{"id":90845,"date":"2020-08-07T01:42:00","date_gmt":"2020-08-06T23:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/luchshij-v-svoem-klasse-istoriya-poyavleniya-standarta-shifrovaniya-aes"},"modified":"2020-08-07T01:42:00","modified_gmt":"2020-08-06T23:42:00","slug":"luchshij-v-svoem-klasse-istoriya-poyavleniya-standarta-shifrovaniya-aes","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/luchshij-v-svoem-klasse-istoriya-poyavleniya-standarta-shifrovaniya-aes","title":{"rendered":"Najlep\u0161\u00ed vo svojej triede: hist\u00f3ria vzniku \u0161tandardu \u0161ifrovania AES","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"Najlep\u0161\u00ed vo svojej triede: hist\u00f3ria vzniku \u0161tandardu \u0161ifrovania AES\" src=\"\/wp-content\/uploads\/2020\/08\/8a9b19529cb9c03e9e8df79558a998b2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nOd m\u00e1ja 2020 za\u010dali v Rusku ofici\u00e1lne predaje extern\u00fdch diskov WD My Book, ktor\u00e9 podporuj\u00fa hardv\u00e9rov\u00e9 \u0161ifrovanie AES s 256-bitov\u00fdm k\u013e\u00fa\u010dom. Vzh\u013eadom na legislat\u00edvne obmedzenia bolo mo\u017en\u00e9 podobn\u00e9 zariadenia predt\u00fdm zak\u00fapi\u0165 iba v zahrani\u010dn\u00fdch internetov\u00fdch obchodoch alebo na \u201e\u0161edom\u201c trhu, av\u0161ak teraz si m\u00f4\u017ee ka\u017ed\u00fd, kto chce, zaobstara\u0165 zabezpe\u010den\u00e9 \u00falo\u017eisko s trojro\u010dnou z\u00e1rukou od spolo\u010dnosti Western Digital. Pri tejto v\u00fdznamnej udalosti sme sa rozhodli urobi\u0165 mal\u00fd exkurz do hist\u00f3rie a presk\u00fama\u0165, ako vznikol Advanced Encryption Standard a \u010d\u00edm je tak\u00fd dobr\u00fd v porovnan\u00ed s konkuren\u010dn\u00fdmi rie\u0161eniami.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nDlh\u00fd \u010das bol ofici\u00e1lnym \u0161tandardom symetrick\u00e9ho \u0161ifrovania v USA DES (Data Encryption Standard \u2014 \u0161tandard \u0161ifrovania d\u00e1t), ktor\u00fd bol vyvinut\u00fd spolo\u010dnos\u0165ou IBM a zaraden\u00fd do zoznamu feder\u00e1lnych \u0161tandardov spracovania inform\u00e1ci\u00ed v roku 1977 (FIPS 46-3). Z\u00e1kladom algoritmu boli my\u0161lienky z\u00edskan\u00e9 po\u010das v\u00fdskumn\u00e9ho projektu s k\u00f3dov\u00fdm n\u00e1zvom Lucifer. Ke\u010f 15. m\u00e1ja 1973 N\u00e1rodn\u00fd \u00farad \u0161tandardov USA ozn\u00e1mil vyhl\u00e1senie s\u00fa\u0165a\u017ee, ktorej cie\u013eom bolo vytvorenie \u0161ifrovacieho \u0161tandardu pre \u0161t\u00e1tne in\u0161tit\u00facie, americk\u00e1 korpor\u00e1cia sa zapojila do kryptografick\u00e9ho z\u00e1vodu s tre\u0165ou verziou Lucifera, ktor\u00e1 vyu\u017e\u00edvala aktualizovan\u00fa Feistelovu sie\u0165. A spolu s \u010fal\u0161\u00edmi s\u00fa\u0165a\u017eiacimi utrpela nezdar: \u017eiadny z algoritmov predlo\u017een\u00fdch na prv\u00fd konkurz nesp\u013a\u0148al pr\u00edsne po\u017eiadavky stanoven\u00e9 odborn\u00edkmi NBS.<\/p>\n<p><img decoding=\"async\" alt=\"Najlep\u0161\u00ed vo svojej triede: hist\u00f3ria vzniku \u0161tandardu \u0161ifrovania AES\" src=\"\/wp-content\/uploads\/2020\/08\/ed1d6f9a782b0ff013451db0c1751f8e.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nSamozrejme, v IBM sa nemohli len tak zmieri\u0165 s por\u00e1\u017ekou: ke\u010f bol 27. augusta 1974 konkurz obnoven\u00fd, americk\u00e1 korpor\u00e1cia znovu podala prihl\u00e1\u0161ku, ktor\u00e1 predstabila vylep\u0161en\u00fa verziu Lucifera. Tentoraz nemali porotcovia ani jednu v\u00fdhradu: po d\u00f4kladnej anal\u00fdze nedostatkov IBM \u00faspe\u0161ne odstr\u00e1nilo v\u0161etky nedokonalosti, tak\u017ee nebolo d\u00f4vodu na kritiku. Po presved\u010divom v\u00ed\u0165azstve sa Lucifer premenoval na DES a u\u017e 17. marca 1975 bol vydan\u00fd vo Feder\u00e1lnom registri.<\/p>\n<p>V roku 1976 sa konali otvoren\u00e9 symp\u00f3zi\u00e1, na ktor\u00fdch sa diskutovalo o nov\u00fdch kryptografick\u00fdch \u0161tandardoch a DES bol tvrdohlavo kritizovan\u00fd odbornou komunitou. D\u00f4vodom bola zmena algoritmu, ktor\u00fa vykonali odborn\u00edci NSA: predov\u0161etk\u00fdm bola zn\u00ed\u017een\u00e1 d\u013a\u017eka k\u013e\u00fa\u010da na 56 bitov (p\u00f4vodne Lucifer podporoval 64- a 128-bitov\u00e9 k\u013e\u00fa\u010de) a zmenila sa logika fungovania blokov permut\u00e1cie. Pod\u013ea n\u00e1zorov kryptografov \u201evylep\u0161enia\u201c ned\u00e1vali zmysel a jedin\u00e9, \u010do NSA pri implement\u00e1cii modifik\u00e1ci\u00ed zam\u00fd\u0161\u013ealo, bolo zabezpe\u010di\u0165 mo\u017enos\u0165 bez probl\u00e9mov prehliada\u0165 \u0161ifrovan\u00e9 dokumenty.