{"id":112854,"date":"2024-01-12T15:10:27","date_gmt":"2024-01-12T13:10:27","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa"},"modified":"2024-01-12T15:10:27","modified_gmt":"2024-01-12T13:10:27","slug":"proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa","title":{"rendered":"Projekti OpenSSH publikoi planin p\u00ebr nd\u00ebrprerjen e mb\u00ebshtetjes s\u00eb DSA","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Zhvilluesit e projektit OpenSSH prezantuan nj\u00eb plan p\u00ebr nd\u00ebrprerjen e mb\u00ebshtetjes s\u00eb \u00e7el\u00ebsave t\u00eb bazuar n\u00eb algoritmin DSA. Sipas standardeve moderne, \u00e7el\u00ebsat DSA nuk ofrojn\u00eb nivelin e duhur t\u00eb mbrojtjes, pasi p\u00ebrdorin nj\u00eb \u00e7el\u00ebs privat me gjat\u00ebsi vet\u00ebm 160 bit dhe hash-in SHA1, \u00e7ka p\u00ebr nga niveli i siguris\u00eb korrespondon af\u00ebrsisht me nj\u00eb \u00e7el\u00ebs simetrik 80-bit\u00ebsh. <\/p>\n
P\u00ebrdorimi i \u00e7el\u00ebsave DSA \u00ebsht\u00eb \u00e7aktivizuar si parazgjedhje q\u00eb n\u00eb vitin 2015, por mb\u00ebshtetja p\u00ebr DSA \u00ebsht\u00eb ruajtur si opsion, pasi ky algorit\u00ebm \u00ebsht\u00eb i vetmi q\u00eb k\u00ebrkohet detyrimisht p\u00ebr zbatim n\u00eb protokollin SSHv2. Kjo k\u00ebrkes\u00eb u shtua sepse n\u00eb koh\u00ebn e krijimit dhe miratimit t\u00eb protokollit SSHv2, t\u00eb gjith\u00eb algoritmet alternativ\u00eb ishin t\u00eb mbuluar nga patentat. Q\u00eb at\u00ebher\u00eb situata ka ndryshuar: patentat q\u00eb lidhen me RSA kan\u00eb skaduar, \u00ebsht\u00eb shtuar algoritmi ECDSA, i cili e tejkalon ndjesh\u00ebm DSA p\u00ebr nga performanca dhe siguria, si edhe EdDSA, q\u00eb \u00ebsht\u00eb m\u00eb i sigurt dhe m\u00eb i shpejt\u00eb se ECDSA. Faktori i vet\u00ebm p\u00ebr vazhdimin e mb\u00ebshtetjes s\u00eb DSA mbeti ruajtja e p\u00ebrputhshm\u00ebris\u00eb me pajisjet e vjetruara. <\/p>\n
Pas vler\u00ebsimit t\u00eb situat\u00ebs n\u00eb kushtet aktuale, zhvilluesit e OpenSSH arrit\u00ebn n\u00eb p\u00ebrfundimin se kostot e vazhdimit t\u00eb mir\u00ebmbajtjes s\u00eb algoritmit t\u00eb pasigurt DSA nuk justifikohen dhe se heqja e tij do t\u00eb ndihmoj\u00eb n\u00eb nxitjen e nd\u00ebrprerjes s\u00eb mb\u00ebshtetjes p\u00ebr DSA edhe n\u00eb implementime t\u00eb tjera t\u00eb SSH dhe n\u00eb bibliotekat kriptografike. N\u00eb versionin e planifikuar p\u00ebr prill, OpenSSH synon t\u00eb ruaj\u00eb nd\u00ebrtimin me DSA, por t\u00eb ofroj\u00eb mund\u00ebsin\u00eb p\u00ebr \u00e7aktivizimin e DSA n\u00eb faz\u00ebn e kompilimit. N\u00eb versionin e qershorit t\u00eb OpenSSH, DSA do t\u00eb \u00e7aktivizohet si parazgjedhje gjat\u00eb kompilimit, nd\u00ebrsa n\u00eb fillim t\u00eb vitit 2025 implementimi i DSA do t\u00eb hiqet nga baza e kodit. <\/p>\n
P\u00ebrdoruesit q\u00eb kan\u00eb nevoj\u00eb p\u00ebr mb\u00ebshtetje DSA n\u00eb an\u00ebn e klientit do t\u00eb mund t\u00eb p\u00ebrdorin nd\u00ebrtimet alternative t\u00eb deg\u00ebve t\u00eb kaluara t\u00eb OpenSSH, si\u00e7 \u00ebsht\u00eb paketi i ofruar n\u00eb Debian \"openssh-client-ssh1\", i nd\u00ebrtuar mbi OpenSSH 7.5 dhe i destinuar p\u00ebr t\u00eb lidhur me server\u00ebt SSH duke p\u00ebrdorur protokollin SSHv1, mb\u00ebshtetje e t\u00eb cilit u pezullua n\u00eb OpenSSH 7.6 gjasht\u00eb vjet m\u00eb par\u00eb. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"