{"id":184113,"date":"2026-11-03T23:41:02","date_gmt":"2026-11-03T21:41:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/kriptograficheskij-izolyator-itb-s-formalnym-dokazatelstvom-nadyozhnosti"},"modified":"2026-11-03T23:41:07","modified_gmt":"2026-11-03T21:41:07","slug":"itb-cryptographic-isolator-with-formally-proven-reliability","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability","title":{"rendered":"ITB kriptografski izolator s formalnim dokazom pouzdanosti","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Predstavljen je projekt ITB, koji razvija simetri\u010dni kriptografski izolator, namijenjen obavijanju standardnih pseudo- slu\u010dajnih funkcija (PRF) i he\u0161-primitiva (AES, BLAKE2\/3, Areion i drugih) u povezanu kombinatori\u010dku i topolo\u0161ku barijeru. Za razliku od klasi\u010dnih blokovnih i strujnih na\u010dina \u0161ifriranja, arhitektura ITB usmjerena je na strukturnu izolaciju unutarnjeg primitiva, spre\u010davaju\u0107i \u0161irenje diferencijalnih i linearnih karakteristika, algebrajske linearizacije, kao i izravnih kodiranja za rje\u0161avatelje SAT\/SMT i MILP kroz granice barijere. Kod je napisan na jeziku Go s niskonivelnim optimizacijama u asembleru za arhitekture x86_64 i ARM64 (Aarch64) te se distribuira pod licencom Apache 2.0.<\/p>\n<p>Obrada podataka u ITB-u podijeljena je na dva me\u0111usobno povezana nivoa (Interlocked Barrier), koja su kontrolirana s osam izoliranih klju\u010dnih sjeme (8-seed isolation) s lokalnom evolucijom klju\u010da putem lanca s izravnom povezano\u0161\u0107u (ChainHash). Na prvom nivou, barijer rangiranja (Rank Barrier) provodi klju\u010dnu kombinatori\u010dku permutaciju svakog 48-bitnog bloka (ili 168-bitnog bloka za 512-bitne primitive), raspore\u0111uju\u0107i bitove obi\u010dnog teksta u tri neovisna podru\u010dja na temelju dvostupanjske kombinatorike prema njegovom indeksom (prostor uravnote\u017eenih particija C(48, 16) * C(32, 16) iznosi otprilike 2^70.20, a u 168-bitnom re\u017eimu C(168, 56) * C(112, 56) \u2014 otprilike 2^258.60). Na drugom nivou, piksel barijera (Pixel Barrier) mapira podatke na mre\u017eu od 8-bajtnih elemenata (8 kanala s 7 bita podataka i 1 bit pseudo slu\u010dajnog \u0161uma u svakom bajtu) uz pixel-by-pixel klju\u010dni 7-bitni cikli\u010dni pomak, maskiranje 7-bitnih kanala i odabir pozicije bita \u0161uma.<\/p>\n<p>Glavne zna\u010dajke projekta:<\/p>\n<ul>\n<li class=\"l\"> Eksperimentalna provjera izolacijskih svojstava na unaprijed poznatim nekryptografskim funkcijama (stres-test sa slabim primitivima). U sastav repozitorija uklju\u010den je laboratorijski \u0161tand, koji unosi obi\u010dnu he\u0161-funkciju FNV-1a unutar barijere. Zbog nelinerarnog kombinacijskog rangiranja, raspodjele bajtova po granicama 7-bitnih kanala (GCD(7, 8) = 1) i injekcije bitova \u0161uma u svaki bajt, prakti\u010dna obrada ili izgradnja rje\u0161ive SAT\/SMT-modela prema otvorenim i \u0161ifriranim tekstovima blokira se ve\u0107 u fazi formuliranja sustava jednad\u017ebi.\n<li class=\"l\"> Automatski provjerena formalna verifikacija na jeziku Lean 4. Sve 12 osnovnih matemati\u010dkih, kombinatornih i bit-vektor teorema konstrukcije (kao i prakti\u010dna shema hibridne koordinacije klju\u010deva 3-to-8 iz tri neovisna KEM kanala u APPS.md), opisani u dokumentu PROOFS.md, potpuno su dokazani u Lean 4 bez kori\u0161tenja aksioma i propusta u dokazima.\n<li class=\"l\"> Integrirani alati za kriptoanaliti\u010dko testiranje, uklju\u010duju\u0107i automatizirane provjere: statisti\u010dke baterije testova, ocjenu algebarske stepeni i nelinearnosti, provjeru izolacije sjeme pri odlaganju pozicija \u0161uma putem CCA-orakula i tra\u017eenje ranjivosti uz pomo\u0107 vanjskih rje\u0161enja.\n<li class=\"l\"> Dva na\u010dina rada: standardni authentificirani na\u010din (AEAD po shemi MAC-Inside-Encrypt, gdje se umetanje provjerava i \u0161ifrira unutar kontejnera) i na\u010din plauzibilne negacije (Plausible Deniability) temeljen na bezuvjetnom kodiranju COBS, pri \u010demu de\u0161ifriranje proizvoljnim pogre\u0161nim klju\u010dem daje sintakti\u010dki ispravne podatke bez pokazatelja gre\u0161ke.\n<li class=\"l\"> Uparen s brzim modernim PRF (AES, BLAKE2\/3, Areion), konstrukcija je pogodna za za\u0161ti\u0107enu razmjenu poruka, pohranu datoteka i mre\u017ene <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/hr\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\">VPN<\/a>-tuneli (prilikom grupiranja paketa tro\u0161kovi formata iznose otprilike 15%). Za za\u0161titu od napada putem vanjskih kanala, jezgre se izvr\u0161avaju u konstantnom vremenu (constant-time) s potpunim prisilnim \u010di\u0161\u0107enjem stakleni\u010dnih okvira i procesorskih registara (GPR, XMM\/YMM\/ZMM, NEON) nakon poziva.