{"id":112077,"date":"2023-12-08T15:10:14","date_gmt":"2023-12-08T13:10:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/avtor-gnupg-osnoval-librepgp-fork-standarta-openpgp"},"modified":"2023-12-08T15:10:14","modified_gmt":"2023-12-08T13:10:14","slug":"avtor-gnupg-osnoval-librepgp-fork-standarta-openpgp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/avtor-gnupg-osnoval-librepgp-fork-standarta-openpgp","title":{"rendered":"Autori i GnuPG themeloi LibrePGP, nj\u00eb fork i standardit OpenPGP","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Werner Koch, zhvilluesi kryesor dhe krijuesi i projektit GnuPG (GNU Privacy Guard), themeloi projektin LibrePGP, i p\u00ebrqendruar n\u00eb zhvillimin e specifikacionit t\u00eb azhurnuar, alternativ p\u00ebr standardin OpenPGP. Forku u krijua si p\u00ebrgjigje ndaj ndryshimeve t\u00eb propozuara nga grupi i pun\u00ebs IETF p\u00ebr t'u futur n\u00eb azhurnimin e ardhsh\u00ebm t\u00eb specifikacionit OpenPGP (RFC-4880) dhe u perceptua nga Koch si shqet\u00ebsuese n\u00eb aspektin e ruajtjes s\u00eb kompatibilitetit dhe siguris\u00eb. Zhvilluesit q\u00eb mb\u00ebshtet\u00ebn forkun nga projektet GnuPG, RNP (implementimi OpenPGP nga Thunderbird) dhe Gpg4win kan\u00eb frik\u00eb se ndryshimet e propozuara do t\u00eb ishin letale p\u00ebr implementimet ekzistuese t\u00eb aplikacioneve t\u00eb bazuara n\u00eb OpenPGP, t\u00eb cil\u00ebt p\u00ebrdoruesit e tyre presin stabilitetin e specifikacionit n\u00eb nj\u00eb perspektiv\u00eb afatgjat\u00eb dhe nuk jan\u00eb t\u00eb gatsh\u00ebm t\u00eb p\u00ebsojn\u00eb ndryshime q\u00eb d\u00ebmtojn\u00eb kompatibilitetin. <\/p>\n
LibrePGP p\u00ebrfshin p\u00ebrmir\u00ebsime t\u00eb dobishme, t\u00eb zhvilluara n\u00eb vitet e fundit p\u00ebr versionin e ardhsh\u00ebm t\u00eb specifikacionit OpenPGP, por p\u00ebrjashton ndryshimet q\u00eb kan\u00eb ndikim negativ n\u00eb ruajtjen e kompatibilitetit. P\u00ebr shembull, krahasuar me standardin aktual RFC-4880, LibrePGP pranon mund\u00ebsit\u00eb si: <\/p>\n
\n
Mb\u00ebshtetje p\u00ebr algoritmin e enkriptimit Camellia (RFC-5581),\n
Zgjatjet ECC (Kriptografia me Kurba Eliptike) p\u00ebr OpenPGP (RFC-6637).\n
Mb\u00ebshtetje e detyrueshme p\u00ebr hash SHA2-256 (SHA-1 dhe MD5 jan\u00eb klasifikuar si t\u00eb pa rekomanduara, nd\u00ebrsa mund\u00ebsia p\u00ebr dekriptimin e t\u00eb dh\u00ebnave pa verifikimin e integritetit \u00ebsht\u00eb klasifikuar si plot\u00ebsisht e pasakt\u00eb).\n
Rritja e madh\u00ebsis\u00eb s\u00eb shenj\u00ebs s\u00eb kontrollit (fingerprint) deri n\u00eb 256 bit.\n
Mb\u00ebshtetje p\u00ebr skemat e n\u00ebnshkrimeve digjitale EdDSA dhe kurbat eliptike BrainpoolP256r1, BrainpoolP384r1, BrainpoolP512r1, Ed25519, Curve25519, Ed488 dhe X448.\n
Mb\u00ebshtetje p\u00ebr algoritmin CRYSTALS-Kyber, i q\u00ebndruesh\u00ebm ndaj sulmeve nga kompjuter\u00ebt kuantik\u00eb.\n
Zbatimi i versionit t\u00eb pest\u00eb t\u00eb formatit t\u00eb n\u00ebnshkrimeve digjitale me mbrojtje t\u00eb metadatat.\n
Mb\u00ebshtetje p\u00ebr n\u00ebnpaketat e zgjeruara me n\u00ebnshkrime digjitale. <\/ul>\n
Elementet kryesore t\u00eb kritik\u00ebs ndaj specifikacionit t\u00eb ri OpenPGP: <\/p>\n
\n
Grupi i pun\u00ebs IETF p\u00ebrkundrazi, p\u00ebrve\u00e7 p\u00ebrmir\u00ebsimit gradual t\u00eb specifikacionit, p\u00ebrpiqet t\u00eb shpik\u00eb p\u00ebrs\u00ebri standardin dhe t\u00eb b\u00ebj\u00eb ndryshime t\u00eb m\u00ebdha q\u00eb d\u00ebmtojn\u00eb p\u00ebrputhshm\u00ebrin\u00eb.\n