<\/p>\n<p>V s\u00favislosti s uveden\u00fdmi obvineniami bola v Sen\u00e1te USA zriaden\u00e1 osobitn\u00e1 komisia, ktorej \u00falohou bolo presk\u00fama\u0165 opr\u00e1vnenos\u0165 \u010dinov NSA. V roku 1978 bol po vy\u0161etren\u00ed zverejnen\u00fd report, v ktorom sa hovorilo nasledovn\u00e9:<\/p>\n<ul>\n<li>z\u00e1stupcovia NSA sa z\u00fa\u010dastnili na vylep\u0161en\u00ed DES len nepriamo, pri\u010dom ich pr\u00edspevok sa t\u00fdkal iba zmeny fungovania blokov permut\u00e1cie;<\/li>\n<li>z\u00e1vere\u010dn\u00e1 verzia DES sa uk\u00e1zala ako odolnej\u0161ia vo\u010di \u00fatokom a kryptografickej anal\u00fdze ne\u017e p\u00f4vodn\u00e1, tak\u017ee vykonan\u00e9 zmeny boli od\u00f4vodnen\u00e9;<\/li>\n<li>d\u013a\u017eka k\u013e\u00fa\u010da 56 bitov je viac ne\u017e dostato\u010dn\u00e1 pre ve\u013ek\u00fa v\u00e4\u010d\u0161inu aplik\u00e1ci\u00ed, preto\u017ee na prelomenie tak\u00e9hoto \u0161ifrovania by bolo potrebn\u00e9 superpo\u010d\u00edta\u010d minim\u00e1lne v hodnote nieko\u013ek\u00fdch desiatok mili\u00f3nov dol\u00e1rov, a ke\u010f\u017ee be\u017en\u00ed zlo\u010dinci a dokonca ani profesion\u00e1lni hackeri nemaj\u00fa tak\u00e9to zdroje, niet sa o \u010do ob\u00e1va\u0165.<\/li>\n<\/ul>\n<p>\nZ\u00e1very komisie sa \u010diasto\u010dne potvrdili v roku 1990, ke\u010f izraelsk\u00ed kryptografi Eli Biham a Adi Shamir, pracuj\u00fac na koncepcii diferenci\u00e1lneho kryptoanalyzovania, vykonali rozsiahly v\u00fdskum blokov\u00fdch algoritmov, medzi ktor\u00fdmi bol aj DES. Vedci dospeli k z\u00e1veru, \u017ee nov\u00fd model permut\u00e1ci\u00ed je ove\u013ea odolnej\u0161\u00ed vo\u010di \u00fatokom ne\u017e p\u00f4vodn\u00fd, a teda NSA skuto\u010dne pomohla odstr\u00e1ni\u0165 nieko\u013eko nedostatkov v algoritme.<\/p>\n<p><img decoding=\"async\" alt=\"Najlep\u0161\u00ed vo svojej triede: hist\u00f3ria vzniku \u0161tandardu \u0161ifrovania AES\" src=\"\/wp-content\/uploads\/2020\/08\/1893c515351415094f7373b9c26783e5.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Adi Shamir<\/i><\/p>\n<p>Obmedzenie d\u013a\u017eky k\u013e\u00fa\u010da sa uk\u00e1zalo by\u0165 probl\u00e9mom, a to dos\u0165 v\u00e1\u017enym, \u010do v roku 1998 presved\u010divo dok\u00e1zala ob\u010dianska organiz\u00e1cia Electronic Frontier Foundation (EFF) v r\u00e1mci experimentu DES Challenge II, ktor\u00fd sa konal pod z\u00e1\u0161titou RSA Laboratory. \u0160peci\u00e1lne na prelomenie DES bol postaven\u00fd superpo\u010d\u00edta\u010d s k\u00f3dov\u00fdm n\u00e1zvom EFF DES Cracker, na ktor\u00e9ho vytvoren\u00ed pracovali John Gilmore, spoluzakladate\u013e EFF a ved\u00faci projektu DES Challenge, a Paul Kocher, zakladate\u013e spolo\u010dnosti Cryptography Research.<\/p>\n<p><img decoding=\"async\" alt=\"Najlep\u0161\u00ed vo svojej triede: hist\u00f3ria vzniku \u0161tandardu \u0161ifrovania AES\" src=\"\/wp-content\/uploads\/2020\/08\/8538a9aaaa2291042e215e84cc7a0151.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<i>Procesor EFF DES Cracker<\/i><\/p>\n<p>Vyvinut\u00fd syst\u00e9m dok\u00e1zal \u00faspe\u0161ne n\u00e1js\u0165 k\u013e\u00fa\u010d k za\u0161ifrovan\u00e9mu vzorku met\u00f3dou hrub\u00e9ho prehliadania za pouh\u00fdch 56 hod\u00edn, teda menej ako za tri dni. Na to, aby DES Cracker mohol presk\u00fama\u0165 pribli\u017ene \u0161tvrtinu v\u0161etk\u00fdch mo\u017en\u00fdch kombin\u00e1ci\u00ed, bolo potrebn\u00e9, \u010do znamen\u00e1, \u017ee aj za najslab\u0161\u00edch podmienok by na prelomenie potrebovalo asi 224 hod\u00edn, teda nie viac ako 10 dn\u00ed. N\u00e1klady na superpo\u010d\u00edta\u010d, zoh\u013ead\u0148uj\u00fac vynalo\u017een\u00e9 prostriedky na jeho projektovanie, sa pohybovali len okolo 250 tis\u00edc dol\u00e1rov. Nie je \u0165a\u017ek\u00e9 uhodn\u00fa\u0165, \u017ee dnes je prelomi\u0165 tak\u00fdto \u0161ifr \u010doraz jednoduch\u0161ie a lacnej\u0161ie: nielen\u017ee sa hardv\u00e9r stal ove\u013ea v\u00fdkonnej\u0161\u00edm, ale taktie\u017e v\u010faka rozvoju internetov\u00fdch technol\u00f3gi\u00ed hackrovi v\u00f4bec nie je potrebn\u00e9 kupova\u0165 alebo prenaj\u00edma\u0165 potrebn\u00e9 vybavenie \u2014 \u00faplne sta\u010d\u00ed vytvori\u0165 botnet zo infikovan\u00fdch po\u010d\u00edta\u010dov.<\/p>\n<p>Tento experiment jasne uk\u00e1zal, ako ve\u013emi je DES mor\u00e1lne zastaran\u00fd. A ke\u010f\u017ee v tom \u010dase bol algoritmus s\u00fa\u010das\u0165ou prakticky 50% rie\u0161en\u00ed v oblasti \u0161ifrovania d\u00e1t (pod\u013ea odhadu op\u00e4\u0165 EFF), ot\u00e1zka h\u013eadania alternat\u00edvy sa stala aktu\u00e1lnou ako nikdy predt\u00fdm.<\/p>\n<h2>Nov\u00e9 v\u00fdzvy \u2014 nov\u00fd s\u00fa\u0165a\u017e<\/h2>\n<p>\n<img decoding=\"async\" alt=\"Najlep\u0161\u00ed vo svojej triede: hist\u00f3ria vzniku \u0161tandardu \u0161ifrovania AES\" src=\"\/wp-content\/uploads\/2020\/08\/5997cccf9349b208e662c95186417aee.