\n<li class=\"l\"> Za arhitekturu x86_64 implementirana su assembler jezgra koriste\u0107i BMI2 instrukcije (PEXT\/PDEP), AES-NI, VAES, AVX2 i AVX-512, dok je za ARM64 (Aarch64) - bazirano na NEON, Crypto Extensions i SVE2 (s prenosivim fallback-om na \u010dist Go). Iznad jedinstvenog C ABI (libitb3) pripremljene su obloge za 33 programska jezika.\n<\/ul>\n<p>Izvor: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=66610\">opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 ITB, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u044b\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 (PRF) \u0438 \u0445\u044d\u0448-\u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432 (AES, BLAKE2\/3, Areion \u0438 \u0434\u0440\u0443\u0433\u0438\u0445) \u0432 \u0441\u0446\u0435\u043f\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0442\u043e\u0440\u043d\u044b\u0439 \u0438 \u0442\u043e\u043f\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0440\u044c\u0435\u0440. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u043b\u043e\u0447\u043d\u044b\u0445 \u0438 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u044b\u0445 \u0440\u0435\u0436\u0438\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 ITB \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u0443\u044e \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u0430, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0434\u0438\u0444\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0438 \u043b\u0438\u043d\u0435\u0439\u043d\u044b\u0445 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a, \u0430\u043b\u0433\u0435\u0431\u0440\u0430\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043b\u0438\u043d\u0435\u0430\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u044f\u043c\u044b\u0445 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184113","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 ITB, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u044b\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 (PRF) \u0438 \u0445\u044d\u0448-\u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432 (AES, BLAKE2\/3, Areion \u0438 \u0434\u0440\u0443\u0433\u0438\u0445) \u0432 \u0441\u0446\u0435\u043f\u043b\u0435\u043d\u043d\u044b\u0439.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hr\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"hr_HR\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440 ITB \u0441 \u0444\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 ITB, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u044b\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 (PRF) \u0438 \u0445\u044d\u0448-\u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432 (AES, BLAKE2\/3, Areion \u0438 \u0434\u0440\u0443\u0433\u0438\u0445) \u0432 \u0441\u0446\u0435\u043f\u043b\u0435\u043d\u043d\u044b\u0439.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hr\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-11-03T21:41:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-11-03T21:41:07+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Kriptografski izolator ITB s formalnim dokazom pouzdanosti | ProHoster","description":"Predstavljen je projekt ITB, koji razvija simetri\u010dni kriptografski izolator, namijenjen omotavanju standardnih pseudogeneratora slu\u010dajnih funkcija (PRF) i hash-primitiva (AES, BLAKE2\/3, Areion i drugih) u povezano.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440 ITB \u0441 \u0444\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 ITB, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u044b\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 (PRF) \u0438 \u0445\u044d\u0448-\u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432 (AES, BLAKE2\/3, Areion \u0438 \u0434\u0440\u0443\u0433\u0438\u0445) \u0432 \u0441\u0446\u0435\u043f\u043b\u0435\u043d\u043d\u044b\u0439.","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-11-03T21:41:02+00:00","article:modified_time":"2026-11-03T21:41:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/184113","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=184113"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/184113\/revisions"}],"predecessor-version":[{"id":184114,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/184113\/revisions\/184114"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=184113"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=184113"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=184113"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}