Fedora Linux 39 ikukonzekera kuletsa chithandizo cha siginecha zochokera ku SHA-1 mwachisawawa

Pulojekiti ya Fedora yafotokoza ndondomeko yoletsa kuthandizira kwa siginecha za digito pogwiritsa ntchito ndondomeko ya SHA-1 ku Fedora Linux 39. Kulepheretsa kumaphatikizapo kuthetsa kukhulupilira m'ma signature omwe amagwiritsa ntchito SHA-1 hashes (SHA-224 idzalengezedwa kuti ndizochepa zomwe zimathandizidwa mu digito. siginecha), koma kusunga chithandizo cha HMAC ndi SHA-1 ndikupereka kuthekera kothandizira mbiri ya LEGACY ndi SHA-1. Pambuyo potsatira zosinthazo, laibulale ya OpenSSL mwachisawawa idzayamba kuletsa m'badwo ndi kutsimikizira kwa siginecha ndi SHA-1.

Kuyimitsa kukukonzekera kuti kuchitike m'magawo angapo: Mu Fedora Linux 36, siginecha zochokera ku SHA-1 sizidzachotsedwa mundondomeko ya "FUTURE", ndondomeko yoyeserera TEST-FEDORA39 imaperekedwa kuti izimitsa SHA-1 pa pempho la wogwiritsa ntchito (kusintha-crypto-policy -set TEST-FEDORA39), popanga ndi kutsimikizira siginecha zochokera ku SHA-1, machenjezo adzawonetsedwa mu chipika. Panthawi ya pre-beta kutulutsidwa kwa Fedora Linux 38, malo osungiramo ziwiya adzakhala ndi ndondomeko yoletsa kugwiritsa ntchito siginecha zochokera ku SHA-1, koma kusinthaku sikudzagwiritsidwa ntchito mu beta ndi kutulutsidwa kwa Fedora Linux 38. Ndi kumasulidwa kwa Fedora Linux 39, ndondomeko yochotseratu ma siginecha a SHA-1 idzakhazikitsidwa mwachisawawa.

Dongosolo lomwe likufunsidwa silinawunikidwebe ndi FESCo (Fedora Engineering Steering Committee), yomwe ili ndi udindo pa gawo laukadaulo la chitukuko cha kugawa kwa Fedora. Mapeto a chithandizo cha siginecha yochokera ku SHA-1 ndi chifukwa chakuchulukirachulukira kwa ziwopsezo zogundana ndi mawu oyambira (mtengo wosankha kugunda ukuyerekeza madola masauzande angapo). Osakatula ali ndi ziphaso zosainidwa pogwiritsa ntchito algorithm ya SHA-1 ngati yosatetezeka kuyambira pakati pa 2016.

Source: opennet.ru

Kuwonjezera ndemanga