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nNa spravodlivos\u0165 je potrebn\u00e9 poveda\u0165, \u017ee h\u013eadanie n\u00e1hrady za Data Encryption Standard sa za\u010dalo takmer s\u00fa\u010dasne s pr\u00edpravou EFF DES Cracker: N\u00e1rodn\u00fd in\u0161tit\u00fat \u0161tandardov a technol\u00f3gie (NIST) USA e\u0161te v roku 1997 ozn\u00e1mil spustenie s\u00fa\u0165a\u017ee algoritmov \u0161ifrovania, ktorej cie\u013eom bolo identifikova\u0165 nov\u00fd \u00abzlat\u00fd \u0161tandard\u00bb kryptobezpe\u010dnosti. A ak v minulosti sa podobn\u00e9 aktivity uskuto\u010d\u0148ovali v\u00fdlu\u010dne \u201epre svojich\u201c, v NIST, pam\u00e4taj\u00fac na ne\u00faspe\u0161n\u00fa sk\u00fasenos\u0165 pred 30 rokmi, sa rozhodli s\u00fa\u0165a\u017e spr\u00edstupni\u0165 \u00faplne verejne: z\u00fa\u010dastni\u0165 sa mohli ak\u00e1ko\u013evek spolo\u010dnos\u0165 a ak\u00e1ko\u013evek fyzick\u00e1 osoba bez oh\u013eadu na miesto dislok\u00e1cie alebo ob\u010dianstvo.<\/p>\n<p>Tak\u00fdto pr\u00edstup sa osved\u010dil u\u017e v etape v\u00fdberu uch\u00e1dza\u010dov: medzi autormi, ktor\u00ed sa prihl\u00e1sili do s\u00fa\u0165a\u017ee Advanced Encryption Standard, sa objavili svetozn\u00e1mi kryptol\u00f3govia (Ross Anderson, Eli Biham, Lars Knudsen), mal\u00e9 IT spolo\u010dnosti \u0161pecializuj\u00face sa na kybernetick\u00fa bezpe\u010dnos\u0165 (Counterpane), ve\u013ek\u00e9 korpor\u00e1cie (nemeck\u00e1 Deutsche Telekom), vzdel\u00e1vacie in\u0161tit\u00facie (Katol\u00edcka univerzita v Leuven, Belgicko) a taktie\u017e startupy a mal\u00e9 firmy, o ktor\u00fdch sa m\u00e1lo po\u010dulo mimo ich kraj\u00edn (napr\u00edklad Tecnologia Apropriada Internacional z Kostariky).<\/p>\n<p>Zauj\u00edmav\u00e9 je, \u017ee tentoraz NIST schv\u00e1lil len dve z\u00e1kladn\u00e9 po\u017eiadavky na z\u00fa\u010dastnen\u00e9 algoritmy:<\/p>\n<ul>\n<li>blok \u00fadajov mus\u00ed ma\u0165 pevn\u00fa ve\u013ekos\u0165 128 bit;<\/li>\n<li>algoritmus mus\u00ed podporova\u0165 minim\u00e1lne tri ve\u013ekosti k\u013e\u00fa\u010dov: 128, 192 a 256 bit.<\/li>\n<\/ul>\n<p>\nDosiahnu\u0165 tak\u00fd v\u00fdsledok bolo relat\u00edvne jednoduch\u00e9, ale, ako sa hovor\u00ed, diabol je skryt\u00fd v detailoch: ved\u013eaj\u0161\u00edch po\u017eiadaviek bolo ove\u013ea viac a vyhovie\u0165 im bolo ove\u013ea zlo\u017eitej\u0161ie. Medzit\u00fdm presne na ich z\u00e1klade hodnotitelia NIST uskuto\u010dnili v\u00fdber finalistov. Tu s\u00fa krit\u00e9ri\u00e1, ktor\u00fdm museli uch\u00e1dza\u010di o v\u00ed\u0165azstvo vyhovie\u0165:<\/p>\n<ol>\n<li>schopnos\u0165 odol\u00e1va\u0165 ak\u00fdmko\u013evek kryptanalytick\u00fdm \u00fatokom zn\u00e1mych v \u010dase konania s\u00fa\u0165a\u017ee, vr\u00e1tane \u00fatokov cez postrann\u00e9 kan\u00e1ly;<\/li>\n<li>nedostatok slab\u00fdch a ekvivalentn\u00fdch \u0161ifrovac\u00edch k\u013e\u00fa\u010dov (pod ekvivalentn\u00fdmi sa rozumej\u00fa tak\u00e9 k\u013e\u00fa\u010de, ktor\u00e9, aj ke\u010f maj\u00fa v\u00fdrazn\u00e9 rozdiely, ved\u00fa k z\u00edskaniu identick\u00fdch \u0161ifrov);<\/li>\n<li>r\u00fdchlos\u0165 \u0161ifrovania je stabiln\u00e1 a pribli\u017ene rovnak\u00e1 na v\u0161etk\u00fdch aktu\u00e1lnych platform\u00e1ch (od 8- do 64-bitov\u00fdch);<\/li>\n<li>optimaliz\u00e1cia pre viacer\u00e9 procesorov\u00e9 syst\u00e9my, podpora paraleln\u00e9ho spracovania oper\u00e1ci\u00ed;<\/li>\n<li>minim\u00e1lne po\u017eiadavky na objem opera\u010dnej pam\u00e4te;<\/li>\n<li>\u017eiadne obmedzenia na pou\u017eitie v \u0161tandardn\u00fdch scen\u00e1roch (ako z\u00e1klad pre vytv\u00e1ranie hashovac\u00edch funkci\u00ed, pseudon\u00e1hodn\u00fdch gener\u00e1torov \u010d\u00edsel at\u010f.);<\/li>\n<li>Strukt\u00fara algoritmu by mala by\u0165 od\u00f4vodnen\u00e1 a \u013eahko pochopite\u013en\u00e1.<\/li>\n<\/ol>\n<p>\nPosledn\u00fd bod sa m\u00f4\u017ee zda\u0165 zvl\u00e1\u0161tny, av\u0161ak ak sa nad n\u00edm zamysl\u00edte, nie je bezd\u00f4vodn\u00fd, preto\u017ee dobre \u0161trukt\u00farovan\u00fd algoritmus sa omnoho \u013eah\u0161ie analyzuje a je taktie\u017e zlo\u017eitej\u0161ie do\u0148 skry\u0165 \u201ebackdoor\u201c, ktor\u00fdm by v\u00fdvoj\u00e1r mohol z\u00edska\u0165 neobmedzen\u00fd pr\u00edstup k \u0161ifrovan\u00fdm \u00fadajom.