{"id":102843,"date":"2022-01-02T21:37:00","date_gmt":"2022-01-02T19:37:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7"},"modified":"2022-01-02T21:37:00","modified_gmt":"2022-01-02T19:37:00","slug":"%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7","status":"publish","type":"post","link":"https:\/\/prohoster.info\/it\/blog\/news\/%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7","title":{"rendered":"Per il kernel Linux \u00e8 stata proposta un'implementazione di \/dev\/random, priva di vincoli su SHA-1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Jason A. Donenfeld, autore di VPN WireGuard, ha proposto un'implementazione aggiornata del generatore di numeri pseudocasuali RDRAND, responsabile del funzionamento dei dispositivi \/dev\/random e \/dev\/urandom nel kernel di Linux. Alla fine di novembre, Jason \u00e8 stato incluso tra i manutentori del driver random e ha pubblicato i primi risultati del suo lavoro di revisione. <\/p>\n

La nuova implementazione \u00e8 notevole per il passaggio all'uso della funzione hash BLAKE2s invece di SHA1 per le operazioni di mescolamento dell'entropia. Questa modifica ha migliorato la sicurezza del generatore di numeri pseudocasuali, eliminando il problem\u00e1tico algoritmo SHA1 e prevenendo la riscrittura del vettore di inizializzazione RNG. Poich\u00e9 l'algoritmo BLAKE2s supera SHA1 in termini di prestazioni, il suo utilizzo ha avuto anche un impatto positivo sulle prestazioni del generatore di numeri pseudocasuali (i test su un sistema con processore Intel i7-11850H hanno mostrato un aumento della velocit\u00e0 del 131%). Un ulteriore vantaggio del passaggio al mescolamento dell'entropia su BLAKE2 \u00e8 stata l'unificazione degli algoritmi utilizzati \u2014 BLAKE2 \u00e8 impiegato anche nello schema ChaCha, gi\u00e0 usato per l'estrazione di sequenze casuali. <\/p>\n

Inoltre, sono stati apportati miglioramenti al generatore di numeri pseudocasuali crittograficamente sicuro CRNG, utilizzato nella chiamata getrandom. I miglioramenti consistono nella limitazione della chiamata al lento generatore RDRAND durante l'estrazione dell'entropia, il che consente di aumentare le prestazioni di 3,7 volte. Jason ha dimostrato che la chiamata a RDRAND ha senso solo quando il CRNG non \u00e8 ancora completamente inizializzato, ma se l'inizializzazione del CRNG \u00e8 completata, il suo valore non influisce sulla qualit\u00e0 della sequenza generata e in questo caso \u00e8 possibile fare a meno di RDRAND. <\/p>\n

Le modifiche sono pianificate per essere incluse nel kernel 5.17 e sono gi\u00e0 state revisionate dagli sviluppatori Ted Ts'o (secondo maintainer del driver random), Greg Kroah-Hartman (responsabile del supporto della branca stabile del kernel Linux) e Jean-Philippe Aumasson (autore degli algoritmi BLAKE2\/3).
\n
Fonte: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0436\u0435\u0439\u0441\u043e\u043d \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434 (Jason A. Donenfeld), \u0430\u0432\u0442\u043e\u0440 VPN WireGuard, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b RDRAND, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \/dev\/random \u0438 \/dev\/urandom \u0432 \u044f\u0434\u0440\u0435 Linux. \u0412 \u043a\u043e\u043d\u0446\u0435 \u043d\u043e\u044f\u0431\u0440\u044f \u0414\u0436\u0435\u0439\u0441\u043e\u043d \u0431\u044b\u043b \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u0447\u0438\u0441\u043b\u043e \u043c\u044d\u0439\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u0430 random \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b \u043f\u0435\u0440\u0432\u044b\u0435 \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u044b \u0441\u0432\u043e\u0435\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043f\u043e \u0435\u0433\u043e \u043f\u0435\u0440\u0435\u0440\u0430\u0431\u043e\u0442\u043a\u0435. \u041d\u043e\u0432\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u0430 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u043e\u043c \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0445\u0435\u0448-\u0444\u0443\u043d\u043a\u0446\u0438\u0438 BLAKE2s \u0432\u043c\u0435\u0441\u0442\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-102843","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Per il kernel di Linux \u00e8 stata proposta un'implementazione di \/dev\/random, priva della dipendenza da SHA-1 | ProHoster","description":"Jason A. Donenfeld, autore di VPN WireGuard, ha proposto un'implementazione aggiornata del generatore di numeri pseudocasuali RDRAND, responsabile del funzionamento dei dispositivi \/dev\/random e \/dev\/urandom nel kernel di Linux.","canonical_url":"https:\/\/prohoster.info\/it\/blog\/news\/%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"it_IT","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0414\u043b\u044f \u044f\u0434\u0440\u0430 Linux \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0435\u043d\u0430 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \/dev\/random, \u0438\u0437\u0431\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043e\u0442 \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 \u043a SHA-1 | ProHoster","og:description":"\u0414\u0436\u0435\u0439\u0441\u043e\u043d \u0414\u043e\u043d\u0435\u043d\u0444\u0438\u043b\u0434 (Jason A. Donenfeld), \u0430\u0432\u0442\u043e\u0440 VPN WireGuard, \u043f\u0440\u0435\u0434\u043b\u043e\u0436\u0438\u043b \u043e\u0431\u043d\u043e\u0432\u043b\u0451\u043d\u043d\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0433\u0435\u043d\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0447\u0438\u0441\u0435\u043b RDRAND, \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u0437\u0430 \u0440\u0430\u0431\u043e\u0442\u0443 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \/dev\/random \u0438 \/dev\/urandom \u0432 \u044f\u0434\u0440\u0435 Linux.","og:url":"https:\/\/prohoster.info\/it\/blog\/news\/%d0%b4%d0%bb%d1%8f-%d1%8f%d0%b4%d1%80%d0%b0-linux-%d0%bf%d1%80%d0%b5%d0%b4%d0%bb%d0%be%d0%b6%d0%b5%d0%bd%d0%b0-%d1%80%d0%b5%d0%b0%d0%bb%d0%b8%d0%b7%d0%b0%d1%86%d0%b8%d1%8f-dev-random-%d0%b8%d0%b7","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-01-02T19:37:00+00:00","article:modified_time":"2022-01-02T19:37:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"102843","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-01-02 19:38:23","updated":"2022-09-28 13:59:56","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/102843","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/comments?post=102843"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/posts\/102843\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/media?parent=102843"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/categories?post=102843"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/it\/wp-json\/wp\/v2\/tags?post=102843"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}