Jason A. Donenfeld, mlembi wa VPN WireGuard, wapereka lingaliro la kukhazikitsidwa kwatsopano kwa jenereta ya manambala a pseudo-random ya RDRAND yomwe imayang'anira magwiridwe antchito a /dev/random ndi /dev/urandom zida mu Linux kernel. Kumapeto kwa Novembala, Jason adaphatikizidwa mu kuchuluka kwa osamalira oyendetsa mwachisawawa ndipo tsopano wasindikiza zotsatira zoyamba za ntchito yake pakukonza kwake.
Kukhazikitsa kwatsopanoko ndikodziwika chifukwa chosinthira kugwiritsa ntchito BLAKE2s hash ntchito m'malo mwa SHA1 pakusakaniza kwa entropy. Kusinthaku kunapititsa patsogolo chitetezo cha jenereta ya nambala yachinyengo pochotsa zovuta za SHA1 algorithm ndikuchotsa kulembedwanso kwa vector yoyambira ya RNG. Popeza kuti algorithm ya BLAKE2s ndi yapamwamba kuposa SHA1 pakuchita, kugwiritsidwa ntchito kwake kunakhudzanso ntchito ya jenereta ya pseudo-random number (kuyesa pa dongosolo ndi Intel i7-11850H purosesa anasonyeza 131% kuwonjezeka liwiro). Ubwino wina wosinthira kusakanikirana kwa entropy kupita ku BLAKE2 kunali kuphatikiza kwa ma aligorivimu omwe amagwiritsidwa ntchito - BLAKE2 imagwiritsidwa ntchito mu ChaCha cipher, yomwe imagwiritsidwa ntchito kale kuchotsa zotsatizana mwachisawawa.
Kuphatikiza apo, kusintha kwapangidwa kwa crypto-secure pseudo-random number jenereta CRNG yomwe imagwiritsidwa ntchito poyimba foni. Kusinthaku kumafikira kuchepetsa kuyimba kwa jenereta yapang'onopang'ono ya RDRAND pochotsa entropy, yomwe imathandizira magwiridwe antchito ndi nthawi 3.7. Jason adawonetsa kuti kuyimba RDRAND kumamveka bwino panthawi yomwe CRNG sinakhazikitsidwe kwathunthu, koma ngati kukhazikitsidwa kwa CRNG kwatha, mtengo wake sukhudza mtundu wa mndandanda womwe umapangidwa ndipo pakadali pano kuyitanira kwa RDRAND. akhoza kuchotsedwa.
Zosinthazi zakonzedwa kuti ziphatikizidwe mu 5.17 kernel ndipo zawunikiridwa kale ndi opanga Ted Ts'o (woyang'anira wachiwiri woyendetsa mwachisawawa), Greg Kroah-Hartman (omwe ali ndi udindo wosunga nthambi yokhazikika ya Linux kernel) ndi Jean-Philippe. Aumasson (mlembi wa BLAKE2/3 ma aligorivimu).
Source: opennet.ru