{"id":100468,"date":"2021-06-08T10:22:35","date_gmt":"2021-06-08T08:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej"},"modified":"2021-06-08T10:22:35","modified_gmt":"2021-06-08T08:22:35","slug":"v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","title":{"rendered":"U Fedora 35 planira se prelazak na yescrypt za he\u0161iranje lozinki","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Za implementaciju u Fedora 35 planira se prelazak na kori\u0161tenje sheme he\u0161iranja lozinki yescrypt. Promjena jo\u0161 nije razmatrana od strane FESCo (Fedora Engineering Steering Committee), koji je odgovoran za tehni\u010dki dio razvoja Fedora distribucije. U slu\u010daju odobrenja promjene, od Fedora 35 lozinke za nove korisnike u \/etc\/shadow bit \u0107e po defaultu he\u0161irane pomo\u0107u yescrypt-a. Podr\u0161ka za stare he\u0161eve, stvorene na osnovu ranije kori\u0161tenog algoritma sha512crypt, bit \u0107e zadr\u017eana i dostupna kao opcija. Od distribucija koje su ve\u0107 pre\u0161le na yescrypt mo\u017ee se napomenuti ALT Linux, Debian Testing i Kali Linux. <\/p>\n

Yescrypt pro\u0161iruje mogu\u0107nosti klasi\u010dnog scrypt-a podr\u0161kom za kori\u0161tenje shema s velikom potro\u0161njom operativne memorije i smanjuje u\u010dinkovitost napada koji koriste GPU, FPGA i specijalizirane \u010dipove. Sigurnost Yescrypta osigurana je primjenom ve\u0107 provjerenih kriptografskih primitiva SHA-256, HMAC i PBKDF2. <\/p>\n

Me\u0111u nedostacima kori\u0161tenog algoritma sha512crypt u Fedori isti\u010de se u\u010dinkovitost samo pri veli\u010dini soli koja prelazi 90 bita (preporu\u010duje se najmanje 128 bita); podlo\u017enost DoS napadima putem stvaranja parazitskog optere\u0107enja na CPU prilikom he\u0161iranja dugih lozinki; podlo\u017enost napadu na temelju pasivnog analize vremena obrade he\u0161a; rad bez primjene kriptografske funkcije generiranja klju\u010deva (KDF, key derivation function).
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Fedora 35 \u043d\u0430\u043c\u0435\u0447\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0445\u0435\u043c\u044b \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 yescrypt. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043e \u043a\u043e\u043c\u0438\u0442\u0435\u0442\u043e\u043c FESCo (Fedora Engineering Steering Committee), \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u043c \u0437\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Fedora. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0434\u043e\u0431\u0440\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 Fedora 35 \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \/etc\/shadow \u0431\u0443\u0434\u0443\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0445\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 yescrypt. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0441\u0442\u0430\u0440\u044b\u0445 \u0445\u044d\u0448\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100468","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47U Fedora 35 planira se prelazak na yescrypt za he\u0161iranje lozinki | ProHoster","description":"Za implementaciju u Fedora 35 planira se prelazak na kori\u0161tenje sheme he\u0161iranja lozinki yescrypt.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Fedora 35 \u043d\u0430\u043c\u0435\u0447\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 yescrypt \u0434\u043b\u044f \u0445\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 | ProHoster","og:description":"\u0414\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Fedora 35 \u043d\u0430\u043c\u0435\u0447\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0445\u0435\u043c\u044b \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 yescrypt.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-08T08:22:35+00:00","article:modified_time":"2021-06-08T08:22:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100468","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-08 08:28:46","updated":"2022-10-01 09:33:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/100468","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=100468"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/100468\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=100468"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=100468"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=100468"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}