Implementimi i mb\u00ebshtetjes p\u00ebr m\u00ebnyr\u00ebn simetrike t\u00eb enkriptimit GCM (Galois\/Counter Mode), e cila \u00ebsht\u00eb e v\u00ebshtir\u00eb p\u00ebr t\u2019u realizuar si\u00e7 duhet, duke injoruar n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb m\u00ebnyr\u00ebn OCB (Offset Codebook Mode), p\u00ebr t\u00eb cil\u00ebn patentat kan\u00eb skaduar disa vite m\u00eb par\u00eb.\n
Shtimi i paketave opsionale me mbushje t\u00eb rast\u00ebsishme p\u00ebr t\u00eb mbrojtur nga analizimi i trafikut. Sipas krijuesve t\u00eb LibrePGP, paketat e tilla me mbushje t\u00eb rast\u00ebsishme fillestare t\u00eb pa verifikueshme krijojn\u00eb k\u00ebrc\u00ebnim p\u00ebr p\u00ebrdorimin e kanaleve t\u00eb fshehta t\u00eb transmetimit t\u00eb t\u00eb dh\u00ebnave dhe p\u00ebr shmangien e sistemeve p\u00ebr parandalimin e rrjedhjeve t\u00eb t\u00eb dh\u00ebnave. M\u00eb par\u00eb, ideja e p\u00ebrfshirjes s\u00eb mbushjes \u00ebsht\u00eb refuzuar si nj\u00eb objekt q\u00eb p\u00ebrket nivelit t\u00eb aplikacionit, jo atij t\u00eb enkriptimit.\n
P\u00ebrdorimi i nj\u00eb skeme t\u00eb modifikuar t\u00eb enkriptimit ECDH (ndryshimi i formatit OID), n\u00eb vend t\u00eb p\u00ebrdorimit t\u00eb variantit t\u00eb p\u00ebrshkruar n\u00eb RFC-6637 dhe t\u00eb implementuar n\u00eb PGP dhe GnuPG.\n
Heqja e disa mund\u00ebsive t\u00eb p\u00ebrdorura n\u00eb praktik\u00eb, si\u00e7 \u00ebsht\u00eb metoda klasike p\u00ebr t\u00eb revokuar \u00e7el\u00ebsat, flagu 'm' p\u00ebr sh\u00ebnimin e t\u00eb dh\u00ebnave MIME dhe flagu 't' p\u00ebr ndarjen e t\u00eb dh\u00ebnave tekstuale nga ato binar\u00eb (flagut 't' i ka z\u00ebn\u00eb vendi flagu 'u' p\u00ebr tekstin n\u00eb kodimin UTF-8).\n
Refuzimi p\u00ebr t\u00eb p\u00ebrfshir\u00eb n\u00eb formatin e ri t\u00eb n\u00ebnshkrimeve mbrojtjen e t\u00eb dh\u00ebnave meta t\u00eb skedarit t\u00eb n\u00ebnshkruar (p.sh., mund t\u00eb ndryshohet emri i skedarit pa e shkelur n\u00ebnshkrimin).\n
Nj\u00eb mund\u00ebsi e dyshimt\u00eb p\u00ebr shtimin e 'krip\u00ebs' n\u00eb n\u00ebnshkrime (Salted signature) p\u00ebr t\u00eb forcuar mbrojtjen nga sulmet e kolizionit me nj\u00eb prefiks t\u00eb caktuar. Vlera me krip\u00eb mund t\u00eb p\u00ebrdoret si nj\u00eb kanal i fshehur q\u00eb nuk mund t\u00eb fiket p\u00ebr transferimin e 32 byte t\u00eb dh\u00ebnash n\u00eb n\u00ebnshkrim.\n
Zhvendosja e standardit p\u00ebr p\u00ebrdorim kryesor n\u00eb komunikimin online, duke injoruar nevojat p\u00ebr ruajtjen afatgjat\u00eb t\u00eb t\u00eb dh\u00ebnave. <\/ul>\n
P\u00ebrkrah\u00ebsit e OpenPGP tashm\u00eb kan\u00eb publikuar kritika mbi kritikat. Si rezultat, n\u00ebse nuk do t\u00eb arrij\u00eb t\u00eb gjendet nj\u00eb kompromis, ndarja mund t\u00eb \u00e7oj\u00eb n\u00eb rritjen e moskompatibiliteteve n\u00eb realizimet e OpenPGP\/LibrePGP. Pjes\u00ebrisht p\u00ebr t\u00eb zgjidhur k\u00ebt\u00eb problem, zhvilluesit e OpenPGP e kan\u00eb fiksuar versionin e pest\u00eb t\u00eb formatit t\u00eb n\u00ebnshkrimeve n\u00eb nj\u00eb format t\u00eb p\u00ebrputhsh\u00ebm me LibrePGP dhe kan\u00eb kaluar n\u00eb pun\u00ebn mbi versionin e gjasht\u00eb. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"