{"id":184113,"date":"2026-11-03T23:41:02","date_gmt":"2026-11-03T21:41:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/kriptograficheskij-izolyator-itb-s-formalnym-dokazatelstvom-nadyozhnosti"},"modified":"2026-11-03T23:41:07","modified_gmt":"2026-11-03T21:41:07","slug":"itb-cryptographic-isolator-with-formally-proven-reliability","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability","title":{"rendered":"Izolatorul criptografic ITB cu dovad\u0103 formal\u0103 a fiabilit\u0103\u021bii","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Proiectul ITB a fost prezentat, dezvolt\u00e2nd un izolator criptografic simetric, destinat \u00eenvelirii func\u021biilor standard pseudocasuale (PRF) \u0219i a primitivelor de hash (AES, BLAKE2\/3, Areion \u0219i altele) \u00eentr-o barier\u0103 combinatorie \u0219i topologic\u0103 interconectat\u0103. Spre deosebire de modurile de criptare clasice pe blocuri \u0219i fluxuri, arhitectura ITB vizeaz\u0103 izolarea structural\u0103 a primitivului intern, \u00eempiedic\u00e2nd propagarea caracteristicilor diferen\u021biale \u0219i liniare, linearizarea algebric\u0103, precum \u0219i codific\u0103rile directe pentru solu\u021bionatori SAT\/SMT \u0219i MILP prin grani\u021bele barierei. Codul este scris \u00een limbajul Go, cu optimiz\u0103ri la nivel de baz\u0103 \u00een assembler pentru arhitecturile x86_64 \u0219i ARM64 (Aarch64) \u0219i este distribuit sub licen\u021ba Apache 2.0.<\/p>\n<p>Transformarea datelor \u00een ITB este \u00eemp\u0103r\u021bit\u0103 \u00een dou\u0103 niveluri interconectate (Interlocked Barrier), gestionate de opt chei izolate (8-seed isolation) cu evolu\u021bia local\u0103 a cheii printr-un lan\u021b cu leg\u0103turi directe (ChainHash). La primul nivel, bariera de clasare (Rank Barrier) efectueaz\u0103 o permutare combinatoric\u0103 cheie a fiec\u0103rui bloc de 48 de bi\u021bi (sau bloc de 168 de bi\u021bi pentru primitive de 512 bi\u021bi), distribuind bi\u021bii textului deschis pe trei regiuni independente pe baza unei combina\u021bii \u00een dou\u0103 etape conform num\u0103rului s\u0103u (spa\u021biul de \u00eemp\u0103r\u021biri echilibrate C(48, 16) * C(32, 16) este de aproximativ 2^70.20, iar \u00een modul de 168 de bi\u021bi C(168, 56) * C(112, 56) \u2014 aproximativ 2^258.60). La al doilea nivel, bariera pixel (Pixel Barrier) mapeaz\u0103 datele pe o re\u021bea de elemente de 8 octe\u021bi (8 canale cu 7 bi\u021bi de date \u0219i 1 bit de zgomot pseudo-aleator \u00een fiecare octet) cu un decalaj ciclic de 7 bi\u021bi cheie pe pixel, mascarea canalelor de 7 bi\u021bi \u0219i alegerea pozi\u021biei bitului de zgomot.<\/p>\n<p>Caracteristicile principale ale proiectului:<\/p>\n<ul>\n<li class=\"l\"> Verificarea experimental\u0103 a propriet\u0103\u021bilor de izolare pe func\u021bii comerciale (test de stres cu primitive slabe). Repertoriul include un stand de laborator care introduce \u00een barier\u0103 o func\u021bie hash obi\u0219nuit\u0103 FNV-1a. Datorit\u0103 combina\u021biilor non-lineare, fragmet\u0103rii baitelor pe grani\u021bele canalelor de 7 bi\u021bi (CMMD(7, 8) = 1) \u0219i injec\u021biei de bi\u021bi de zgomot \u00een fiecare byte, utilizarea practic\u0103 sau construc\u021bia unui model SAT\/SMT rezolvabil pe textul deschis \u0219i criptat este blocat\u0103 deja \u00een etapa de formulare a sistemului de ecua\u021bii.\n<li class=\"l\"> Verificare formal\u0103 automat\u0103 a modelului \u00een limbajul Lean 4. Toate cele 12 teoreme de baz\u0103 matematice, combinatorice \u0219i de vectori bi\u021bi ale construc\u021biei (inclusiv schema aplicat\u0103 de consens hibrid al cheilor 3-to-8 din trei canale KEM independente \u00een APPS.md), descrise \u00een documentul PROOFS.md, sunt complet dovedite \u00een Lean 4 f\u0103r\u0103 utilizarea axiomelor \u0219i f\u0103r\u0103 omisiuni ale dovezilor.