{"id":112077,"date":"2023-12-08T15:10:14","date_gmt":"2023-12-08T13:10:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/avtor-gnupg-osnoval-librepgp-fork-standarta-openpgp"},"modified":"2023-12-08T15:10:14","modified_gmt":"2023-12-08T13:10:14","slug":"avtor-gnupg-osnoval-librepgp-fork-standarta-openpgp","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/avtor-gnupg-osnoval-librepgp-fork-standarta-openpgp","title":{"rendered":"Autori i GnuPG themeloi LibrePGP, nj\u00eb fork i standartit OpenPGP.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Werner Koch, zhvilluesi kryesor dhe krijuesi i projektit GnuPG, ka themeluar projektin LibrePGP, i fokusuar n\u00eb zhvillimin e specifikimit t\u00eb p\u00ebrmir\u00ebsuar, alternativ standardit OpenPGP. Fork-u u krijua si p\u00ebrgjigje ndaj ndryshimeve t\u00eb parashikuara nga grupi punues IETF p\u00ebr p\u00ebrdit\u00ebsimin e ardhsh\u00ebm t\u00eb specifikimit OpenPGP dhe t\u00eb cilat Koch i perceptoi si problematike p\u00ebr ruajtjen e p\u00ebrputhshm\u00ebris\u00eb dhe sigurit\u00eb. Zhvilluesit q\u00eb mb\u00ebshtet\u00ebn fork-un, duke p\u00ebrfshir\u00eb ata t\u00eb projekteve GnuPG, RNP (implementimi OpenPGP nga Thunderbird) dhe Gpg4win, kan\u00eb frik\u00eb se ndryshimet e planifikuara do t\u00eb jen\u00eb shkat\u00ebrruese p\u00ebr implementimet ekzistuese t\u00eb aplikacioneve t\u00eb bazuara n\u00eb OpenPGP, p\u00ebrdoruesit e t\u00eb cil\u00ebve shpresojn\u00eb p\u00ebr stabilitetin e specifikimit n\u00eb afat t\u00eb gjat\u00eb dhe nuk jan\u00eb t\u00eb gatsh\u00ebm t\u00eb pranojn\u00eb ndryshime q\u00eb shkelin p\u00ebrputhshm\u00ebrin\u00eb. <\/p>\n
LibrePGP p\u00ebrfshin p\u00ebrmir\u00ebsime t\u00eb dobishme, t\u00eb zhvilluara n\u00eb vitet e fundit p\u00ebr versionin e ardhsh\u00ebm t\u00eb specifikimit OpenPGP, por p\u00ebrjashton ndryshimet q\u00eb ndikojn\u00eb negativisht n\u00eb sigurimin e p\u00ebrputhshm\u00ebris\u00eb. P\u00ebr shembull, krahasuar me standardin aktual RFC-4880, n\u00eb LibrePGP jan\u00eb pranuar mund\u00ebsi t\u00eb tilla si: <\/p>\n
\n
Mb\u00ebshtetje p\u00ebr algoritmin e enkriptimit Camellia (RFC-5581),\n
Mb\u00ebshtetje e detyrueshme p\u00ebr hash SHA2-256 (SHA-1 dhe MD5 jan\u00eb klasifikuar si t\u00eb pap\u00ebrshkuesh\u00ebm, nd\u00ebrsa mund\u00ebsia p\u00ebr t\u00eb deshifruar t\u00eb dh\u00ebnat pa verifikimin e integritetit \u00ebsht\u00eb klasifikuar si plot\u00ebsisht e vjetruar).\n
Rritje deri n\u00eb 256 bit t\u00eb madh\u00ebsis\u00eb s\u00eb gjurm\u00ebs verifikuese (fingerprint).\n
Mb\u00ebshtetje p\u00ebr skem\u00ebn e n\u00ebnshkrimeve digjitale EdDSA dhe p\u00ebr elliptic curves BrainpoolP256r1, BrainpoolP384r1, BrainpoolP512r1, Ed25519, Curve25519, Ed488 dhe X448.\n
Mb\u00ebshtetje p\u00ebr algoritmin CRYSTALS-Kyber, t\u00eb q\u00ebndruesh\u00ebm ndaj sulmeve nga kompjuter\u00ebt kuantik.\n
Zbatimi i versionit t\u00eb pest\u00eb t\u00eb formatit t\u00eb n\u00ebnshkrimeve digjitale me mbrojtje metadata.\n
Mb\u00ebshtetje p\u00ebr n\u00ebnpaketa t\u00eb zgjeruara me n\u00ebnshkrime digjitale. <\/ul>\n
Elementet kryesore t\u00eb kritik\u00ebs s\u00eb specifikimit t\u00eb ri OpenPGP: <\/p>\n
\n
