{"id":106131,"date":"2022-12-16T15:36:53","date_gmt":"2022-12-16T13:36:53","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/nist-vyvodit-algoritm-heshirovaniya-sha-1-iz-svoih-speczifikaczij"},"modified":"2022-12-16T15:36:53","modified_gmt":"2022-12-16T13:36:53","slug":"nist-vyvodit-algoritm-heshirovaniya-sha-1-iz-svoih-speczifikaczij","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/nist-vyvodit-algoritm-heshirovaniya-sha-1-iz-svoih-speczifikaczij","title":{"rendered":"NIST elimin\u0103 algoritmul de hashing SHA-1 din specifica\u021biile sale","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Institutul Na\u021bional de Statistici \u0219i Tehnologii din SUA (NIST) a declarat c\u0103 algoritmul de hashare este \u00eenvechit, nesatisf\u0103c\u00e2nd cerin\u021bele de securitate \u0219i nerecomandat pentru utilizare. Se preconizeaz\u0103 renun\u021barea la utilizarea SHA-1 p\u00e2n\u0103 la 31 decembrie 2030 \u0219i trecerea complet\u0103 la algoritmi mai siguri precum SHA-2 \u0219i SHA-3. <\/p>\n

P\u00e2n\u0103 la 31 decembrie 2030, utilizarea SHA-1 va fi oprit\u0103 \u00een toate specifica\u021biile \u0219i protocoalele actuale NIST. \u00cencetarea valabilit\u0103\u021bii specifica\u021biei SHA-1 va fi reflectat\u0103 \u00eentr-un nou standard federal FIPS 180-5. \u00cen plus, vor fi aduse modific\u0103ri \u00een specifica\u021biile conexe, cum ar fi SP 800-131A, din care se va elimina men\u021biunea SHA-1. Modulele criptografice care suport\u0103 SHA-1 nu vor putea trece la verificarea ulterioar\u0103 \u00een NIST, iar livrarea lor \u00een institu\u021biile de stat din SUA va deveni imposibil\u0103 (certificatul se acord\u0103 doar pentru cinci ani, dup\u0103 care este necesar\u0103 o nou\u0103 verificare). <\/p>\n

SHA-1 a fost dezvoltat \u00een 1995 \u0219i a fost aprobat ca standard federal pentru procesarea informa\u021biilor (FIPS 180-1), permi\u021b\u00e2nd utilizarea acestui algoritm \u00een institu\u021biile guvernamentale din SUA. \u00cen 2005, s-a demonstrat posibilitatea teoretic\u0103 a unui atac asupra SHA-1. \u00cen 2017, pentru SHA-1 a fost demonstrat primul atac de coliziune practic\u0103 cu un prefix specificat, care permite, pentru dou\u0103 seturi de date diferite, g\u0103sirea de complet\u0103ri, al c\u0103ror ata\u0219ament va duce la apari\u021bia unei coliziuni \u0219i generarea aceluia\u0219i hash rezultat (de exemplu, pentru dou\u0103 documente existente se pot calcula dou\u0103 complet\u0103ri, \u0219i, dac\u0103 una este ata\u0219at\u0103 la primul document, iar cealalt\u0103 la al doilea \u2014 hash-urile SHA-1 rezultate pentru aceste fi\u0219iere vor fi identice). <\/p>\n

\u00cen 2019, metoda de determinare a coliziunilor a fost semnificativ \u00eembun\u0103t\u0103\u021bit\u0103, iar costurile pentru a efectua un atac au fost reduse la c\u00e2teva zeci de mii de dolari. \u00cen 2020, a fost demonstrat un atac func\u021bional pentru crearea de semn\u0103turi digitale false PGP \u0219i GnuPG. Din 2011, SHA-1 nu mai este recomandat pentru utilizarea \u00een semn\u0103turi digitale, iar \u00een 2017 toate browserele web de baz\u0103 au \u00eencetat s\u0103 sus\u021bin\u0103 certificatele semnate cu algoritmul de hash SHA-1. Cu toate acestea, SHA-1 continu\u0103 s\u0103 fie folosit pentru sume de verificare \u0219i \u00een baza NIST exist\u0103 peste 2200 de module \u0219i biblioteci criptografice certificate care suport\u0103 SHA-1.
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043e\u0432 \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0421\u0428\u0410 (NIST) \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c \u0445\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c, \u043d\u0435 \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u043c \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e. \u041e\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f SHA-1 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0438\u0437\u0431\u0430\u0432\u0438\u0442\u044c\u0441\u044f \u0434\u043e 31 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2030 \u0433\u043e\u0434\u0430 \u0438 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0435\u0440\u0435\u0439\u0442\u0438 \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u044b\u0435 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c\u044b SHA-2 \u0438 SHA-3. \u0414\u043e 31 \u0434\u0435\u043a\u0430\u0431\u0440\u044f 2030 \u0433\u043e\u0434\u0430 \u0432\u043e \u0432\u0441\u0435\u0445 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\u0445 \u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430\u0445 NIST \u0431\u0443\u0434\u0435\u0442 \u043f\u0440\u0435\u043a\u0440\u0430\u0449\u0435\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-106131","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47NIST elimin\u0103 algoritmul de hash SHA-1 din specifica\u021biile sale | ProHoster","description":"Institutul Na\u021bional de Standarde \u0219i Tehnologii din SUA (NIST) a declarat algoritmul de hash \u00eenvechit, necorespunz\u0103tor cerin\u021belor de securitate \u0219i nerecomandat pentru utilizare.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/nist-vyvodit-algoritm-heshirovaniya-sha-1-iz-svoih-speczifikaczij","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47NIST \u0432\u044b\u0432\u043e\u0434\u0438\u0442 \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c \u0445\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f SHA-1 \u0438\u0437 \u0441\u0432\u043e\u0438\u0445 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0439 | ProHoster","og:description":"\u041d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0439 \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043e\u0432 \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0439 \u0421\u0428\u0410 (NIST) \u043f\u0440\u0438\u0437\u043d\u0430\u043b \u0430\u043b\u0433\u043e\u0440\u0438\u0442\u043c \u0445\u044d\u0448\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u043c, \u043d\u0435 \u043e\u0442\u0432\u0435\u0447\u0430\u044e\u0449\u0438\u043c \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u043a \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438 \u043d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u043a \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044e.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/nist-vyvodit-algoritm-heshirovaniya-sha-1-iz-svoih-speczifikaczij","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-12-16T13:36:53+00:00","article:modified_time":"2022-12-16T13:36:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/106131","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=106131"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/106131\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=106131"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=106131"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=106131"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}