{"id":99236,"date":"2021-02-22T22:22:43","date_gmt":"2021-02-22T20:22:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov"},"modified":"2021-02-22T22:22:43","modified_gmt":"2021-02-22T20:22:43","slug":"vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","title":{"rendered":"Vydanie passwdqc 2.0.0 s podporou extern\u00fdch filtrov","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Bola vydan\u00e1 nov\u00e1 verzia passwdqc \u2014 s\u00fabor n\u00e1strojov na kontrolu zlo\u017eitosti hesiel a heslov\u00fdch fr\u00e1z, ktor\u00e1 zah\u0155\u0148a modul pam_passwdqc, programy pwqcheck, pwqfilter (pridan\u00fd v tejto verzii) a pwqgen na manu\u00e1lne pou\u017eitie alebo zo skriptov, ako aj kni\u017enicu libpasswdqc. Podporovan\u00e9 s\u00fa syst\u00e9my s PAM (v\u00e4\u010d\u0161ina Linuxu, FreeBSD, DragonFly BSD, Solaris, HP-UX) aj bez PAM (je podporovan\u00e9 rozhranie passwordcheck v OpenBSD, prid\u00e1va sa obal pre pou\u017eitie pwqcheck z PHP, existuje platen\u00e1 verzia pre Windows a programy a kni\u017enica m\u00f4\u017eu by\u0165 pou\u017eit\u00e9 aj na in\u00fdch syst\u00e9moch). <\/p>\n

V porovnan\u00ed s predch\u00e1dzaj\u00facimi verziami bola pridan\u00e1 podpora extern\u00fdch s\u00faborov na filtrovanie hesiel, vr\u00e1tane bin\u00e1rnych, ktor\u00e9 aktu\u00e1lne predstavuj\u00fa implement\u00e1ciu vylep\u0161en\u00e9ho kukuri\u010dn\u00e9ho filtra. Tak\u00fdto filter zaru\u010dene neprejde \u017eiadne zak\u00e1zan\u00e9 heslo, ale m\u00f4\u017ee ob\u010das vies\u0165 k falo\u0161n\u00fdm poplachom, ktor\u00fdch pravdepodobnos\u0165 je pri pou\u017eit\u00fdch nastaveniach a algoritmoch v passwdqc zanedbate\u013ene mal\u00e1. Kontrola hesla na pr\u00edtomnos\u0165 vo filtri si vy\u017eaduje maxim\u00e1lne dva n\u00e1hodn\u00e9 pr\u00edstupy na \u010d\u00edtanie z disku, \u010do je ve\u013emi r\u00fdchle a vo v\u0161eobecnosti nesp\u00f4sobuje nadmern\u00e9 za\u0165a\u017eenie. servera<\/a>. <\/p>\n

Na vytv\u00e1ranie a pr\u00e1cu s bin\u00e1rnymi filtrami v passwdqc bola pridan\u00e1 aplik\u00e1cia pwqfilter. Mo\u017ee vytvori\u0165 filter bu\u010f zo zoznamu samotn\u00fdch hesiel, alebo z ich hashov MD4 alebo NTLM. Podpora hashov NTLM umo\u017e\u0148uje importova\u0165 hesl\u00e1 zo zoznamu HIBP (Pwned Passwords), distribuovan\u00e9ho v tejto forme. Do optimaliz\u00e1cie pwqfilteru z h\u013eadiska r\u00fdchlosti, kompaktnosti z\u00edskan\u00fdch filtrov a \u00farovne falo\u0161n\u00fdch poplachov bolo vlo\u017een\u00e9 ve\u013ea pr\u00e1ce. Napr\u00edklad vytvorenie kukuri\u010dn\u00e9ho filtra s koeficientom za\u0165a\u017eenia 98% z s\u00faboru pwned-passwords-ntlm-ordered-by-hash-v7.txt s ve\u013ekos\u0165ou 21 GiB (22 GB) a obsahuj\u00faceho viac ako 613 mili\u00f3nov riadkov trv\u00e1 pribli\u017ene 8 min\u00fat na procesore Core i7-4770K. Vytvoren\u00fd filter zaber\u00e1 2.3 GiB (2.5 GB) a m\u00e1 \u00farove\u0148 falo\u0161n\u00fdch poplachov pribli\u017ene 1 na 1.15 miliardy. Pri ni\u017e\u0161om cie\u013eovom koeficiente za\u0165a\u017eenia m\u00f4\u017ee by\u0165 filter vytvoren\u00fd omnoho r\u00fdchlej\u0161ie a bude ma\u0165 e\u0161te ni\u017e\u0161iu \u00farove\u0148 falo\u0161n\u00fdch poplachov, ale jeho ve\u013ekos\u0165 bude v\u00e4\u010d\u0161ia. <\/p>\n

