{"id":99236,"date":"2021-02-22T22:22:43","date_gmt":"2021-02-22T20:22:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov"},"modified":"2021-02-22T22:22:43","modified_gmt":"2021-02-22T20:22:43","slug":"vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","title":{"rendered":"Wydanie passwdqc 2.0.0 z obs\u0142ug\u0105 zewn\u0119trznych filtr\u00f3w","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Wydano now\u0105 wersj\u0119 passwdqc \u2014 zestawu narz\u0119dzi do kontroli z\u0142o\u017cono\u015bci hase\u0142 i fraz, obejmuj\u0105cego modu\u0142 pam_passwdqc, programy pwqcheck, pwqfilter (dodano w tej wersji) oraz pwqgen do u\u017cycia r\u0119cznego lub w skryptach, a tak\u017ce bibliotek\u0119 libpasswdqc. Obs\u0142ugiwane s\u0105 zar\u00f3wno systemy z PAM (wi\u0119kszo\u015b\u0107 Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX), jak i bez PAM (obs\u0142ugiwany interfejs passwordcheck w OpenBSD, do\u0142\u0105czona jest otoczka do u\u017cywania pwqcheck z PHP, istnieje p\u0142atna wersja dla Windows, a programy i biblioteka mog\u0105 by\u0107 r\u00f3wnie\u017c u\u017cywane w innych systemach). <\/p>\n

W por\u00f3wnaniu do poprzednich wersji dodano obs\u0142ug\u0119 zewn\u0119trznych plik\u00f3w filtracji hase\u0142, w tym binarnych, kt\u00f3re w tej chwili s\u0105 realizacj\u0105 ulepszonego filtru kuku\u0142kowego. Taki filtr gwarantuje, \u017ce \u017cadne z zabronionych hase\u0142 nie przejdzie, cho\u0107 mo\u017ce czasami prowadzi\u0107 do fa\u0142szywych alarm\u00f3w, kt\u00f3rych prawdopodobie\u0144stwo w przypadku u\u017cywanych w passwdqc ustawieniach i algorytmie jest zaniedbywalnie ma\u0142e. Sprawdzenie has\u0142a pod k\u0105tem obecno\u015bci w filtrze wymaga nie wi\u0119cej ni\u017c dw\u00f3ch dost\u0119pczy losowego odczytu z dysku, co jest bardzo szybkie i zazwyczaj nie powoduje nadmiernego obci\u0105\u017cenia. serwera<\/a>. <\/p>\n

Do tworzenia i pracy z binarnymi filtrami w passwdqc dodano program pwqfilter. Mo\u017ce on stworzy\u0107 filtr zar\u00f3wno z listy samych hase\u0142, jak i z ich haszy MD4 lub NTLM. Obs\u0142uga haszy NTLM pozwala na importowanie hase\u0142 z listy HIBP (Pwned Passwords), dystrybuowanej w takiej formie. W\u0142o\u017cono wiele pracy w optymalizacj\u0119 pwqfilter pod wzgl\u0119dem szybko\u015bci dzia\u0142ania, kompaktowo\u015bci uzyskiwanych filtr\u00f3w oraz poziomu fa\u0142szywych alarm\u00f3w. Na przyk\u0142ad stworzenie filtru kuku\u0142kowego z wska\u017anikiem obci\u0105\u017cenia 98% z pliku pwned-passwords-ntlm-ordered-by-hash-v7.txt o rozmiarze 21 GiB (22 GB) i zawieraj\u0105cego ponad 613 milion\u00f3w wierszy zajmuje oko\u0142o 8 minut na procesorze Core i7-4770K. Otrzymany filtr zajmuje 2,3 GiB (2,5 GB) i ma poziom fa\u0142szywych alarm\u00f3w wynosz\u0105cy oko\u0142o 1 na 1,15 miliarda. Przy mniejszym docelowym wska\u017aniku obci\u0105\u017cenia filtr mo\u017ce by\u0107 tworzony znacznie szybciej i b\u0119dzie mia\u0142 poziom fa\u0142szywych alarm\u00f3w jeszcze ni\u017cszy, ale jego rozmiar b\u0119dzie wi\u0119kszy. <\/p>\n

