{"id":100468,"date":"2021-06-08T10:22:35","date_gmt":"2021-06-08T08:22:35","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej"},"modified":"2021-06-08T10:22:35","modified_gmt":"2021-06-08T08:22:35","slug":"v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","title":{"rendered":"\u00cen Fedora 35 este planificat\u0103 trecerea la yescrypt pentru hash-ul parolelor.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Pentru Fedora 35, este planificat\u0103 trecerea la utilizarea schemei de hashare a parolelor yescrypt. Aceast\u0103 modificare nu a fost \u00eenc\u0103 discutat\u0103 de comitetul FESCo (Fedora Engineering Steering Committee), responsabil de partea tehnic\u0103 a dezvolt\u0103rii distribu\u021biei Fedora. \u00cen cazul \u00een care modificarea este aprobat\u0103, \u00eencep\u00e2nd cu Fedora 35, parolele pentru utilizatorii noi din \/etc\/shadow vor fi hashate implicit cu ajutorul yescrypt. Suportul pentru vechile hash-uri create cu algoritmul anterior sha512crypt va fi men\u021binut \u0219i disponibil sub form\u0103 de op\u021biune. Dintre distribu\u021biile care au trecut deja la yescrypt se num\u0103r\u0103 ALT Linux, Debian Testing \u0219i Kali Linux. <\/p>\n

Yescrypt extinde capacit\u0103\u021bile classic scrypt prin suportul pentru scheme cu un consum mai mare de memorie RAM \u0219i reduce eficien\u021ba atacurilor care folosesc GPU-uri, FPGA-uri \u0219i cipuri specializate. Securitatea yescrypt este garantat\u0103 prin aplicarea unor primitive criptografice deja verificate, precum SHA-256, HMAC \u0219i PBKDF2. <\/p>\n

Printre dezavantajele algoritmului sha512crypt utilizat \u00een Fedora se num\u0103r\u0103 eficien\u021ba sa doar la dimensiuni de salt care dep\u0103\u0219esc 90 de bi\u021bi (se recomand\u0103 cel pu\u021bin 128 de bi\u021bi); vulnerabilitatea la atacuri DoS prin generarea unei sarcini parazite pe CPU \u00een timpul hash\u0103rii parolelor lungi; vulnerabilitatea la atacuri de determinare a dimensiunii parolei pe baza analizei pasive a timpului de procesare a hash-ului; func\u021bionarea f\u0103r\u0103 utilizarea unei func\u021bii criptografice de derivare a cheii (KDF, key derivation function).
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Fedora 35 \u043d\u0430\u043c\u0435\u0447\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0445\u0435\u043c\u044b \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 yescrypt. \u0418\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u043f\u043e\u043a\u0430 \u043d\u0435 \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0435\u043d\u043e \u043a\u043e\u043c\u0438\u0442\u0435\u0442\u043e\u043c FESCo (Fedora Engineering Steering Committee), \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u043c \u0437\u0430 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0447\u0430\u0441\u0442\u044c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u043a\u0438 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Fedora. \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u0434\u043e\u0431\u0440\u0435\u043d\u0438\u044f \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u0441 Fedora 35 \u043f\u0430\u0440\u043e\u043b\u0438 \u0434\u043b\u044f \u043d\u043e\u0432\u044b\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0432 \/etc\/shadow \u0431\u0443\u0434\u0443\u0442 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0445\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u0442\u0441\u044f \u043f\u0440\u0438 \u043f\u043e\u043c\u043e\u0449\u0438 yescrypt. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u0441\u0442\u0430\u0440\u044b\u0445 \u0445\u044d\u0448\u0435\u0439, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-100468","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00cen Fedora 35 este planificat\u0103 trecerea la yescrypt pentru hasharea parolelor | ProHoster","description":"Pentru Fedora 35, este planificat\u0103 trecerea la utilizarea schemei de hashare a parolelor yescrypt.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 Fedora 35 \u043d\u0430\u043c\u0435\u0447\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 yescrypt \u0434\u043b\u044f \u0445\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 | ProHoster","og:description":"\u0414\u043b\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 Fedora 35 \u043d\u0430\u043c\u0435\u0447\u0435\u043d \u043f\u0435\u0440\u0435\u0445\u043e\u0434 \u043d\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0441\u0445\u0435\u043c\u044b \u0445\u0435\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u0435\u0439 yescrypt.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-fedora-35-namechen-perehod-na-yescrypt-dlya-heshirovaniya-parolej","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-06-08T08:22:35+00:00","article:modified_time":"2021-06-08T08:22:35+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"100468","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-06-08 08:28:46","updated":"2022-10-01 09:33:10","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100468","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=100468"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/100468\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=100468"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=100468"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=100468"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}