Makore matatu nehafu kubva pakuumbwa kwebazi rekupedzisira rakakosha, kuburitswa kutsva kweGnuPG 2.3.0 (GNU Privacy Guard) Toolkit yakaunzwa, inoenderana neOpenPGP (RFC-4880) uye S/MIME zviyero, uye kupa. zvishandiso zve encryption yedata uye kushanda nemasiginecha emagetsi, kiyi manejimendi uye kuwana kune veruzhinji makiyi zvitoro.
GnuPG 2.3.0 inomisikidzwa seyekutanga kuburitswa kweiyo codebase nyowani inosanganisira zvichangobva kuitika. GnuPG 2.2 inoonekwa sebazi rakagadzikana, rakanakira kushandiswa kwese, uye richatsigirwa kusvika angangoita 2024. GnuPG 1.4 inoramba ichichengetedzwa seyechinyakare nhevedzano inoshandisa zvishoma zviwanikwa, inokodzera yakamisikidzwa masisitimu, uye inoenderana nenhaka encryption algorithms.
Hunhu hutsva hweGnuPG 2.3.0:
- Yekuyedza kumashure maitiro ane kiyi dhatabhesi kuitiswa inorongwa, uchishandisa iyo SQLite DBMS yekuchengetedza uye kuratidza nekukurumidza kutsvaga makiyi. Kugonesa nzvimbo itsva, unofanira kugonesa "use-keyboxd" sarudzo mu gpg.conf uye gpgsm.conf.
- Iyo itsva gpg-kadhi yekushandisa yawedzerwa, iyo inogona kushandiswa seinochinjika interface kune ese anotsigirwa smart kadhi mhando.
- Yakawedzera tpm2d yekumashure maitiro ayo anobvumidza iwe kushandisa TPM 2.0 machipi kuchengetedza zvakavanzika makiyi uye kuita encryption kana dijitari siginecha mashandiro padivi reTPM.
- Iwo default algorithms emakiyi eruzhinji ari ed25519 uye cv25519.
- gpg haichashandisi 64-bit block size algorithms ye encryption. Kushandiswa kwe3DES kunorambidzwa, uye AES inoziviswa seyakanyanya kutsigirwa algorithm. Kudzima kurambidzwa, unogona kushandisa "--bvumira-yekare-cipher-algos" sarudzo.
- Yakawedzerwa rutsigiro rweAEAD block encryption modes OCB uye EAX.
- Tsigiro yevhezheni 5 yemakiyi uye masiginecha edhijitari anopihwa.
- Yakawedzera rutsigiro rweX448 curves (ed448, cv448).
- Inotenderwa kushandisa mazita emapoka muzvinyorwa zvakakosha.
- Mu gpg, mhedzisiro yekusimbisa ikozvino zvinoenderana ne "--sender" sarudzo uye ID yemusiki wemasaini.
- Yakawedzerwa "--chuid" sarudzo kune gpg, gpgsm, gpgconf, gpg-kadhi uye gpg-batanidza-agent kuti uchinje mushandisi ID.
- Yakawedzerwa "--full-timestrings" (zuva uye nguva yakabuda), "--force-sign-key" uye "--no-auto-trust-new-key" zvingasarudzwa kugpg.
- Iyo legacy PKA kiyi yekuwana nzira yakamiswa uye sarudzo dzine chekuita nayo dzabviswa.
- Yakawedzera kugona kutumira kunze Ed448 makiyi eSSH kune gpg.
- gpgsm inowedzera kutsigirwa kweECC uye kugona kugadzira zvitupa zveEdDSA.
- Mumiririri anobvumira kushandiswa kwe "Label:" kukosha mukiyi faira kugadzirisa iyo PIN yekuchimbidza. Yakaitwa tsigiro ye ssh-agent edzedzero yezvakasiyana nharaunda.
- Scd yakavandudza rutsigiro rwevaverengi vemakadhi akawanda uye tokeni. Iko kugona kushandisa akati wandei maapplication ane chaiyo smart kadhi kwaitwa. Yakawedzerwa rutsigiro rwemakadhi ePIV, Telesec Siginecha Makadhi v2.0 uye Rohde&Schwarz Cybersecurity. Yakawedzera sarudzo nyowani "--application-priority" uye "--pcsc-yakagoverwa".
- Iyo symcryptrun utility yakabviswa (yakare yakaputirwa pamusoro peiyo kunze Chiasmus utility.
- PaWindows papuratifomu, kutsigirwa kwakazara kweUnicode kunoitwa pamutsetse wekuraira.
Source: opennet.ru