{"id":112854,"date":"2024-01-12T15:10:27","date_gmt":"2024-01-12T13:10:27","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa"},"modified":"2024-01-12T15:10:27","modified_gmt":"2024-01-12T13:10:27","slug":"proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/proekt-openssh-opublikoval-plan-prekrashheniya-podderzhki-dsa","title":{"rendered":"Projekti OpenSSH publikoi planin p\u00ebr p\u00ebrfundimin e mb\u00ebshtetjes p\u00ebr DSA","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Zhvilluesit e projektit OpenSSH paraqit\u00ebn planin p\u00ebr p\u00ebrfundimin e mb\u00ebshtetjes p\u00ebr \u00e7el\u00ebsat e bazuar n\u00eb algoritmin DSA. Sipas standardeve moderne, \u00e7el\u00ebsat DSA nuk ofrojn\u00eb nj\u00eb nivel t\u00eb duhur sigurie, pasi p\u00ebrdorin nj\u00eb madh\u00ebsi t\u00eb \u00e7el\u00ebsit privat prej vet\u00ebm 160 bit dhe nj\u00eb hash SHA1, i cili p\u00ebrputhet rreth 80 bit\u00ebsh t\u00eb nj\u00eb \u00e7el\u00ebsi simetrik. <\/p>\n
Sipas parazgjedhjes, p\u00ebrdorimi i \u00e7el\u00ebsave DSA u nd\u00ebrpre n\u00eb vitin 2015, por mb\u00ebshtetja p\u00ebr DSA u la si nj\u00eb opsion, pasi ky algorit\u00ebm \u00ebsht\u00eb i vetmi q\u00eb duhet t\u00eb zbatohet n\u00eb protokollin SSHv2. Nj\u00eb k\u00ebrkes\u00eb e till\u00eb u shtua sepse gjat\u00eb krijimit dhe miratimit t\u00eb protokollit SSHv2, t\u00eb gjith\u00eb algoritm\u00ebt alternativ\u00eb ishin n\u00ebn mbrojtjen e patentave. Q\u00eb at\u00ebher\u00eb, situata ka ndryshuar, patentat q\u00eb lidhen me RSA jan\u00eb shfuqizuar, \u00ebsht\u00eb shtuar algoritmi ECDSA, i cili p\u00ebrparon DSA-n\u00eb n\u00eb performanc\u00eb dhe siguri, si dhe EdDSA, i cili \u00ebsht\u00eb m\u00eb i sigurt dhe m\u00eb i shpejt\u00eb se ECDSA. Faktori i vet\u00ebm p\u00ebr vazhdimin e mb\u00ebshtetjes p\u00ebr DSA mbeti ruajtja e p\u00ebrputhshm\u00ebris\u00eb me pajisjet e vjetra. <\/p>\n
Duke vler\u00ebsuar situat\u00ebn n\u00eb realitetet aktuale, zhvilluesit e OpenSSH kan\u00eb arritur n\u00eb p\u00ebrfundimin se shpenzimet p\u00ebr t\u00eb vazhduar mb\u00ebshtetje p\u00ebr algoritmin e pasigurt DSA nuk justifikohen dhe heqja e tij do t\u00eb stimuloj\u00eb ndalimin e mb\u00ebshtetjes p\u00ebr DSA n\u00eb implementime t\u00eb tjera t\u00eb SSH dhe biblioteka kriptografike. N\u00eb versionin e planifikuar p\u00ebr n\u00eb prill, OpenSSH do t\u00eb ruaj\u00eb montimin me DSA, por do t\u00eb ofroj\u00eb mund\u00ebsin\u00eb p\u00ebr t\u00eb \u00e7aktivizuar DSA gjat\u00eb faz\u00ebs s\u00eb kompjilimit. N\u00eb versionin e qershorit, DSA do t\u00eb jet\u00eb i \u00e7aktivizuar si parazgjedhje gjat\u00eb montimit, dhe n\u00eb fillim t\u00eb vitit 2025, implementimi i DSA do t\u00eb hiqet nga baza e kodit. <\/p>\n
P\u00ebrdoruesit q\u00eb kan\u00eb nevoj\u00eb p\u00ebr mb\u00ebshtetje DSA n\u00eb an\u00ebn e klientit, mund t\u00eb p\u00ebrdorin nd\u00ebrtimet alternative t\u00eb deg\u00ebve t\u00eb kaluara t\u00eb OpenSSH, si\u00e7 \u00ebsht\u00eb paketa e ofruar n\u00eb Debian \"openssh-client-ssh1\", e nd\u00ebrtuar mbi OpenSSH 7.5 dhe e destinuar p\u00ebr t'u lidhur me server\u00ebt SSH duke p\u00ebrdorur protokollin SSHv1, mb\u00ebshtetje e cila u nd\u00ebrpre n\u00eb OpenSSH 7.6 gjasht\u00eb vjet m\u00eb par\u00eb. \n Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"