{"id":100468,"date":"2021-06-08T10:22:35","date_gmt":"2021-06-08T08:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej"},"modified":"2021-06-08T10:22:35","modified_gmt":"2021-06-08T08:22:35","slug":"v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","title":{"rendered":"W Fedora 35 planowany jest przej\u015bcie na yescrypt do haszowania hase\u0142","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

W Fedora 35 planowane jest przej\u015bcie na u\u017cycie schematu hashuj\u0105cego has\u0142a yescrypt. Zmiana nie zosta\u0142a jeszcze rozpatrzona przez komitet FESCo (Fedora Engineering Steering Committee), kt\u00f3ry odpowiada za techniczn\u0105 cz\u0119\u015b\u0107 rozwoju dystrybucji Fedora. W przypadku zatwierdzenia zmiany, od Fedora 35 has\u0142a dla nowych u\u017cytkownik\u00f3w w \/etc\/shadow b\u0119d\u0105 domy\u015blnie haszowane przy u\u017cyciu yescrypt. Wsparcie dla starszych hashy stworzonych na podstawie wcze\u015bniej u\u017cywanego algorytmu sha512crypt zostanie zachowane i dost\u0119pne w formie opcji. W\u015br\u00f3d dystrybucji, kt\u00f3re ju\u017c przesz\u0142y na yescrypt, mo\u017cna wymieni\u0107 ALT Linux, Debian Testing i Kali Linux. <\/p>\n

Yescrypt rozszerza mo\u017cliwo\u015bci klasycznego scryptu poprzez wsparcie dla u\u017cycia schematu z wi\u0119kszym zu\u017cyciem pami\u0119ci operacyjnej i zmniejsza skuteczno\u015b\u0107 atak\u00f3w wykorzystuj\u0105cych GPU, FPGA oraz wyspecjalizowane chipy. Bezpiecze\u0144stwo Yescrypt zapewnione jest dzi\u0119ki zastosowaniu ju\u017c sprawdzonych prymityw\u00f3w kryptograficznych SHA-256, HMAC i PBKDF2. <\/p>\n

W\u015br\u00f3d wad stosowanego w Fedory algorytmu sha512crypt wymienia si\u0119 jego skuteczno\u015b\u0107 tylko przy rozmiarze salt przekraczaj\u0105cym 90 bit\u00f3w (zalecane co najmniej 128 bit\u00f3w); podatno\u015b\u0107 na ataki DoS poprzez tworzenie paso\u017cytniczej obci\u0105\u017cenia CPU podczas haszowania d\u0142ugich hase\u0142; podatno\u015b\u0107 na atak oparty na okre\u015bleniu rozmiaru has\u0142a na podstawie pasywnej analizy czasu przetwarzania hash; dzia\u0142anie bez zastosowania kryptograficznej funkcji tworzenia klucza (KDF, key derivation function).
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Fedora 35 \u043d\u0430\u043c\u0435\u0447\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0445\u0435\u043c\u044b \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 yescrypt. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043e \u043a\u043e\u043c\u0438\u0442\u0435\u0442\u043e\u043c FESCo (Fedora Engineering Steering Committee), \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u043c \u0437\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Fedora. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0434\u043e\u0431\u0440\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 Fedora 35 \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \/etc\/shadow \u0431\u0443\u0434\u0443\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0445\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 yescrypt. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0441\u0442\u0430\u0440\u044b\u0445 \u0445\u044d\u0448\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100468","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47W Fedora 35 planowane jest przej\u015bcie na yescrypt do haszowania hase\u0142 | ProHoster","description":"W Fedora 35 planowane jest przej\u015bcie na u\u017cycie schematu hashuj\u0105cego has\u0142a yescrypt.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Fedora 35 \u043d\u0430\u043c\u0435\u0447\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 yescrypt \u0434\u043b\u044f \u0445\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 | ProHoster","og:description":"\u0414\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Fedora 35 \u043d\u0430\u043c\u0435\u0447\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0445\u0435\u043c\u044b \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 yescrypt.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-08T08:22:35+00:00","article:modified_time":"2021-06-08T08:22:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100468","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-08 08:28:46","updated":"2022-10-01 09:33:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/100468","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=100468"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/100468\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=100468"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=100468"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=100468"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}