passwdqc ve\u013emi dobre zvl\u00e1da zabr\u00e1ni\u0165 slab\u00fdm hesl\u00e1m a bez pou\u017eitia extern\u00fdch s\u00faborov. Ich pou\u017eitie m\u00f4\u017ee zv\u00fd\u0161i\u0165 efektivitu passwdqc e\u0161te viac a pritom takmer nesp\u00f4sobova\u0165 pou\u017e\u00edvate\u013eom \u010fal\u0161ie \u0165a\u017ekosti, alebo m\u00f4\u017ee povoli\u0165 oslabenie in\u00fdch obmedzen\u00ed. Kontrola hesiel vyberan\u00fdch pou\u017e\u00edvate\u013emi pod\u013ea zn\u00e1mych \u00fanikov sa odpor\u00fa\u010da NIST. Pre projekt Openwall je to potenci\u00e1lna pr\u00edle\u017eitos\u0165 financovania v\u00fdvoja passwdqc (a nielen) prostredn\u00edctvom predaja hotov\u00fdch filtrov, pri\u010dom nezabra\u0148uje pou\u017e\u00edvate\u013eom vytv\u00e1ra\u0165 filtre samostatne pomocou programu pwqfilter vydan\u00e9ho pod slobodnou licenciou. <\/p>\n

pwqfilter pracuje s \u013eubovo\u013en\u00fdmi re\u0165azcami a m\u00f4\u017ee by\u0165 aplikovan\u00fd namiesto grep na mnoh\u00e9 \u00fa\u010dely, dokonca aj nez\u00e1visl\u00e9 na hesl\u00e1ch a bezpe\u010dnosti. Vzh\u013eadom na to m\u00e1 pwqfilter nieko\u013eko mo\u017enost\u00ed podobn\u00fdch t\u00fdm, ktor\u00e9 existuj\u00fa v grep, vyh\u00fdba sa pou\u017e\u00edvaniu n\u00e1zvov mo\u017enost\u00ed, ktor\u00e9 by boli v rozpore s existuj\u00facimi v grep, a pou\u017e\u00edva rovnak\u00e9 n\u00e1vratov\u00e9 k\u00f3dy ako v grep. <\/p>\n

Pre \u00falohy, kde s\u00fa falo\u0161n\u00e9 poplachy mimoriadne ne\u017eelan\u00e9, m\u00f4\u017ee by\u0165 ich \u00farove\u0148 zn\u00ed\u017een\u00e1 napr\u00edklad na jednu na kvintili\u00f3n (mili\u00f3n mili\u00e1rd) pri koeficiente za\u0165a\u017eenia a\u017e 44%. (Klasick\u00fd kukuri\u010dn\u00fd filter ned\u00e1va tak\u00e9 v\u00fdznamn\u00e9 zn\u00ed\u017eenie \u00farovne falo\u0161n\u00fdch poplachov pri zni\u017eovan\u00ed koeficientu za\u0165a\u017eenia. V passwdqc sa to dosahuje v\u010faka vylep\u0161eniu algoritmu).
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f passwdqc — \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0440\u0430\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c pam_passwdqc, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b pwqcheck, pwqfilter (\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438) \u0438 pwqgen \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0438\u043b\u0438 \u0438\u0437 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libpasswdqc. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 PAM (\u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX), \u0442\u0430\u043a \u0438 \u0431\u0435\u0437 PAM (\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 passwordcheck […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99236","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Vydanie passwdqc 2.0.0 s podporou extern\u00fdch filtrov | ProHoster","description":"Bola vydan\u00e1 nov\u00e1 verzia passwdqc - s\u00fapravy n\u00e1strojov na kontrolu zlo\u017eitosti hesiel a heseln\u00fdch fr\u00e1z, ktor\u00e1 obsahuje modul pam_passwdqc, programy pwqcheck, pwqfilter (pridan\u00fd v tejto verzii) a pwqgen.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a passwdqc 2.0.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 | ProHoster","og:description":"\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f passwdqc - \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0440\u0430\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c pam_passwdqc, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b pwqcheck, pwqfilter (\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438) \u0438 pwqgen \u0434\u043b\u044f.","og:url":"https:\/\/prohoster.info\/sk\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-02-22T20:22:43+00:00","article:modified_time":"2021-02-22T20:22:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99236","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[],"defaultGraph":"","defaultPostTypeGraph":""},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:53:59","updated":"2026-02-22 15:29:50","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99236","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=99236"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99236\/revisions"}],"predecessor-version":[{"id":162219,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/99236\/revisions\/162219"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=99236"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=99236"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=99236"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}