{"id":112077,"date":"2023-12-08T15:10:14","date_gmt":"2023-12-08T13:10:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/avtor-gnupg-osnoval-librepgp-fork-standarta-openpgp"},"modified":"2023-12-08T15:10:14","modified_gmt":"2023-12-08T13:10:14","slug":"avtor-gnupg-osnoval-librepgp-fork-standarta-openpgp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/avtor-gnupg-osnoval-librepgp-fork-standarta-openpgp","title":{"rendered":"A GnuPG szerz\u0151je megalap\u00edtotta a LibrePGP-t, az OpenPGP szabv\u00e1ny forkj\u00e1t","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Werner Koch, a principal developer and creator of the GnuPG project, founded the LibrePGP project, focused on developing an updated specification that serves as an alternative to the OpenPGP standard. The fork was created in response to changes proposed by the IETF working group for the next update of the OpenPGP specification (RFC-4880), which Koch regarded as questionable in terms of maintaining compatibility and ensuring security. Developers from GnuPG, RNP (the OpenPGP implementation for Thunderbird), and Gpg4win who supported the fork are concerned that these proposed changes could be detrimental to existing OpenPGP-based application implementations, whose users depend on the long-term stability of the specification and are not willing to accept compatibility-breaking changes. <\/p>\n
LibrePGP includes useful enhancements that have been developed in recent years for the future version of the OpenPGP specification, while excluding changes that negatively impact compatibility. For example, compared to the current standard RFC-4880, LibrePGP accepts features such as: <\/p>\n
\n
Support for the Camellia encryption algorithm (RFC-5581),\n
ECC (Elliptic Curve Cryptography) extensions for OpenPGP (RFC-6637).\n
Mandatory support for SHA2-256 hashes (SHA-1 and MD5 are categorized as deprecated, and the possibility of decrypting data without integrity verification is considered completely obsolete).\n
An increase of the fingerprint size to 256 bits.\n
Support for EdDSA digital signature schemes and elliptic curves BrainpoolP256r1, BrainpoolP384r1, BrainpoolP512r1, Ed25519, Curve25519, Ed488, and X448.\n
Support for the CRYSTALS-Kyber algorithm, which is resistant to quantum computer attacks.\n
Support for authenticated encryption modes OCB (Offset Codebook Mode).\n
Implementation of the fifth version of the digital signatures format with metadata protection.\n
Support for extended subpackets with digital signatures. <\/ul>\n
Key points of criticism towards the new OpenPGP specification: <\/p>\n
\n
The IETF working group attempted to reinvent the standard instead of making gradual incremental updates to the specification, resulting in significant changes that disrupt compatibility.\n
A szimmetrikus GCM (Galois\/Counter Mode) titkos\u00edt\u00e1si m\u00f3d t\u00e1mogat\u00e1s\u00e1nak bevezet\u00e9se, amelyet neh\u00e9z helyesen megval\u00f3s\u00edtani, figyelmen k\u00edv\u00fcl hagyva az OCB (Offset codebook mode) m\u00f3dot, amelynek szabadalma m\u00e1r \u00e9vekkel ezel\u0151tt lej\u00e1rt.\n
