{"id":114239,"date":"2024-03-10T12:25:43","date_gmt":"2024-03-10T10:25:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-kriptograficheskoj-biblioteki-libressl-3-9-0"},"modified":"2024-03-10T12:25:43","modified_gmt":"2024-03-10T10:25:43","slug":"vypusk-kriptograficheskoj-biblioteki-libressl-3-9-0","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/vypusk-kriptograficheskoj-biblioteki-libressl-3-9-0","title":{"rendered":"Publikimi i bibliotek\u00ebs kriptografike LibreSSL 3.9.0","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
Zhvilluesit e projektit OpenBSD kan\u00eb prezantuar versionin portab\u00ebl t\u00eb paket\u00ebs LibreSSL 3.9.0, n\u00eb kuad\u00ebr t\u00eb t\u00eb cilit zhvillohet nj\u00eb fork i OpenSSL, i orientuar drejt ofrimit t\u00eb nj\u00eb niveli m\u00eb t\u00eb lart\u00eb sigurie. Projekti LibreSSL fokusohet n\u00eb mb\u00ebshtetje cil\u00ebsore t\u00eb protokolleve SSL\/TLS, duke hequr funksionalitetin e tep\u00ebrt, duke shtuar mekanizma shtes\u00eb mbrojtjeje dhe duke kryer nj\u00eb pastrim e ripunim t\u00eb konsideruesh\u00ebm t\u00eb baz\u00ebs s\u00eb kodit. LibreSSL 3.9.0 konsiderohet si nj\u00eb version eksperimental, ku zhvillohen ve\u00e7ori q\u00eb do t\u00eb p\u00ebrfshihen n\u00eb OpenBSD 7.5. Nj\u00ebkoh\u00ebsisht \u00ebsht\u00eb p\u00ebrgatitur edhe versioni i q\u00ebndruesh\u00ebm LibreSSL 3.8.3, ku jan\u00eb korrigjuar disa gabime specifike p\u00ebr Windows dhe \u00ebsht\u00eb forcuar mb\u00ebshtetja p\u00ebr mekanizmin e mbrojtjes CET (Control-flow Enforcement Technology). <\/p>\n
Ve\u00e7orit\u00eb e LibreSSL 3.9.0: <\/p>\n
\n
\u00cbsht\u00eb shtuar mb\u00ebshtetja p\u00ebr algoritmet e n\u00ebnshkrimit dixhital t\u00eb bazuara n\u00eb ECDSA me hash-et SHA-3.\n
\u00cbsht\u00eb shtuar mb\u00ebshtetja p\u00ebr HMAC me hash-e t\u00eb shkurtuara SHA-2 dhe SHA-3 si PBE PRF.\n
Jan\u00eb b\u00ebr\u00eb ndryshime p\u00ebr t\u00eb p\u00ebrmir\u00ebsuar portabilitetin n\u00eb platforma t\u00eb tjera. P\u00ebr t\u00eb shmangur problemet me lidhjen statike, shumica e simboleve t\u00eb eksportuara t\u00eb LibreSSL q\u00eb p\u00ebrdoren p\u00ebr t\u00eb siguruar p\u00ebrputhshm\u00ebrin\u00eb jan\u00eb t\u00eb pajisura me parafjal\u00ebn «libressl_». N\u00eb nd\u00ebrtimet bazuar n\u00eb CMake \u00ebsht\u00eb ndaluar eksporti i simboleve compat t\u00eb libcrypto.\n
Jan\u00eb b\u00ebr\u00eb ndryshime q\u00eb synojn\u00eb p\u00ebrmir\u00ebsimin e pajtueshm\u00ebris\u00eb me OpenSSL. P\u00ebr shembull, jan\u00eb shtuar emra alias ChaCha20 dhe chacha20 p\u00ebr algoritmin ChaCha, \u00ebsht\u00eb unifikuar funksionimi i funksioneve SSL_library_init() dhe OPENSSL_init_ssl(), si dhe thirrjet EVP_{CIPHER,MD}_CTX_init() jan\u00eb p\u00ebrshtatur me sjelljen e OpenSSL.\n
Urdhrit utilitar openssl i \u00ebsht\u00eb shtuar mb\u00ebshtetje p\u00ebr flagjet «-new -force_pubkey», «-multivalue-rdn», «-set_issuer», «-set_subject» dhe «-utf8».\n
\u00cbsht\u00eb kryer kalimi nga p\u00ebrdorimi i thirrjes OBJ_bsearch_() te funksioni standard bsearch().\n
\u00cbsht\u00eb thjeshtuar implementimi i funksionit by_file_ctrl(), EVP_Cipher{Init,Update,Final}() dhe API OBJ_*.\n
\u00cbsht\u00eb kryer nj\u00eb riorganizim i madh i API EVP. Jan\u00eb hequr funksionet EVP_add_{cipher,digest}().\n
\u00cbsht\u00eb thjeshtuar p\u00ebrpunimi i X509_TRUST.\n
Jan\u00eb rishkruar funksionet BIO_dump*().\n
\u00cbsht\u00eb nd\u00ebrprer\u00eb mb\u00ebshtetja p\u00ebr tabelat globale q\u00eb nuk jan\u00eb p\u00ebrshtatur p\u00ebr p\u00ebrdorim shum\u00ebfijor. Si rezultat, tani nuk mb\u00ebshtetet m\u00eb caktimi i alias-eve p\u00ebr shifrat dhe hash-et, shtimi i vargjeve vetjake, metodave ASN.1, PKEY dhe CRL.\n
Jan\u00eb hequr funksionet BIO_set(), BIO_{sn,v,vsn}printf(), sk_find_ex() dhe OBJ_bsearch_(), si edhe shum\u00eb funksione t\u00eb vjetruara t\u00eb API CRYPTO.\n
\u00cbsht\u00eb nd\u00ebrprer\u00eb qasja publike n\u00eb API X509_CERT_AUX dhe X509_TRUST.\n
Mb\u00ebshtetja p\u00ebr algoritmet GOST dhe STREEBOG \u00ebsht\u00eb nd\u00ebrprer\u00eb.\n
\u00cbsht\u00eb zgjeruar mb\u00ebshtetja p\u00ebr mekanizmin CET (Control-flow Enforcement Technology), i p\u00ebrdorur p\u00ebr mbrojtje nga ekzekutimi i eksploit\u00ebve t\u00eb nd\u00ebrtuar me teknika t\u00eb programimit t\u00eb orientuar drejt kthimit (ROP, Return-Oriented Programming). <\/ul>\n