\n<li class=\"l\"> Instrument hardware \u00eencorporat pentru testarea criptoanalitic\u0103, care include verific\u0103ri automate: baterii statistice de teste, evaluarea gradului algebric \u0219i a non-linearit\u0103\u021bii, verificarea izol\u0103rii semin\u021belor la filtrarea pozi\u021biilor de zgomot prin intermediul unui oracle CCA \u0219i c\u0103utarea vulnerabilit\u0103\u021bilor cu ajutorul resolverelor externe.\n<li class=\"l\"> Dou\u0103 moduri de operare: modul standard de autentificare (AEAD conform schemei MAC-Inside-Encrypt, unde inser\u021bia de autentificare este calculat\u0103 \u0219i criptat\u0103 \u00een interiorul containerului) \u0219i modul de negare plauzibil\u0103 (Plausible Deniability) bazat pe codarea necondi\u021bionat\u0103 COBS, unde decriptarea cu o cheie gre\u0219it\u0103 \u0219i arbitrar\u0103 produce date sintactic corecte f\u0103r\u0103 indicator de eroare.\n<li class=\"l\"> \u00cempreun\u0103 cu PRF moderne rapide (AES, BLAKE2\/3, Areion), construc\u021bia este potrivit\u0103 pentru schimburi sigure de mesaje, stocarea fi\u0219ierelor \u0219i tuneluri de re\u021bea. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/ro\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\">VPN<\/a>-tunele (\u00een cazul unei cozi de pachete de grup, cheltuielile de format sunt de aproximativ 15%). Pentru a proteja \u00eempotriva atacurilor prin canale externe, nucleele sunt executate la timp constant (constant-time) cu o cur\u0103\u021bare complet\u0103 for\u021bat\u0103 a cadrelor de stiv\u0103 \u0219i a registrelor procesorului (GPR, XMM\/YMM\/ZMM, NEON) dup\u0103 apeluri.\n<li class=\"l\"> Pentru arhitectura x86_64, au fost implementate nuclee de asamblare folosind instruc\u021biuni BMI2 (PEXT\/PDEP), AES-NI, VAES, AVX2 \u0219i AVX-512, iar pentru ARM64 (Aarch64) \u2014 pe baza extensiilor NEON, extensiilor Crypto \u0219i SVE2 (cu revenire portabil\u0103 la Go curat). Peste un ABI C unic (libitb3) au fost preg\u0103tite leg\u0103turi pentru 33 de limbaje de programare.\n<\/ul>\n<p>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=66610\">opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 ITB, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u044b\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 (PRF) \u0438 \u0445\u044d\u0448-\u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432 (AES, BLAKE2\/3, Areion \u0438 \u0434\u0440\u0443\u0433\u0438\u0445) \u0432 \u0441\u0446\u0435\u043f\u043b\u0435\u043d\u043d\u044b\u0439 \u043a\u043e\u043c\u0431\u0438\u043d\u0430\u0442\u043e\u0440\u043d\u044b\u0439 \u0438 \u0442\u043e\u043f\u043e\u043b\u043e\u0433\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0431\u0430\u0440\u044c\u0435\u0440. \u0412 \u043e\u0442\u043b\u0438\u0447\u0438\u0435 \u043e\u0442 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0431\u043b\u043e\u0447\u043d\u044b\u0445 \u0438 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u044b\u0445 \u0440\u0435\u0436\u0438\u043c\u043e\u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0430 ITB \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u0430 \u043d\u0430 \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u043d\u0443\u044e \u0438\u0437\u043e\u043b\u044f\u0446\u0438\u044e \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u0430, \u043f\u0440\u0435\u043f\u044f\u0442\u0441\u0442\u0432\u0443\u044f \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u0434\u0438\u0444\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0438 \u043b\u0438\u043d\u0435\u0439\u043d\u044b\u0445 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a, \u0430\u043b\u0433\u0435\u0431\u0440\u0430\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043b\u0438\u043d\u0435\u0430\u0440\u0438\u0437\u0430\u0446\u0438\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u044f\u043c\u044b\u0445 