Opcion\u00e1lis csomagok hozz\u00e1ad\u00e1sa v\u00e9letlenszer\u0171 kieg\u00e9sz\u00edt\u0151 kit\u00f6lt\u00e9ssel a forgalomelemz\u00e9s elleni v\u00e9delem \u00e9rdek\u00e9ben. A LibrePGP k\u00e9sz\u00edt\u0151i szerint az ilyen csomagok, amelyek ellen\u0151rizhetetlen kezdeti v\u00e9letlenszer\u0171 kit\u00f6lt\u00e9st tartalmaznak, vesz\u00e9lyt jelentenek a rejtett adatsug\u00e1rz\u00e1si csatorn\u00e1k l\u00e9trehoz\u00e1sa \u00e9s az adatsziv\u00e1rg\u00e1s-ellen\u0151rz\u0151 rendszerek megker\u00fcl\u00e9se szempontj\u00e1b\u00f3l. Kor\u00e1bban a kieg\u00e9sz\u00edt\u0151 kit\u00f6lt\u00e9s bevezet\u00e9s\u00e9nek \u00f6tlete elutas\u00edt\u00e1sra ker\u00fclt, mivel az nem a titkos\u00edt\u00e1s szintj\u00e9n, hanem az alkalmaz\u00e1s szintj\u00e9n zajlott.\n
A m\u00f3dos\u00edtott ECDH titkos\u00edt\u00e1si s\u00e9ma alkalmaz\u00e1sa (OID form\u00e1tum m\u00f3dos\u00edt\u00e1sa), a RFC-6637-ban le\u00edrt \u00e9s a PGP-ben, valamint a GnuPG-ben megval\u00f3s\u00edtott v\u00e1ltozat helyett.\n
N\u00e9h\u00e1ny gyakorlati funkci\u00f3 elt\u00e1vol\u00edt\u00e1sa, mint p\u00e9ld\u00e1ul a klasszikus kulcsvisszavon\u00e1si m\u00f3dszer, az «m» jelz\u0151 a MIME-adatok megjel\u00f6l\u00e9s\u00e9re \u00e9s az «t» jelz\u0151 a sz\u00f6veges adatok elv\u00e1laszt\u00e1s\u00e1ra a bin\u00e1risokt\u00f3l (az «t» jelz\u0151 hely\u00e9re az «u» jelz\u0151 l\u00e9pett a UTF-8 k\u00f3dol\u00e1s\u00fa sz\u00f6veghez).\n
A leg\u00fajabb al\u00e1\u00edr\u00e1si form\u00e1tumban a al\u00e1\u00edrt f\u00e1jl metaadatainak v\u00e9delme kiz\u00e1rva (p\u00e9ld\u00e1ul a f\u00e1jlnevet a al\u00e1\u00edr\u00e1s megs\u00e9rt\u00e9se n\u00e9lk\u00fcl meg lehet v\u00e1ltoztatni).\n
K\u00e9ts\u00e9ges lehet\u0151s\u00e9g a «s\u00f3» hozz\u00e1ad\u00e1s\u00e1ra az al\u00e1\u00edr\u00e1sokhoz (Salted signature) a megadott prefix-szel v\u00e9gzett \u00fctk\u00f6z\u00e9si t\u00e1mad\u00e1sok v\u00e9delm\u00e9nek fokoz\u00e1sa \u00e9rdek\u00e9ben. A s\u00f3val ell\u00e1tott \u00e9rt\u00e9k nem letilthat\u00f3 rejtett csatornak\u00e9nt haszn\u00e1lhat\u00f3 32 byte adat tov\u00e1bb\u00edt\u00e1s\u00e1ra az al\u00e1\u00edr\u00e1sban.\n
A szabv\u00e1ny elmozdul\u00e1sa az online kommunik\u00e1ci\u00f3 alapvet\u0151 haszn\u00e1lata fel\u00e9, figyelmen k\u00edv\u00fcl hagyva az adatok hossz\u00fa t\u00e1v\u00fa t\u00e1rol\u00e1s\u00e1nak ig\u00e9nyeit. <\/ul>\n
Az OpenPGP t\u00e1mogat\u00f3i m\u00e1r k\u00f6zz\u00e9tett\u00e9k kritik\u00e1jukat a kritik\u00e1ra. V\u00e9gs\u0151 soron, ha nem siker\u00fcl meg\u00e1llapod\u00e1st tal\u00e1lni, a sz\u00e9tszakad\u00e1s n\u00f6velheti az OpenPGP\/LibrePGP megval\u00f3s\u00edt\u00e1sok k\u00f6z\u00f6tti inkompatibilit\u00e1sokat. R\u00e9szben e probl\u00e9ma megold\u00e1sa \u00e9rdek\u00e9ben az OpenPGP fejleszt\u0151i r\u00f6gz\u00edtett\u00e9k az al\u00e1\u00edr\u00e1sok \u00f6t\u00f6dik verzi\u00f3j\u00e1t, amely kompatibilis a LibrePGP-vel, \u00e9s elkezdt\u00e9k a hatodik verzi\u00f3ra val\u00f3 \u00e1t\u00e1ll\u00e1st. \n Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"