{"id":182443,"date":"2026-07-02T22:53:28","date_gmt":"2026-07-02T20:53:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim"},"modified":"2026-07-02T22:53:28","modified_gmt":"2026-07-02T20:53:29","slug":"problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim","title":{"rendered":"Problemi s brisanjem klju\u010deva \u0161ifriranja diska iz RAM-a prilikom prelaska Linuxa u stanje mirovanja","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Tijekom portiranja alata cryptsetup-suspend za NixOS otkrivena je gre\u0161ka u sustavu diskovne enkripcije LUKS (Linux Unified Key Setup), zbog koje od jezgre Linux 6.9 (problemati\u010dna potvrda), objavljene u svibnju 2024. godine, \u010di\u0161\u0107enje enkripcijskih klju\u010deva iz radne memorije nije funkcioniralo prilikom prelaska sustava u stanje mirovanja. <\/p>\n

Alat cryptsetup-suspend koristi se u Debianu za automatsku blokadu LUKS particija prije ulaska u stanje mirovanja. Pretpostavlja se da \u0107e, u slu\u010daju kra\u0111e prijenosnog ra\u010dunala koje je preba\u010deno u stanje mirovanja, napada\u010d biti onemogu\u0107en u pristupu podacima, budu\u0107i da \u0107e za izlazak iz mirovanja biti potrebno unijeti lozinku za povratak pristupu \u0161ifriranim podacima. Zbog gre\u0161ke u Linux jezgru, nakon blokiranja LUKS particije naredbom \u00abcryptsetup luksSuspend\u00bb, klju\u010devi nisu uklonjeni iz radne memorije i ostali su vidljivi putem \/proc\/keys, \u0161to je napada\u010du omogu\u0107ilo da ih izvu\u010de, na primjer, metodom \u00abhladne ponovne naplate\u00bb, i da ih iskoristi za pristup podacima. <\/p>\n

Nedostatak \u010di\u0161\u0107enja klju\u010deva otkriven je tijekom debuggiranja stanja utrke, zbog kojeg su nastajali problemi s prelaskom u stanje mirovanja. Gre\u0161ka se pojavila nakon refaktoriranja u jezgri 6.9, tijekom kojeg su klju\u010devi vezani za pozivaju\u0107i niti i trebali su biti uklonjeni pri njegova zavr\u0161etka, no su\u0161tinski su ostali u memoriji. Za uklju\u010divanje u Linux jezgru predlo\u017een je jednostavni ispravak koji otklanja u\u010dinjenu gre\u0161ku. <\/p>\n

Ova ispravka nije prihva\u0107ena u jezgru, budu\u0107i da je u njoj otkriven nedostatak \u2014 ispravka djeluje samo za fizi\u010dke pohrane, ali ne radi za virtualne loop ure\u0111aje. Umjesto ispravka problema na strani jezgra, programeri alata cryptsetup su predlo\u017eili zaobilazno rje\u0161enje za \u010di\u0161\u0107enje klju\u010deva. Ova izmjena je ve\u0107 prihva\u0107ena i bit \u0107e uklju\u010dena u izdanje cryptsetup 2.8.7. <\/p>\n

Osim toga, za NixOS je stvorena vlastita implementacija skripti za blokiranje enkripcija diska prije prelaska u stanje mirovanja, koja koristi staru ispravku za jezgru koja nije prihva\u0107ena 2015. godine, a koja prisilno \u010disti klju\u010deve iz memorije prije prelaska u stanje mirovanja.
\n
Izvor: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u0445\u043e\u0434\u0435 \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f NixOS \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f cryptsetup-suspend \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u0438\u0441\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f LUKS (Linux Unified Key Setup), \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u044f\u0434\u0440\u0430 Linux 6.9 (\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0439 \u043a\u043e\u043c\u043c\u0438\u0442), \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u043e\u0433\u043e \u0432 \u043c\u0430\u0435 2024 \u0433\u043e\u0434\u0430, \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u043b\u0430 \u0440\u0430\u0431\u043e\u0442\u0430\u0442\u044c \u043e\u0447\u0438\u0441\u0442\u043a\u0430 \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438\u0437 \u043e\u043f\u0435\u0440\u0430\u0442\u0438\u0432\u043d\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u0438 \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0432 \u0436\u0434\u0443\u0449\u0438\u0439 \u0440\u0435\u0436\u0438\u043c. \u0418\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u0439 cryptsetup-suspend \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0432 Debian \u0434\u043b\u044f \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-182443","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Problemi s \u010distenjem klju\u010deva za \u0161ifriranje diska iz RAM-a pri prelasku Linuxa u stanje mirovanja | ProHoster","description":"Tijekom portiranja alata cryptsetup-suspend za NixOS otkrivena je gre\u0161ka u sustavu diskovne enkripcije LUKS (Linux Unified Key Setup), zbog koje od jezgre Linux 6.9 (problemati\u010dna potvrda).","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043e\u0447\u0438\u0441\u0442\u043a\u043e\u0439 \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u0438\u0441\u043a\u0430 \u0438\u0437 \u041e\u0417\u0423 \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0435 Linux \u0432 \u0436\u0434\u0443\u0449\u0438\u0439 \u0440\u0435\u0436\u0438\u043c | ProHoster","og:description":"\u0412 \u0445\u043e\u0434\u0435 \u043f\u043e\u0440\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f NixOS \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430\u0440\u0438\u044f cryptsetup-suspend \u0431\u044b\u043b\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u0448\u0438\u0431\u043a\u0430 \u0432 \u043f\u043e\u0434\u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0434\u0438\u0441\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f LUKS (Linux Unified Key Setup), \u0438\u0437-\u0437\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 \u044f\u0434\u0440\u0430 Linux 6.9 (\u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u0439 \u043a\u043e\u043c\u043c\u0438\u0442).","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/problemy-s-ochistkoj-klyuchej-shifrovaniya-diska-iz-ozu-pri-perehode-linux-v-zhdushhij-rezhim","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-07-02T20:53:29+00:00","article:modified_time":"2026-07-02T20:53:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"182443","title":null,"description":null,"keywords":null,"keyphrases":{"focus":[],"additional":[]},"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-08-05 12:22:10","updated":"2026-08-05 12:22:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/182443","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=182443"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/182443\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=182443"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=182443"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=182443"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}