<\/p>\n<p>Prij\u00edmanie prihl\u00e1\u0161ok na s\u00fa\u0165a\u017e Advanced Encryption Standard trvalo rok a pol. Celkovo sa do nej zapojilo 15 algoritmov:<\/p>\n<ol>\n<li>CAST-256, vyvinut\u00fd kanadskou spolo\u010dnos\u0165ou Entrust Technologies na z\u00e1klade CAST-128, ktor\u00fd vytvorili Carlisle Adams a Stafford Tavares;<\/li>\n<li>Crypton, vyvinut\u00fd kryptol\u00f3gom Che Hoon Limom zo ju\u017enok\u00f3rejskej spolo\u010dnosti Future Systems, ktor\u00e1 sa zaober\u00e1 kyberbezpe\u010dnos\u0165ou;<\/li>\n<li>DEAL, ktor\u00e9ho koncept p\u00f4vodne navrhol d\u00e1nsky matematik Lars Knudsen a nesk\u00f4r jeho my\u0161lienky rozvinul Richard Outerbridge, ktor\u00fd aj podal prihl\u00e1\u0161ku na \u00fa\u010das\u0165 v s\u00fa\u0165a\u017ei;<\/li>\n<li>DFC, spolo\u010dn\u00fd projekt Par\u00ed\u017eskej vysokej pedagogickej \u0161koly, N\u00e1rodn\u00e9ho centra vedeck\u00e9ho v\u00fdskumu Franc\u00fazska (CNRS) a telekomunika\u010dnej spolo\u010dnosti France Telecom; <\/li>\n<li>E2, vyvinut\u00fd pod z\u00e1\u0161titou najv\u00e4\u010d\u0161ej telekomunika\u010dnej spolo\u010dnosti v Japonsku Nippon Telegraph and Telephone;<\/li>\n<li>FROG, die\u0165a kostarickej spolo\u010dnosti Tecnologia Apropriada Internacional;<\/li>\n<li>HPC, vymyslen\u00fd americk\u00fdm kryptol\u00f3gom a matematikom Richardom Shreppelom z Univerzity v Arizone;<\/li>\n<li>LOKI97, vytvoren\u00fd austr\u00e1lskymi kryptografmi Lawrence Brownom a Jennifer Seberry;<\/li>\n<li>Magenta, vyvinut\u00fd Michaelom Jakobsonom a Klausom Huberom pre nemeck\u00fa telekomunika\u010dn\u00fa spolo\u010dnos\u0165 Deutsche Telekom AG;<\/li>\n<li>MARS od spolo\u010dnosti IBM, na vytvoren\u00ed ktor\u00e9ho sa z\u00fa\u010dastnil Don Coppersmith \u2014 jeden z autorov Lucifer;<\/li>\n<li>RC6, nap\u00edsan\u00fd Ronom Rivestom, Mattom Robshaom a Rayom Sidneym \u0161peci\u00e1lne pre s\u00fa\u0165a\u017e AES;<\/li>\n<li>Rijndael, vytvoren\u00fd Vincentom Rijmenom a Johaanom Daemenom z Katol\u00edckej univerzity v Leuvene;<\/li>\n<li>SAFER+, vyvinut\u00fd kalifornskou spolo\u010dnos\u0165ou Cylink v spolupr\u00e1ci s N\u00e1rodnou akad\u00e9miou vied Arm\u00e9nskej republiky;<\/li>\n<li>Serpent, vytvoren\u00fd Rossom Andersonom, Elim Bihamom a Larsom Knudsenom;<\/li>\n<li>Twofish, vyvinut\u00fd v\u00fdskumnou skupinou Brucea Schneiera na z\u00e1klade kryptografick\u00e9ho algoritmu Blowfish, ktor\u00fd Bruce navrhol u\u017e v roku 1993.<\/li>\n<\/ol>\n<p>\nNa konci prv\u00e9ho kola bolo ur\u010den\u00fdch 5 finalistov, medzi ktor\u00fdmi sa nach\u00e1dzali Serpent, Twofish, MARS, RC6 a Rijndael. \u010clenovia poroty na\u0161li nedostatky prakticky pri ka\u017edom z uveden\u00fdch algoritmov, okrem jedn\u00e9ho. Kto sa stal v\u00ed\u0165azom? Trochu pred\u013a\u017eime nap\u00e4tie a najprv si pozrime hlavn\u00e9 v\u00fdhody a nev\u00fdhody ka\u017ed\u00e9ho z uveden\u00fdch rie\u0161en\u00ed.<\/p>\n<h3>MARS<\/h3>\n<p>\nV pr\u00edpade \"boha vojny\" odborn\u00edci poznamenali identitu postupu \u0161ifrovania a de\u0161ifrovania \u00fadajov, av\u0161ak t\u00fdmto sa jeho v\u00fdhody aj obmedzili. Algoritmus IBM bol prekvapivo n\u00e1ro\u010dn\u00fd, \u010do ho robilo nevhodn\u00fdm na pr\u00e1cu v podmienkach obmedzen\u00fdch zdrojov. Vyskytli sa probl\u00e9my s paraleln\u00fdm spracovan\u00edm. Pre efekt\u00edvnu pr\u00e1cu MARS potreboval hardv\u00e9rov\u00fa podporu 32-bitov\u00e9ho n\u00e1sobenia a rot\u00e1cie na premenn\u00fd po\u010det bitov, \u010do op\u00e4\u0165 obmedzovalo zoznam podporovan\u00fdch platforiem.<\/p>\n<p>MARS sa tie\u017e uk\u00e1zal by\u0165 dos\u0165 zranite\u013en\u00fd vo\u010di \u00fatokom na z\u00e1klade \u010dasu a spotreby energie, mal probl\u00e9my s roz\u0161irovan\u00edm k\u013e\u00fa\u010dov \"za behu\", a jeho prehnan\u00e1 zlo\u017eitost z\u0165a\u017eovala anal\u00fdzu architekt\u00fary a vytv\u00e1rala \u010fal\u0161ie probl\u00e9my v praktickej realiz\u00e1cii. In\u00fdmi slovami, na pozad\u00ed ostatn\u00fdch finalistov MARS vyzeral ako skuto\u010dn\u00fd outsider.<\/p>\n<h3>RC6<\/h3>\n<p>\nAlgoritmus zdedil \u010das\u0165 transform\u00e1ci\u00ed od svojho predchodcu, RC5, ktor\u00fd bol predt\u00fdm d\u00f4kladne presk\u00faman\u00fd, \u010do v kombin\u00e1cii so jednoduchou a preh\u013eadnou \u0161trukt\u00farou robilo jeho transparentnos\u0165 pre odborn\u00edkov \u00faplne zrozumite\u013enou a vyl\u00fa\u010dilo pr\u00edtomnos\u0165 \"zadn\u00fdch vr\u00e1tok\". Navy\u0161e RC6 dosahoval rekordn\u00e9 r\u00fdchlosti spracovania \u00fadajov na 32-bitov\u00fdch platform\u00e1ch, a postupy \u0161ifrovania a de\u0161ifrovania boli v \u0148om realizovan\u00e9 \u00faplne identicky.<\/p>\n<p>Av\u0161ak algoritmus mal rovnak\u00e9 probl\u00e9my ako vy\u0161\u0161ie uveden\u00fd MARS: tu s\u00fa zranite\u013enosti vo\u010di \u00fatokom prostredn\u00edctvom bo\u010dn\u00fdch kan\u00e1lov, z\u00e1vislos\u0165 v\u00fdkonu od podpory 32-bitov\u00fdch oper\u00e1ci\u00ed, ako aj probl\u00e9my s paraleln\u00fdm spracovan\u00edm, roz\u0161\u00edren\u00edm k\u013e\u00fa\u010dov a n\u00e1ro\u010dnos\u0165 na hardv\u00e9rov\u00e9 zdroje. Z tohto d\u00f4vodu nebol vhodn\u00fd na v\u00ed\u0165azstvo.