau dua 7 billion daim ntawv pov thawj, tsis muaj teeb meem pej xeem cov yuam sij raws li elliptic curves (EC) thiab cov kos npe digital raws li ECDSA algorithm tau pom. , tab sis cov yuam sij muaj teeb meem tau pom los ntawm kev ua raws li RSA algorithm. Tshwj xeeb, 3586 tus yuam sij tsis ntseeg tau raug txheeb xyuas uas tau tsim los ntawm cov cai nrog qhov tsis muaj qhov tsis zoo CVE-2008-0166 hauv OpenSSL pob rau Debian, 2533 cov yuam sij cuam tshuam nrog CVE-2017-15361 qhov tsis zoo hauv Infineon lub tsev qiv ntawv, thiab 1860, Qhov tsis zoo cuam tshuam nrog kev tshawb nrhiav qhov loj tshaj plaws divisor (GCD). Cov ntaub ntawv hais txog cov ntawv pov thawj muaj teeb meem uas tseem siv tau raug xa mus rau cov ntawv pov thawj rau lawv qhov kev tshem tawm.
Tau qhov twg los: opennet.ru