{"id":52697,"date":"2019-11-14T00:00:00","date_gmt":"2019-11-13T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah"},"modified":"2020-02-18T14:00:29","modified_gmt":"2020-02-18T11:00:29","slug":"uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","title":{"rendered":"Vulnerabiliteti TPM-Fail, i cili lejon rikuperimin e \u00e7el\u00ebsave t\u00eb ruajtur n\u00eb modulet TPM","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Nj\u00eb grup k\u00ebrkuesish nga Instituti Politeknik i Worcester, Universiteti i L\u00fcbeck dhe Universiteti i Kalifornis\u00eb n\u00eb San Diego <noindex><a rel=\"nofollow\" href=\"http:\/\/tpm.fail\/tpmfail.pdf\">zhvilluan<\/a><\/noindex> nj\u00eb metod\u00eb sulmi p\u00ebrmes kanaleve an\u00ebsore, q\u00eb lejon rikuperimin e vler\u00ebs s\u00eb \u00e7el\u00ebsave t\u00eb mbyllur, t\u00eb ruajtur n\u00eb TPM (Trusted Platform Module). Sulmi mori emrin kodor <noindex><a rel=\"nofollow\" href=\"http:\/\/tpm.fail\/\">TPM-Fail<\/a><\/noindex> dhe prek fTPM (<noindex><a rel=\"nofollow\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/support\/articles\/000007452\/mini-pcs.html\">implementimin e software-it<\/a><\/noindex> n\u00eb baz\u00eb t\u00eb firmware-it, q\u00eb funksionon n\u00eb nj\u00eb mikroprocesor t\u00eb ve\u00e7ant\u00eb brenda CPU-s\u00eb) nga kompania Intel (CVE-2019-11090) dhe TPM t\u00eb\u786cuar n\u00eb \u00e7ipat STMicroelectronics <noindex><a rel=\"nofollow\" href=\"https:\/\/www.st.com\/en\/secure-mcus\/st33tphf20i2c.html\">ST33<\/a><\/noindex> (CVE-2019-16863).<\/p>\n<p>K\u00ebrkuesit <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/VernamGroup\/TPM-Fail\">publikuan<\/a><\/noindex> prototipin e nj\u00eb mjete p\u00ebr kryerjen e sulmit dhe demonstruan mund\u00ebsin\u00eb e rikuperimit t\u00eb \u00e7el\u00ebsit t\u00eb mbyllur 256-bit, i p\u00ebrdorur p\u00ebr formimin e n\u00ebnshkrimeve digjitale duke p\u00ebrdorur algoritmet e bazuara n\u00eb kurba eliptike ECDSA dhe EC-Schnorr. N\u00eb var\u00ebsi t\u00eb t\u00eb drejtave t\u00eb aksesit, koha totale e sulmit n\u00eb sistemet Intel fTPM \u00ebsht\u00eb 4-20 minuta dhe k\u00ebrkon analiz\u00ebn e 1-15 mij\u00eb operacioneve. P\u00ebr sulmin n\u00eb sistemet me cipin ST33 k\u00ebrkohet rreth 80 minuta dhe analiza e rreth 40 mij\u00eb operacioneve p\u00ebr gjenerimin e n\u00ebnshkrimit digjital. <\/p>\n<p>Hulumtuesit gjithashtu demonstruan mund\u00ebsin\u00eb e kryerjes s\u00eb nj\u00eb sulmi t\u00eb larg\u00ebt n\u00eb rrjetet me shpejt\u00ebsi t\u00eb lart\u00eb, duke lejuar n\u00eb nj\u00eb rrjet lokal me kapacitet 1GB n\u00eb kushte laboratorike t\u00eb rikuperohej \u00e7el\u00ebsi i mbyllur brenda pes\u00eb or\u00ebve, pas matjes s\u00eb koh\u00ebs s\u00eb p\u00ebrgjigjes p\u00ebr 45 mij\u00eb sesione autentifikimi me serverin VPN t\u00eb bazuar n\u00eb software-in strongSwan, i cili ruan \u00e7el\u00ebsat e tij n\u00eb nj\u00eb TPM t\u00eb preksh\u00ebm nga vulnerabilitetet.<\/p>\n<p>Metoda e sulmit bazohet n\u00eb analiz\u00ebn e ndryshimeve n\u00eb koh\u00ebn e ekzekutimit t\u00eb operacioneve gjat\u00eb procesit t\u00eb gjenerimit t\u00eb n\u00ebnshkrimit digjital. Vler\u00ebsimi i vones\u00ebs gjat\u00eb ekzekutimit t\u00eb llogaritjeve lejon t\u00eb p\u00ebrcaktohet informacioni mbi bit\u00ebt e ve\u00e7ant\u00eb gjat\u00eb operacioneve t\u00eb shumzimit me skalar n\u00eb operacionet me drejtimin eliptik. P\u00ebr ECDSA, p\u00ebrcaktimi i madje disa bit\u00ebve me informacion mbi vektorin e inicializimit (nonce) \u00ebsht\u00eb i mjaftuesh\u00ebm p\u00ebr t\u00eb kryer nj\u00eb sulm p\u00ebr rikuperimin erregullt t\u00eb gjith\u00eb \u00e7el\u00ebsit t\u00eb mbyllur. P\u00ebr t\u00eb kryer me sukses sulmin, \u00ebsht\u00eb e nevojshme t\u00eb analizohet koha e gjenerimit t\u00eb disa mij\u00ebra n\u00ebnshkrimeve digjitale, t\u00eb krijuara mbi t\u00eb dh\u00ebnat e njohura p\u00ebr sulmuesin.