<\/p>\n<h3>Twofish<\/h3>\n<p>\nTwofish sa uk\u00e1zal ako pomerne r\u00fdchly a dobre optimalizovan\u00fd pre pr\u00e1cu na zariadeniach s n\u00edzkym v\u00fdkonom, vynikaj\u00faco zvl\u00e1dol roz\u0161irovanie k\u013e\u00fa\u010dov a pon\u00fakol nieko\u013eko variant implement\u00e1cie, \u010do umo\u017enilo presne ho prisp\u00f4sobi\u0165 konkr\u00e9tnym \u00faloh\u00e1m. Z\u00e1rove\u0148 sa v\u0161ak \u201edve ryby\u201c uk\u00e1zali ako zranite\u013en\u00e9 vo\u010di \u00fatokom po bo\u010dn\u00fdch kan\u00e1loch (predov\u0161etk\u00fdm vo vz\u0165ahu k \u010dasu a spotrebovanej energii), nie ve\u013emi dobre spolupracovali s viacprocesorov\u00fdmi syst\u00e9mami a charakterizovali ich nadmern\u00e1 zlo\u017eitosti, \u010do sa, mimochodom, odrazilo aj na r\u00fdchlosti roz\u0161irovania k\u013e\u00fa\u010da.<\/p>\n<h3>Serpent<\/h3>\n<p>\nAlgoritmus mal jednoduch\u00fa a preh\u013eadn\u00fa \u0161trukt\u00faru, \u010do zna\u010dne u\u013eah\u010dilo jeho audit, nevy\u017eadoval zna\u010dn\u00fd v\u00fdkon hardv\u00e9rovej platformy, podporoval roz\u0161irovanie k\u013e\u00fa\u010dov \u201eza behu\u201c a bol relat\u00edvne \u013eahko modifikovate\u013en\u00fd, \u010d\u00edm sa v\u00fdhodne odli\u0161oval od svojich s\u00faperov. Napriek tomu bol Serpent v z\u00e1sade najpomal\u0161\u00ed medzi finalistami, navy\u0161e sa postupy \u0161ifrovania a de\u0161ifrovania inform\u00e1ci\u00ed v \u0148om radik\u00e1lne l\u00ed\u0161ili a vy\u017eadovali principi\u00e1lne odli\u0161n\u00e9 pr\u00edstupy k implement\u00e1cii.<\/p>\n<h3>Rijndael<\/h3>\n<p>\nRijndael bol mimoriadne bl\u00edzko k ide\u00e1lu: algoritmus \u00faplne splnil po\u017eiadavky NIST, pri\u010dom neustupoval, a celkovo vykazoval v\u00fdrazne lep\u0161ie vlastnosti ako konkurencia. Slab\u00e9 miesta u Rijndaela boli len dve: zranite\u013enos\u0165 vo\u010di \u00fatokom na spotrebu energie pri postupe roz\u0161irovania k\u013e\u00fa\u010da, \u010do je ve\u013emi \u0161pecifick\u00fd scen\u00e1r, a ur\u010dit\u00e9 probl\u00e9my s roz\u0161irovan\u00edm k\u013e\u00fa\u010da \u201eza behu\u201c (tento mechanizmus pracoval bez obmedzen\u00ed iba u dvoch \u00fa\u010dastn\u00edkov \u2014 Serpent a Twofish). Okrem toho odhady expertov nazna\u010duj\u00fa, \u017ee Rijndael mal o nie\u010do men\u0161\u00ed rezervu kryptografickej odolnosti ako Serpent, Twofish a MARS, \u010do v\u0161ak bolo viac ako vyv\u00e1\u017een\u00e9 odolnos\u0165ou vo\u010di preva\u017enej v\u00e4\u010d\u0161ine r\u00f4znych druhov \u00fatokov po bo\u010dn\u00fdch kan\u00e1loch a \u0161irok\u00fdm spektrom variantov implement\u00e1cie.<\/p>\n<p>Kateg\u00f3ria<\/p>\n<p><\/p>\n<p>Serpent<\/p>\n<p><\/p>\n<p>Twofish<\/p>\n<p><\/p>\n<p>MARS<\/p>\n<p><\/p>\n<p>RC6<\/p>\n<p><\/p>\n<p>Rijndael<\/p>\n<p><\/p>\n<p>Kryptografick\u00e1 odolnos\u0165<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>Rezerva kryptografickej odolnosti<\/p>\n<p><\/p>\n<p>++<\/p>\n<p><\/p>\n<p>++<\/p>\n<p><\/p>\n<p>++<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>R\u00fdchlos\u0165 \u0161ifrovania pri softv\u00e9rovej implement\u00e1cii<\/p>\n<p><\/p>\n<p>\u2014<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>R\u00fdchlos\u0165 roz\u0161irovania k\u013e\u00fa\u010da pri softv\u00e9rovej implement\u00e1cii<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u2014<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>Inteligentn\u00e9 karty s ve\u013ek\u00fdm objemom zdrojov<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>\u2014<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>++<\/p>\n<p><\/p>\n<p>Inteligentn\u00e9 karty s obmedzen\u00fdm objemom zdrojov<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>\u2014<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>++<\/p>\n<p><\/p>\n<p>Hardv\u00e9rov\u00e1 implement\u00e1cia (FPGA)<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>\u2014<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>Hardv\u00e9rov\u00e1 implement\u00e1cia (\u0161pecializovan\u00fd \u010dip)<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u2014<\/p>\n<p><\/p>\n<p>\u2014<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>Ochrana pred \u00fatokmi na \u010das vykon\u00e1vania a spotrebovan\u00fa energiu<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u2014<\/p>\n<p><\/p>\n<p>\u2014<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>Ochrana pred \u00fatokmi na spotrebovan\u00fa energiu po\u010das proced\u00fary roz\u0161\u00edrenia k\u013e\u00fa\u010da<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u2014<\/p>\n<p><\/p>\n<p>Ochrana pred \u00fatokmi na spotrebovan\u00fa energiu pri implement\u00e1ci\u00e1ch na smart kart\u00e1ch<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>\u2014<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>Mo\u017enos\u0165 roz\u0161\u00edrenia k\u013e\u00fa\u010da \"za behu\"<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>Existencia variantov implement\u00e1cie (bez straty kompatibility)<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>+<\/p>\n<p><\/p>\n<p>Mo\u017enos\u0165 paraleln\u00fdch v\u00fdpo\u010dtov<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>\u00b1<\/p>\n<p><\/p>\n<p>+<\/p>\n<p>V s\u00fahrne parametrov Rijndael predstihol konkurenciu, \u010do sp\u00f4sobilo, \u017ee v\u00fdsledok fin\u00e1lneho hlasovania bol celkom pravdepodobn\u00fd: algoritmus z\u00edskal presved\u010div\u00e9 v\u00ed\u0165azstvo, ke\u010f dostal 86 hlasov \"za\" a iba 10 \"proti\". Serpent obsadil cenn\u00e9 druh\u00e9 miesto s 59 hlasmi, zatia\u013e \u010do Twofish skon\u010dil na tretej poz\u00edcii, ke\u010f za neho zahlasovalo 31 \u010dlenov poroty. Nasledoval RC6, ktor\u00fd z\u00edskal 23 hlasov, a MARS logicky skon\u010dil na poslednom mieste, ke\u010f dostal len 13 hlasov \"za\" a 83 \"proti\".<\/p>\n<p>2. okt\u00f3bra 2000 bol Rijndael vyhl\u00e1sen\u00fd za v\u00ed\u0165aza s\u00fa\u0165a\u017ee AES, pri\u010dom tradi\u010dne zmenil n\u00e1zov na Advanced Encryption Standard, pod ktor\u00fdm je zn\u00e1my aj dnes. Proces \u0161tandardiz\u00e1cie trval pribli\u017ene rok: 26. novembra 2001 bol AES zaraden\u00fd do zoznamu Feder\u00e1lnych \u0161tandardov spracovania inform\u00e1ci\u00ed s indexom FIPS 197. Nov\u00fd algoritmus bol vysoko ocenen\u00fd aj v NSA, a od j\u00fana 2003 ho N\u00e1rodn\u00e1 bezpe\u010dnostn\u00e1 agent\u00fara USA dokonca uznala za dostato\u010dne spo\u013eahliv\u00fd na zabezpe\u010denie dokumentov kateg\u00f3rie \"pr\u00edsne tajn\u00e9\" s 256-bitov\u00fdm \u0161ifrovan\u00edm.<\/p>\n<h2>Extern\u00e9 \u00falo\u017en\u00e9 zariadenia WD My Book s podporou hardv\u00e9rovej \u0161ifrovania AES-256<\/h2>\n<p>\nV\u010faka kombin\u00e1cii vysokej spo\u013eahlivosti a v\u00fdkonu si pokro\u010dil\u00fd \u0161ifrovac\u00ed \u0161tandard (AES) r\u00fdchlo z\u00edskal celosvetov\u00e9 uznanie a stal sa jedn\u00fdm z najpopul\u00e1rnej\u0161\u00edch algoritmov symetrick\u00e9ho \u0161ifrovania na svete, pri\u010dom je s\u00fa\u010das\u0165ou mnoh\u00fdch kryptografick\u00fdch kni\u017en\u00edc (OpenSSL, GnuTLS, Crypto API Linuxu a \u010fal\u0161\u00edch). V s\u00fa\u010dasnosti sa AES \u0161iroko pou\u017e\u00edva v aplik\u00e1ci\u00e1ch na podnikovej aj pou\u017e\u00edvate\u013eskej \u00farovni a jeho podpora je implementovan\u00e1 vo viacer\u00fdch r\u00f4znych zariadeniach. Konkr\u00e9tne sa hardv\u00e9rov\u00e9 \u0161ifrovanie AES-256 pou\u017e\u00edva vo externe uchov\u00e1van\u00fdch diskoch Western Digital z rodiny My Book na ochranu ulo\u017een\u00fdch d\u00e1t. Po\u010fme sa na tieto zariadenia pozrie\u0165 bli\u017e\u0161ie.<\/p>\n<p><img decoding=\"async\" alt=\"Najlep\u0161\u00ed vo svojej triede: hist\u00f3ria vzniku \u0161tandardu \u0161ifrovania AES\" src=\"\/wp-content\/uploads\/2020\/08\/34206950ac46e6d739c6aaae4cb9733c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nRadov\u00e1 s\u00e9ria desktopov\u00fdch pevn\u00fdch diskov WD My Book obsahuje \u0161es\u0165 modelov s r\u00f4znou kapacitou: 4, 6, 8, 10, 12 a 14 terabajtov, \u010do umo\u017e\u0148uje vybra\u0165 zariadenie, ktor\u00e9 optim\u00e1lne vyhovuje va\u0161im potreb\u00e1m. Predvolene vonkaj\u0161ie HDD pou\u017e\u00edvaj\u00fa s\u00faborov\u00fd syst\u00e9m exFAT, ktor\u00fd zabezpe\u010duje kompatibilitu s \u0161irok\u00fdm spektrom opera\u010dn\u00fdch syst\u00e9mov, vr\u00e1tane Microsoft Windows 7, 8, 8.1 a 10, ako aj Apple macOS verzie 10.13 (High Sierra) a nov\u0161\u00edmi. Pou\u017e\u00edvatelia syst\u00e9mu Linux maj\u00fa mo\u017enos\u0165 pripoji\u0165 disk pomocou ovl\u00e1da\u010da exfat-nofuse.<\/p>\n<p>Pripojenie My Book k po\u010d\u00edta\u010du sa vykon\u00e1va prostredn\u00edctvom vysokor\u00fdchlostn\u00e9ho rozhrania USB 3.0, ktor\u00e9 je sp\u00e4tne kompatibiln\u00e9 s USB 2.0. Na jednej strane to umo\u017e\u0148uje pren\u00e1\u0161a\u0165 s\u00fabory maxim\u00e1lnou mo\u017enou r\u00fdchlos\u0165ou, preto\u017ee prenosov\u00e1 r\u00fdchlos\u0165 USB SuperSpeed dosahuje 5 Gbit\/s (t.j. 640 MB\/s), \u010do je viac ne\u017e dostato\u010dn\u00e9. Z\u00e1rove\u0148 funkcia sp\u00e4tnej kompatibility zabezpe\u010duje podporu prakticky v\u0161etk\u00fdch zariaden\u00ed vydan\u00fdch v posledn\u00fdch 10 rokoch.<\/p>\n<p><img decoding=\"async\" alt=\"Najlep\u0161\u00ed vo svojej triede: hist\u00f3ria vzniku \u0161tandardu \u0161ifrovania AES\" src=\"\/wp-content\/uploads\/2020\/08\/d1200e78db61afdc5c2ed60a58847156.