Grupi punues IETF, n\u00eb vend q\u00eb t\u00eb b\u00ebj\u00eb nj\u00eb p\u00ebrdit\u00ebsim graduale t\u00eb specifikimit, u p\u00ebrpoq t\u00eb ri-inxiste standartin dhe t\u00eb b\u00ebnte ndryshime t\u00eb r\u00ebnd\u00ebsishme q\u00eb shkelin p\u00ebrputhshm\u00ebrin\u00eb.\n
Imponimi mb\u00ebshtetjes p\u00ebr modin simetrik t\u00eb enkriptimit GCM (Galois\/Counter Mode), i cili \u00ebsht\u00eb i v\u00ebshtir\u00eb p\u00ebr tu implementuar sakt\u00eb, duke injoruar k\u00ebshtu modin OCB (Offset codebook mode), p\u00ebr t\u00eb cilin patentat skaduan disa vjet m\u00eb par\u00eb.\n
Shtimi i pakove opsionale me mbushje t\u00eb rast\u00ebsishme p\u00ebr t\u00eb mbrojtur nga analizimi i trafikut. Sipas krijuesve t\u00eb LibrePGP, k\u00ebto paketa me mbushje t\u00eb rast\u00ebsishme t\u00eb pa verifikueshme krijojn\u00eb rreziqe t\u00eb p\u00ebrdoren p\u00ebr t\u00eb krijuar kanale t\u00eb fsheht\u00eb t\u00eb transfert\u00ebs dhe p\u00ebr t\u00eb anashkaluar sistemet e parandalimit t\u00eb rrjedhjeve t\u00eb t\u00eb dh\u00ebnave. M\u00eb par\u00eb, ideja e p\u00ebrfshirjes s\u00eb mbushjes ishte refuzuar, duke u konsideruar si nj\u00eb \u00e7\u00ebshtje n\u00eb nivel aplikacioni, e jo enkriptimi.\n
P\u00ebrdorimi i nj\u00eb skeme t\u00eb modifikuar t\u00eb enkriptimit ECDH (ndryshimi i formatit OID), n\u00eb vend t\u00eb p\u00ebrdorimit t\u00eb versionit t\u00eb p\u00ebrshkruar n\u00eb RFC-6637 dhe t\u00eb realizuar n\u00eb PGP dhe GnuPG.\n
Eliminimi i disa mund\u00ebsive t\u00eb p\u00ebrdorura n\u00eb praktik\u00eb, si\u00e7 \u00ebsht\u00eb metoda klasike p\u00ebr t\u00ebrheqjen e \u00e7el\u00ebsave, flamuri «m» p\u00ebr t\u00eb sh\u00ebnuar t\u00eb dh\u00ebnat MIME dhe flamuri «t» p\u00ebr ndarjen e t\u00eb dh\u00ebnave tekstuale nga ato binar\u00eb (flamuri «t» u z\u00ebvend\u00ebsua nga flamuri «u» p\u00ebr tekstin n\u00eb kodimin UTF-8).\n
Refuzimi p\u00ebr t\u00eb p\u00ebrfshir\u00eb n\u00eb formatin e ri t\u00eb n\u00ebnshkrimeve mbrojtjen e metadatat e skedarit t\u00eb n\u00ebnshkruar (p\u00ebr shembull, \u00ebsht\u00eb e mundur t\u00eb ndryshosh emrin e skedarit pa prishur n\u00ebnshkrimin).\n
Nj\u00eb mund\u00ebsi e dyshimt\u00eb p\u00ebr shtimin e «s\u00eblt» n\u00eb n\u00ebnshkrime (Salted signature) p\u00ebr t\u00eb forcim mbrojtjen nga sulmet me kolizione me nj\u00eb prefiks t\u00eb caktuar. Vlera me s\u00eblt mund t\u00eb p\u00ebrdoret si nj\u00eb kanal t\u00eb fsheht\u00eb t\u00eb pazhb\u00ebr\u00eb p\u00ebr transmetimin e 32 byte t\u00eb dh\u00ebnash n\u00eb n\u00ebnshkrim.\n
Shkall\u00ebzimi i standardit drejt p\u00ebrdorimit kryesor p\u00ebr komunikim online, duke injoruar nevojat p\u00ebr ruajtjen afatgjat\u00eb t\u00eb t\u00eb dh\u00ebnave. <\/ul>\n
P\u00ebrkrah\u00ebsit e OpenPGP tashm\u00eb kan\u00eb publikuar kritik\u00eb mbi kritik\u00ebn. Si rezultat, n\u00ebse nuk gjendet nj\u00eb kompromis, ndarja mund t\u00eb \u00e7oj\u00eb n\u00eb rritjen e mosmarr\u00ebveshjeve n\u00eb realizimet e OpenPGP\/LibrePGP. Pjes\u00ebrisht p\u00ebr t\u00eb zgjidhur k\u00ebt\u00eb problem, zhvilluesit e OpenPGP e kan\u00eb konzistuar versionin e pest\u00eb t\u00eb formatit t\u00eb n\u00ebnshkrimeve n\u00eb nj\u00eb form\u00eb t\u00eb p\u00ebrputhshme me LibrePGP dhe kan\u00eb kaluar n\u00eb pun\u00ebn p\u00ebr versionin e gjasht\u00eb. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"