passwdqc doskonale radzi sobie z zapobieganiem s\u0142abym has\u0142om bez u\u017cycia zewn\u0119trznych plik\u00f3w. Ich wykorzystanie mo\u017ce znacznie zwi\u0119kszy\u0107 efektywno\u015b\u0107 passwdqc, niemal nie powoduj\u0105c dodatkowych niedogodno\u015bci dla u\u017cytkownik\u00f3w, lub mo\u017ce pozwoli\u0107 na z\u0142agodzenie innych ogranicze\u0144. Weryfikacja wybieranych przez u\u017cytkownik\u00f3w hase\u0142 pod k\u0105tem znanych wyciek\u00f3w jest zalecana przez NIST. Dla projektu Openwall to potencjalna mo\u017cliwo\u015b\u0107 finansowania rozwoju passwdqc (i nie tylko) poprzez sprzeda\u017c gotowych filtr\u00f3w, nie ograniczaj\u0105c u\u017cytkownik\u00f3w w mo\u017cliwo\u015bci samodzielnego tworzenia filtr\u00f3w przy u\u017cyciu programu pwqfilter wydanego na licencji open source. <\/p>\n

pwqfilter dzia\u0142a z dowolnymi ci\u0105gami i mo\u017ce by\u0107 stosowany zamiast grep w wielu celach, nawet niezwi\u0105zanych z has\u0142ami i bezpiecze\u0144stwem. W zwi\u0105zku z tym, pwqfilter ma kilka opcji podobnych do tych w grep, unika u\u017cywania nazw opcji, kt\u00f3re by\u0142yby sprzeczne z istniej\u0105cymi w grep, i stosuje te same kody zwrotu co w grep. <\/p>\n

W zadaniach, w kt\u00f3rych fa\u0142szywe alarmy s\u0105 niezwykle niepo\u017c\u0105dane, ich poziom mo\u017ce by\u0107 obni\u017cony, na przyk\u0142ad do jednego na kwintylion (miliard miliard\u00f3w) przy wsp\u00f3\u0142czynniku obci\u0105\u017cenia do 44%. (Klasyczny filtr kuku\u0142kowy nie zapewnia tak znacz\u0105cego obni\u017cenia poziomu fa\u0142szywych alarm\u00f3w przy zmniejszaniu wsp\u00f3\u0142czynnika obci\u0105\u017cenia. W passwdqc osi\u0105ga si\u0119 to dzi\u0119ki poprawkom algorytmu.)
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f passwdqc — \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0440\u0430\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c pam_passwdqc, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b pwqcheck, pwqfilter (\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438) \u0438 pwqgen \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0438\u043b\u0438 \u0438\u0437 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libpasswdqc. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 PAM (\u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX), \u0442\u0430\u043a \u0438 \u0431\u0435\u0437 PAM (\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 passwordcheck […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99236","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Wydanie passwdqc 2.0.0 z obs\u0142ug\u0105 zewn\u0119trznych filtr\u00f3w | ProHoster","description":"Wydano now\u0105 wersj\u0119 passwdqc - zestawu narz\u0119dzi do kontroli z\u0142o\u017cono\u015bci hase\u0142 i fraz has\u0142owych, kt\u00f3ry obejmuje modu\u0142 pam_passwdqc, programy pwqcheck, pwqfilter (dodany w tej wersji) oraz pwqgen.","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a passwdqc 2.0.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 | ProHoster","og:description":"\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f passwdqc - \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0440\u0430\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c pam_passwdqc, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b pwqcheck, pwqfilter (\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438) \u0438 pwqgen \u0434\u043b\u044f.","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-02-22T20:22:43+00:00","article:modified_time":"2021-02-22T20:22:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99236","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[],"defaultGraph":"","defaultPostTypeGraph":""},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:53:59","updated":"2026-02-22 15:29:50","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/99236","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=99236"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/99236\/revisions"}],"predecessor-version":[{"id":162219,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/99236\/revisions\/162219"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=99236"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=99236"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=99236"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}