Linux Kua huraina e Foundation, BastionZero, me Docker tētahi kaupapa tuwhera hou, ko OpenPubKey te ingoa, e whakawhanake ana i te kawa whakamunatanga ingoa kotahi mō te hainatanga mamati i ngā mea tūpono. I whakawhanakehia te hangarau hei kaupapa tahi i waenganui i a BastionZero me Docker hei whakahaere i te hainatanga mamati i ngā whakaahua ipu Docker hei ārai i te whakarerekētanga me te manatoko i hangaia e te kaihanga taketake. Ka whakawhanakehia te kaupapa i runga i tētahi tūāpapa koretake i raro i te maru o te whakahaere. Linux Ko te Foundation, e whakakore ana i te whakawhirinaki ki ngā kamupene arumoni takitahi, ā, e whakangāwari ana i te mahi tahi me ngā kaihautū tuatoru. Ko te whakatinanatanga tohutoro OpenPubKey kua tuhia ki Go, ā, kua tohatohahia i raro i te raihana Apache 2.0.
Ko nga kaha o OpenPubKey e kore e whakawhäitihia ki nga whakaahua ipu ka taea te whakamahi i te hangarau ki te whakau i te puna o tetahi rauemi, te aukati i te whakakapi i te whakawhirinaki, me te whakapai ake i te haumarutanga o nga hongere tohatoha huinga raraunga. Hei tauira, e tika ana te hangarau ki te manatoko i nga huihuinga hotaka, nga karere takitahi me nga mahi. Ko nga Kaihanga Waitohu anake me whai putea i roto i tetahi ratonga e tautoko ana i te OpenID, a ka whakawhiwhia ki nga kaihoko te whai waahi ki te manatoko i nga hainatanga taapiri me te whakau i to raatau hononga ki te tohu tohu OpenID.
I roto i tōna kaupapa, he rite a OpenPubKey ki te mea i hangaia e Google, ā, i tukuna i mua ki Linux He rite te Foundation ki te pūnaha Sigstore, engari he rerekē i te mea he tino māmā ake te whakatinanatanga, te whakamahinga, me te tiaki mā te whakakore i ngā wāhanga tūmau pokapū e kawenga ana mō te pupuri i tētahi takiuru tūmatanui e whakaū ana i te pono o ngā huringa (rangitaki mārama) me te whakarite i te mahi a ngā mana tiwhikete (Mana Tiwhikete).
Engari ki te tuku i a koe ake mana tiwhikete, ka whakamahi a OpenPubKey i te hangarau motuhēhēnga OpenID me te hono i nga hainatanga i hangaia ki nga kaiwhakarato OpenID Connect. I etahi atu kupu, ka taea e OpenPubkey te here i nga taviri cryptographic ki nga kaiwhakamahi motuhake ma te whakamahi i nga kaiwhakarato OpenID Connect (IdPs) hei utu mo nga mana tiwhikete. Ko te hangarau he tino hototahi ki nga kaiwhakarato OpenID o naianei, penei i a GitHub, Azure/Microsoft, Okta, OneLogin, Keycloak me Google, kaore e hiahiatia he whakarereketanga i to raatau taha (ka whakamahia te Tohu ID paerewa e whakaratohia ana e te kaiwhakarato, e taea ai e koe te mahi. whakatinana OpenPubKey anake ma nga huringa i te taha o te kiritaki OpenID Connect).
Ko te tohu i tukuna e te kaiwhakarato OpenID ka huri ki te tiwhikete e herea ana te tohu tohu i OpenID Hono ki te matua whanui. Ka whakamahia e te kaiwhakamahi te taviri i hangaia hei haina i nga raraunga ka taea e enei waitohu te manatoko i muri mai ki te tohu i roto i te OpenID Connect. Ka whakamahia e OpenPubKey nga taviri ephemeral he iti noa te wa - ka hangaia nga ki i te wa e takiuru ana OpenID ka mukua ina mutu te huihuinga me te kaiwhakarato OpenID.
He tauira algorithm mo te hanga hainatanga ma te whakamahi OpenPubKey:
- Takiuru ma te whakamahi i tetahi kaiwhakarato OpenID (Google, GitHub, Microsoft, etc.).
- Tonoa he tohu ID mai i te kaiwhakarato OpenID.
- Te whakahoki i tetahi tohu kua hainatia e te matua kaiwhakarato me te whakauru i te mara "nonce" me nga raraunga karekau i tukuna i te wa o te tono (ka tukuna te SHA3 hash o te taviri tūmatanui).
- Whakamahia ki te taha kaiwhakamahi o te tohu kua riro hei tiwhikete, tae atu ki nga raraunga matua.
- Te taapiri i tetahi tohu ki tetahi waitohu, he rite ki te tiwhikete.
Ka huri te manatoko ki te tirotiro mena kua hainatia e te kaiwhakarato OpenID te tohu taapiri me te tirotiro i te tika o te hainatanga mamati ki te rauemi ma te whakamahi i te taviri a te iwi, e taea ai e koe te mohio kua hainatia te rauemi ma te whakamahi i te tohu tohu mai i te tiwhikete ka whakamanahia e te hainatanga o te kaiwhakarato OpenID. Hei tauira, ka taea e te kaihanga o te hainatanga te whiwhi tohu i hainatia e te kaiwhakarato OpenID Google me nga korero kua manatokohia hei bob@gmail.com me te whakamahi i te taviri tūmatanui 0x54A5…FF. Na, ka tae mai he karere i hainatia e taua kii ano, ka taea e te kaiwhiwhi te whakamahi i te tohu i hainatia e te kaiwhakarato ki te manatoko ko te matua bob@gmail.com ko 0x54A5…FF a na bob@gmail.com i haina te karere.
Ko te whakamaaramatanga o te hoahoanga ka tutuki ma etahi whakararu (hei tauira, te ti'aturi ki nga kaiwhakarato OpenID o waho me te kore o te raarangi huringa me te hierarchical hashing), ka whakaaetia i etahi ahuatanga, engari kaore i etahi atu. Hei whakaiti i te ti'aturi ki nga kaiwhakarato OpenID, ko te whakararu, ko nga mahi ranei a nga kaimahi ka taea te whakahee i te punaha (hei tauira, ka taea e nga kaiwhakarato taumanu te tuku i tetahi taviri tito noa ki tetahi atu tuatoru), ka whakaarohia kia whakamahia he taapiri, engari ehara i te whakahau, MFA-Cosigner (Multi-Factor Authentication Cosigner) hono mo te whakamotuhēhēnga-maha (me haina te tohu ehara i te mea anake e te kaiwhakarato matua, engari na tetahi ratonga motuhēhēnga motuhake e whakamana ana i te kaiwhakamahi).
Ko tetahi o nga ngoikoretanga o OpenPubKey ko te noho mai o nga korero rereke ka taea te whakamahi ki te whai i nga mahi mo te wa roa, ahakoa te whakaingoa ano (whakamahi ano i te tohu tohu hei utu mo te tiwhikete hou). Ko te here tika ki nga taviri OpenID Connect i te wa e whakamanahia ana ka whakakore i te waahanga o te tūmau, engari he tino whakararu i te whakatinanatanga i te taha o te kiritaki, ka waiho he waahi mo te whakahaere i te wa e whakaeke ana (te mata whakaeke) i runga i te kaihoko, hei tauira, na te mea ko te mahi taka hurihanga matua ki runga ki te kiritaki. Ko te kore o te raarangi huringa e kore e taea e te kiritaki te whai i nga riihi matua pea.
Source: opennet.ru
