Ua poloka e GitHub ki SSH na gaosia e faʻaaoga ai le faletusi autu

GitHub ua poloka SSH ki mo tagata fa'aoga Git clients o lo'o fa'aogaina le keypair JavaScript library e fa'atupu ai ki. Mo se faʻataʻitaʻiga, o ki o le Git client GitKraken na poloka. O le faʻaletonu e taʻitaʻia ai le faʻatupuina o ki RSA vaʻaia ona o se mea sese e faʻaitiitia ai le lelei o le entropy pe a faʻatupuina se faasologa faʻafuaseʻi mo ki. O le mataupu na faʻamautuina i le keypair 1.0.4 ma GitKraken 8.0.1 faʻasalalauga.

O le mafuaʻaga o le faʻafitauli o le faʻaogaina lea o le "b.putByte(String.fromCharCode(next & 0xFF))" valaau i le taimi o le faʻavaeina autu, e ui lava i le mea moni na toe valaʻauina le auala maiCharCode i le auala putByte. Vala'au maiCharCode faalua ("String.fromCharCode( String.fromCharCode(next & 0xFF)") na mafua ai le tele o le entropy buffer ua tumu i zeros, i.e. o le ki na faʻavaeina i luga o faʻamaumauga "faʻafuaseʻi", 97% e aofia ai zeros.

puna: opennet.ru

Faaopoopo i ai se faamatalaga