{"id":107816,"date":"2023-04-12T12:48:18","date_gmt":"2023-04-12T10:48:18","guid":{"rendered":"https:\/\/prohoster.info\/?p=107816"},"modified":"2023-04-13T08:25:14","modified_gmt":"2023-04-13T06:25:14","slug":"vypusk-kriptograficheskoj-biblioteki-botan-3-0-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-botan-3-0-0","title":{"rendered":"L\u00ebshimi i bibliotek\u00ebs kriptografike Botan 3.0.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
\u00cbsht\u00eb n\u00eb dispozit\u00eb nj\u00eb version i bibliotek\u00ebs kriptografike Botan 3.0.0, e cila p\u00ebrdoret n\u00eb projektin NeoPG, nj\u00eb fork i GnuPG 2. Biblioteka ofron nj\u00eb koleksion t\u00eb madh t\u00eb primitiveve t\u00eb gatshme q\u00eb p\u00ebrdoren n\u00eb protokollin TLS, n\u00eb certifikatat X.509, n\u00eb algoritmet AEAD, n\u00eb modulat TPM, PKCS#11, n\u00eb hashimin e fjal\u00ebkalimeve dhe n\u00eb kriptografin\u00eb post-kvante (n\u00ebnshkrime bazuar n\u00eb hash dhe negociata \u00e7el\u00ebsish t\u00eb bazuara n\u00eb McEliece). Biblioteka \u00ebsht\u00eb shkruar n\u00eb gjuh\u00ebn C++ dhe ofrohet n\u00ebn licenc\u00ebn BSD. <\/p>\n
Ndryshimet n\u00eb publikimin e ri p\u00ebrfshijn\u00eb: <\/p>\n
\n
N\u00eb baz\u00ebn e kodit lejohet p\u00ebrdorimi i standardit C++20 (m\u00eb par\u00eb p\u00ebrdorej C++11), p\u00ebrkat\u00ebsisht jan\u00eb rritur k\u00ebrkesat p\u00ebr kompajler\u00ebt \u2014 p\u00ebr nd\u00ebrtimin tani k\u00ebrkohen t\u00eb pakt\u00ebn GCC 11, Clang 14 ose MSVC 2022. \u00cbsht\u00eb nd\u00ebrprer\u00eb mb\u00ebshtetje p\u00ebr kompajler\u00ebt HP dhe Pathscale, si dhe p\u00ebr projektet Google NaCL dhe IncludeOS.\n
Jan\u00eb implementuar shum\u00eb ndryshime q\u00eb d\u00ebmtojn\u00eb p\u00ebrputhshm\u00ebrin\u00eb prapa. Jan\u00eb p\u00ebrjashtuar shum\u00eb skedar\u00eb t\u00eb vjet\u00ebr, si\u00e7 jan\u00eb ato specifike p\u00ebr disa algoritme (aes.h etj.). Jan\u00eb p\u00ebrjashtuar implementimet e funksioneve dhe algoritmeve q\u00eb ishin shpallur m\u00eb par\u00eb t\u00eb vjetra (CAST-256, MISTY1, Kasumi, DESX, XTEA, PBKDF1, MCEIES, CBC-MAC, Tiger, NEWHOPE, CECPQ1). Gjat\u00eb formimit t\u00eb entropis\u00eb p\u00ebr gjeneratorin e numrave t\u00eb rastit e b\u00ebhet ndalimi i p\u00ebrdorimit t\u00eb \/proc dhe \/dev\/random. Jan\u00eb p\u00ebrjashtuar disa klas\u00eb (p.sh., Data_Store), struktura dhe enumeracione nga API. Sa m\u00eb shum\u00eb q\u00eb \u00ebsht\u00eb e mundur, \u00ebsht\u00eb ndaluar kthimi dhe p\u00ebrdorimi i treguesve t\u00eb past\u00ebr.\n
\u00cbsht\u00eb shtuar mb\u00ebshtetje p\u00ebr protokollin TLS 1.3. \u00cbsht\u00eb ndalur mb\u00ebshtetje p\u00ebr TLS 1.0, TLS 1.1 dhe DTLS 1.0. Jan\u00eb hequr nga implementimi i TLS mb\u00ebshtetje p\u00ebr grupet e \u00e7el\u00ebsve DSA, SRP, SEED, AES-128 OCB, CECPQ1, DHE_PSK dhe Camellia CBC, enkriptim anonim, hash SHA-1.\n
\u00cbsht\u00eb shtuar mb\u00ebshtetje p\u00ebr algoritmin e kriptografis\u00eb post-kvantike Kyber, i q\u00ebndruesh\u00ebm ndaj sulmeve nga kompjuter\u00ebt kuantik\u00eb.\n
\u00cbsht\u00eb shtuar mb\u00ebshtetje p\u00ebr algoritmin e kriptografis\u00eb post-kvantike Dilithium p\u00ebr pun\u00ebn me n\u00ebnshkrime digjitale.\n
\u00cbsht\u00eb shtuar mb\u00ebshtetje p\u00ebr hashing n\u00eb form\u00ebn e pik\u00ebs mbi kurb\u00ebn eliptike, duke p\u00ebrdorur teknik\u00ebn SSWU (draft-irtf-cfrg-hash-to-curve).\n
Propozohet nj\u00eb nd\u00ebrfaqe e re programimi T::new_object, e cila kthen unique_ptr n\u00eb vend t\u00eb treguesit t\u00eb past\u00ebr 'T*'.\n
Shtuar funksione dhe API t\u00eb reja: X509_DN::DER_encode, Public_Key::get_int_field, ideal_granularity, requires_entire_message, SymmetricAlgorithm::has_keying_material. Shtuar nj\u00eb grup t\u00eb madh funksionesh p\u00ebr p\u00ebrdorim n\u00eb kodin n\u00eb gjuh\u00ebn C (C89).\n
Implementimi i algoritmit Argon2 p\u00ebrdor instrukcione AVX2.\n
Reduktuar madh\u00ebsia e tabllave n\u00eb implementimet e algoritmeve Camellia, ARIA, SEED, DES dhe Whirlpool.\n
Propozohet nj\u00eb implementim i ri i DES\/3DES, i mbrojtur nga shumic\u00eb klasash sulmesh p\u00ebrmes kanaleve t\u00eb jashtme, q\u00eb vler\u00ebsojn\u00eb gjendjen e caches.\n
Implementimi i SHACAL2 \u00ebsht\u00eb optimizuar p\u00ebr sisteme t\u00eb bazuara n\u00eb arkitekturat ARMv8 dhe POWER.\n
Kodi p\u00ebr llogaritjen e bit\u00ebve t\u00eb paritetit, transformimin bcrypt\/base64 dhe p\u00ebrcaktimin e llojit t\u00eb vargut ASN.1 \u00ebsht\u00eb liruar nga k\u00ebrkimi n\u00eb tabela dhe tani nuk varet nga t\u00eb dh\u00ebnat e p\u00ebrpunuara (kryhet n\u00eb koh\u00eb t\u00eb konstant\u00eb). <\/ul>\n