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nAj ke\u010f My Book nevy\u017eaduje in\u0161tal\u00e1ciu dodato\u010dn\u00e9ho softv\u00e9ru v\u010faka technol\u00f3gii automatick\u00e9ho rozpozn\u00e1vania a konfigur\u00e1cie perif\u00e9rnych zariaden\u00ed Plug and Play, predsa odpor\u00fa\u010dame vyu\u017ei\u0165 odborn\u00fd softv\u00e9rov\u00fd bal\u00edk WD Discovery, ktor\u00fd je dod\u00e1van\u00fd s ka\u017ed\u00fdm zariaden\u00edm.<\/p>\n<p><img decoding=\"async\" alt=\"Najlep\u0161\u00ed vo svojej triede: hist\u00f3ria vzniku \u0161tandardu \u0161ifrovania AES\" src=\"\/wp-content\/uploads\/2020\/08\/ccd9e3d7fe0c5071265e840b422859af.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\nS\u00faprava obsahuje nasleduj\u00face aplik\u00e1cie:<\/p>\n<h3>WD Drive Utilities<\/h3>\n<p>\nProgram umo\u017e\u0148uje z\u00edska\u0165 aktu\u00e1lne inform\u00e1cie o stave disku na z\u00e1klade \u00fadajov S.M.A.R.T. a skontrolova\u0165 pevn\u00fd disk na pr\u00edtomnos\u0165 po\u0161koden\u00fdch sektorov. Okrem toho, pomocou Drive Utilities m\u00f4\u017eete r\u00fdchlo zni\u010di\u0165 v\u0161etky ulo\u017een\u00e9 \u00fadaje na va\u0161om My Book: s\u00fabory bud\u00fa nielen vymazan\u00e9, ale aj \u00faplne prep\u00edsan\u00e9 viackr\u00e1t, tak\u017ee ich po dokon\u010den\u00ed proced\u00fary u\u017e nebude mo\u017en\u00e9 obnovi\u0165.<\/p>\n<h3>WD Backup<\/h3>\n<p>\nPou\u017eit\u00edm t\u00e9to utilitky m\u016f\u017eete nastavit z\u00e1lohov\u00e1n\u00ed podle p\u0159edem stanoven\u00e9ho pl\u00e1nu. Je dobr\u00e9 zm\u00ednit, \u017ee WD Backup podporuje spolupr\u00e1ci s Google Drive a Dropbox, a umo\u017e\u0148uje v\u00fdb\u011br libovoln\u00fdch kombinac\u00ed \u201ezdroj-c\u00edl\u201c p\u0159i vytv\u00e1\u0159en\u00ed z\u00e1lohy. T\u00edmto zp\u016fsobem m\u016f\u017eete automaticky p\u0159en\u00e1\u0161et data z My Book do cloudu nebo importovat pot\u0159ebn\u00e9 soubory a slo\u017eky z uveden\u00fdch slu\u017eeb na extern\u00ed disk \u010di lok\u00e1ln\u00ed po\u010d\u00edta\u010d. Krom\u011b toho je k dispozici mo\u017enost synchronizace s \u00fa\u010dtem na soci\u00e1ln\u00ed s\u00edti Facebook, co\u017e umo\u017e\u0148uje automaticky vytv\u00e1\u0159et z\u00e1lohy fotografi\u00ed a videonahr\u00e1vek z va\u0161eho profilu.<\/p>\n<h3>WD Security<\/h3>\n<p>\nPomoc\u00ed t\u00e9to utilitky m\u016f\u017eete omezit p\u0159\u00edstup k disku pomoc\u00ed hesla a \u0159\u00eddit \u0161ifrov\u00e1n\u00ed dat. V\u0161echno, co k tomu pot\u0159ebujete, je zadat heslo (jeho maxim\u00e1ln\u00ed d\u00e9lka m\u016f\u017ee b\u00fdt a\u017e 25 znak\u016f), po kter\u00e9m bude ve\u0161ker\u00e9 informace na disku za\u0161ifrov\u00e1na a p\u0159\u00edstup k ulo\u017een\u00fdm soubor\u016fm z\u00edsk\u00e1 pouze ten, kdo zn\u00e1 k\u00f3dovou fr\u00e1zi. Pro v\u011bt\u0161\u00ed pohodl\u00ed WD Security umo\u017e\u0148uje vytvo\u0159en\u00ed seznamu d\u016fv\u011bryhodn\u00fdch za\u0159\u00edzen\u00ed, p\u0159i jejich\u017e p\u0159ipojen\u00ed se My Book automaticky odblokuje.<\/p>\n<p>Je d\u016fle\u017eit\u00e9 zd\u016fraznit, \u017ee WD Security jen poskytuje pohodln\u00e9 vizu\u00e1ln\u00ed rozhran\u00ed pro spr\u00e1vu kryptografick\u00e9 ochrany, zat\u00edmco \u0161ifrov\u00e1n\u00ed dat je prov\u00e1d\u011bno samotn\u00fdm extern\u00edm diskem na hardwarov\u00e9 \u00farovni. Tento p\u0159\u00edstup zaji\u0161\u0165uje celou \u0159adu d\u016fle\u017eit\u00fdch v\u00fdhod, a to:<\/p>\n<ul>\n<li>za vytv\u00e1\u0159en\u00ed \u0161ifrovac\u00edch kl\u00ed\u010d\u016f odpov\u00edd\u00e1 hardwarov\u00fd gener\u00e1tor n\u00e1hodn\u00fdch \u010d\u00edsel, nikoli gener\u00e1tor pseudon\u00e1hodn\u00fdch \u010d\u00edsel, co\u017e pom\u00e1h\u00e1 dos\u00e1hnout vysok\u00e9 \u00farovn\u011b entropie a zv\u00fd\u0161it jejich kryptografickou odolnost;<\/li>\n<li>b\u011bhem procesu \u0161ifrov\u00e1n\u00ed a de\u0161ifrov\u00e1n\u00ed nejsou kryptografick\u00e9 kl\u00ed\u010de ukl\u00e1d\u00e1ny do opera\u010dn\u00ed pam\u011bti po\u010d\u00edta\u010de, stejn\u011b jako nevznikaj\u00ed do\u010dasn\u00e9 kopie zpracov\u00e1van\u00fdch soubor\u016f ve skryt\u00fdch slo\u017ek\u00e1ch syst\u00e9mov\u00e9ho disku, co\u017e pom\u00e1h\u00e1 minimalizovat pravd\u011bpodobnost jejich zachycen\u00ed;<\/li>\n<li>rychlost zpracov\u00e1n\u00ed soubor\u016f nijak nez\u00e1vis\u00ed na v\u00fdkonu klientsk\u00e9ho za\u0159\u00edzen\u00ed;<\/li>\n<li>po aktivaci ochrany bude \u0161ifrov\u00e1n\u00ed soubor\u016f prob\u00edhat automaticky, \u201eza chodu\u201c, bez nutnosti dal\u0161\u00ed akce ze strany u\u017eivatele.<\/li>\n<\/ul>\n<p>\nV\u0161etky vy\u0161\u0161ie uveden\u00e9 zaru\u010duj\u00fa bezpe\u010dnos\u0165 \u00fadajov a prakticky \u00faplne vylu\u010duj\u00fa pravdepodobnos\u0165 kr\u00e1de\u017ee d\u00f4vern\u00fdch inform\u00e1ci\u00ed. S oh\u013eadom na \u010fal\u0161ie mo\u017enosti \u00falo\u017eiska rob\u00ed My Book jedn\u00fdm z najlep\u0161\u00edch chr\u00e1nen\u00fdch \u00falo\u017e\u00edsk dostupn\u00fdch na ruskom trhu.