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-184113","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 ITB, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u044b\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 (PRF) \u0438 \u0445\u044d\u0448-\u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432 (AES, BLAKE2\/3, Areion \u0438 \u0434\u0440\u0443\u0433\u0438\u0445) \u0432 \u0441\u0446\u0435\u043f\u043b\u0435\u043d\u043d\u044b\u0439.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Alexander Kovalev\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440 ITB \u0441 \u0444\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 ITB, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u044b\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 (PRF) \u0438 \u0445\u044d\u0448-\u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432 (AES, BLAKE2\/3, Areion \u0438 \u0434\u0440\u0443\u0433\u0438\u0445) \u0432 \u0441\u0446\u0435\u043f\u043b\u0435\u043d\u043d\u044b\u0439.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2026-11-03T21:41:02+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-11-03T21:41:07+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Izolatorul criptografic ITB cu dovada formal\u0103 a fiabilit\u0103\u021bii | ProHoster","description":"Este prezentat proiectul ITB, care dezvolt\u0103 un izolator criptografic simetric, destinat pentru a \u00eenv\u0103lui func\u021biile pseudo-random standard (PRF) \u0219i primitivele hash (AES, BLAKE2\/3, Areion \u0219i altele) \u00eentr-un lan\u021b.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440 ITB \u0441 \u0444\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u044b\u043c \u0434\u043e\u043a\u0430\u0437\u0430\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u043e\u043c \u043d\u0430\u0434\u0451\u0436\u043d\u043e\u0441\u0442\u0438 | ProHoster","og:description":"\u041f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u0435\u043d \u043f\u0440\u043e\u0435\u043a\u0442 ITB, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0441\u0438\u043c\u043c\u0435\u0442\u0440\u0438\u0447\u043d\u044b\u0439 \u043a\u0440\u0438\u043f\u0442\u043e\u0433\u0440\u0430\u0444\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0438\u0437\u043e\u043b\u044f\u0442\u043e\u0440, \u043f\u0440\u0435\u0434\u043d\u0430\u0437\u043d\u0430\u0447\u0435\u043d\u043d\u044b\u0439 \u0434\u043b\u044f \u043e\u0431\u0451\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u043d\u044b\u0445 \u043f\u0441\u0435\u0432\u0434\u043e\u0441\u043b\u0443\u0447\u0430\u0439\u043d\u044b\u0445 \u0444\u0443\u043d\u043a\u0446\u0438\u0439 (PRF) \u0438 \u0445\u044d\u0448-\u043f\u0440\u0438\u043c\u0438\u0442\u0438\u0432\u043e\u0432 (AES, BLAKE2\/3, Areion \u0438 \u0434\u0440\u0443\u0433\u0438\u0445) \u0432 \u0441\u0446\u0435\u043f\u043b\u0435\u043d\u043d\u044b\u0439.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/itb-cryptographic-isolator-with-formally-proven-reliability","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-11-03T21:41:02+00:00","article:modified_time":"2026-11-03T21:41:07+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184113","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=184113"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184113\/revisions"}],"predecessor-version":[{"id":184114,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/184113\/revisions\/184114"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=184113"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=184113"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=184113"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}