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/wd\/blog\/513846\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>C \u043c\u0430\u044f 2020 \u0433\u043e\u0434\u0430 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438 \u0441\u0442\u0430\u0440\u0442\u043e\u0432\u0430\u043b\u0438 \u043e\u0444\u0438\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0435 \u043f\u0440\u043e\u0434\u0430\u0436\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0432\u0438\u043d\u0447\u0435\u0441\u0442\u0435\u0440\u043e\u0432 WD My Book, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0445 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 AES \u0441 256-\u0431\u0438\u0442\u043d\u044b\u043c \u043a\u043b\u044e\u0447\u043e\u043c. \u0412 \u0441\u0438\u043b\u0443 \u0437\u0430\u043a\u043e\u043d\u043e\u0434\u0430\u0442\u0435\u043b\u044c\u043d\u044b\u0445 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439, \u0440\u0430\u043d\u0435\u0435 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043c\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u0441\u0442\u0438 \u043b\u0438\u0448\u044c \u0432 \u0437\u0430\u0440\u0443\u0431\u0435\u0436\u043d\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u043c\u0430\u0433\u0430\u0437\u0438\u043d\u0430\u0445 \u044d\u043b\u0435\u043a\u0442\u0440\u043e\u043d\u0438\u043a\u0438 \u043b\u0438\u0431\u043e \u043d\u0430 \u00ab\u0441\u0435\u0440\u043e\u043c\u00bb \u0440\u044b\u043d\u043a\u0435, \u043e\u0434\u043d\u0430\u043a\u043e \u0442\u0435\u043f\u0435\u0440\u044c \u043e\u0431\u0437\u0430\u0432\u0435\u0441\u0442\u0438\u0441\u044c \u0437\u0430\u0449\u0438\u0449\u0435\u043d\u043d\u044b\u043c \u043d\u0430\u043a\u043e\u043f\u0438\u0442\u0435\u043b\u0435\u043c \u0441 \u0444\u0438\u0440\u043c\u0435\u043d\u043d\u043e\u0439 3-\u043b\u0435\u0442\u043d\u0435\u0439 \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0435\u0439 \u043e\u0442 Western Digital \u043c\u043e\u0436\u0435\u0442 \u043b\u044e\u0431\u043e\u0439 \u0436\u0435\u043b\u0430\u044e\u0449\u0438\u0439. [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":90846,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-90845","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.4 - aioseo.com -->\n\t<meta name=\"description\" content=\"C \u043c\u0430\u044f 2020 \u0433\u043e\u0434\u0430 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/luchshij-v-svoem-klasse-istoriya-poyavleniya-standarta-shifrovaniya-aes\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.4\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041b\u0443\u0447\u0448\u0438\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u043a\u043b\u0430\u0441\u0441\u0435: \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f AES | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"C \u043c\u0430\u044f 2020 \u0433\u043e\u0434\u0430 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/luchshij-v-svoem-klasse-istoriya-poyavleniya-standarta-shifrovaniya-aes\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-06T23:42:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-06T23:42:00+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Najlep\u0161\u00ed vo svojej triede: hist\u00f3ria vzniku \u0161tandardu \u0161ifrovania AES | ProHoster","description":"Od m\u00e1ja 2020 v Rusku.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/luchshij-v-svoem-klasse-istoriya-poyavleniya-standarta-shifrovaniya-aes","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041b\u0443\u0447\u0448\u0438\u0439 \u0432 \u0441\u0432\u043e\u0435\u043c \u043a\u043b\u0430\u0441\u0441\u0435: \u0438\u0441\u0442\u043e\u0440\u0438\u044f \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f AES | ProHoster","og:description":"C \u043c\u0430\u044f 2020 \u0433\u043e\u0434\u0430 \u0432 \u0420\u043e\u0441\u0441\u0438\u0438.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/luchshij-v-svoem-klasse-istoriya-poyavleniya-standarta-shifrovaniya-aes","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-06T23:42:00+00:00","article:modified_time":"2020-08-06T23:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"90845","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:40:04","updated":"2022-09-27 21:51:30","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/90845","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=90845"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/90845\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/90846"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=90845"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=90845"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=90845"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}