<\/p>\n<p>Vulnerabiliteti <noindex><a rel=\"nofollow\" href=\"https:\/\/www.st.com\/content\/st_com\/en\/campaigns\/tpm-update.html\">i eliminuar<\/a><\/noindex> kompanis\u00eb STMicroelectronics n\u00eb versionin e ri t\u00eb \u00e7ipave, n\u00eb t\u00eb cil\u00ebt realizimi i algoritmit ECDSA \u00ebsht\u00eb \u00e7liruar nga korrelacionet me koh\u00ebn e ekzekutimit t\u00eb operacioneve. \u00cbsht\u00eb interesante se \u00e7ipat e prekur nga problemi STMicroelectronics p\u00ebrdoren gjithashtu n\u00eb pajisje q\u00eb p\u00ebrmbushin nivelin e siguris\u00eb CommonCriteria (CC) EAL 4+. K\u00ebrkuesit gjithashtu kontrolluan \u00e7ipat TPM t\u00eb kompanive Infineon dhe Nuvoton, por n\u00eb to nuk ka rrjedhje t\u00eb bazuar n\u00eb ndryshimin e koh\u00ebs s\u00eb llogaritjeve.<\/p>\n<p>N\u00eb procesor\u00ebt Intel, problemi shfaqet q\u00eb nga l\u00ebshimi i familjes Haswell q\u00eb nga viti 2013. V\u00ebrehet se problemi i prek nj\u00eb gam\u00eb t\u00eb gjer\u00eb laptop\u00ebsh, PC-sh dhe serverash, t\u00eb prodhuara nga prodhues t\u00eb ndrysh\u00ebm, p\u00ebrfshir\u00eb Dell, Lenovo dhe HP.<\/p>\n<p>Kompanis\u00eb Intel i \u00ebsht\u00eb shtuar nj\u00eb rregullim n\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/blogs.intel.com\/technology\/2019\/11\/ipas-november-2019-intel-platform-update-ipu\/\">n\u00ebntorin<\/a><\/noindex> e azhurnimeve t\u00eb firmware-it, n\u00eb t\u00eb cilin p\u00ebrve\u00e7 problematik\u00ebs s\u00eb shqyrtuar <noindex><a rel=\"nofollow\" href=\"https:\/\/www.intel.com\/content\/www\/us\/en\/security-center\/advisory\/intel-sa-00241.html\">\u00ebsht\u00eb eliminuar<\/a><\/noindex> 24 vulnerabilitete t\u00eb tjera, prej t\u00eb cilave n\u00ebnt\u00eb jan\u00eb t\u00eb klasifikuara me nivel t\u00eb lart\u00eb rreziku, dhe nj\u00eb me nivel kritik. Informacioni n\u00eb lidhje me k\u00ebto probleme \u00ebsht\u00eb vet\u00ebm n\u00eb form\u00eb t\u00eb p\u00ebrgjithshme; p\u00ebr shembull, p\u00ebrmendet se vulnerabiliteti kritik (CVE-2019-0169) rezulton nga nj\u00eb mund\u00ebsi p\u00ebr t\u00eb shkaktuar mbingarkes\u00eb t\u00eb heap-it n\u00eb mjediset Intel CSME (Converged Security and Management Engine) dhe Intel TXE (Trusted Execution Engine), q\u00eb i lejon sulmuesit t\u00eb rris\u00eb privilegjet e tij dhe t\u00eb ket\u00eb qasje n\u00eb t\u00eb dh\u00ebnat e ndjeshme.<\/p>\n<p>Gjithashtu mund t\u00eb theksohet <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/jovanbulck\/0xbadc0de\">shpalosja<\/a><\/noindex> e rezultateve t\u00eb audimeve t\u00eb ndryshme SDK p\u00ebr zhvillimin e aplikacioneve q\u00eb bashk\u00ebveprojn\u00eb me kodin q\u00eb ekzekutohet n\u00eb anklav t\u00eb izoluar. Me q\u00ebllim identifikimin e funksioneve problematike q\u00eb mund t\u00eb p\u00ebrdoren p\u00ebr kryerjen e sulmeve, jan\u00eb shqyrtuar tet\u00eb SDK: <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/intel\/linux-sgx\">Intel SGX-SDK<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/lsds\/sgx-lkl\">SGX-LKL<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/openenclave.io\/sdk\/\">Microsoft OpenEnclave<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/grapheneproject.io\/\">Graphene<\/a><\/noindex>,<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/fortanix.com\/products\/runtime-encryption\/edp\/\">Rust-EDP<\/a><\/noindex> dhe <noindex><a rel=\"nofollow\" href=\"https:\/\/cloud.google.com\/blog\/products\/gcp\/introducing-asylo-an-open-source-framework-for-confidential-computing\">Google Asylo<\/a><\/noindex> p\u00ebr Intel SGX, <noindex><a rel=\"nofollow\" href=\"https:\/\/keystone-enclave.org\/\">Keystone<\/a><\/noindex>  p\u00ebr RISC-V dhe <noindex><a rel=\"nofollow noopener noreferrer\" href=\"https:\/\/distrinet.cs.kuleuven.be\/software\/sancus\/\" target=\"_blank\">Sancus<\/a><\/noindex> p\u00ebr Sancus TEE. Gjat\u00eb audimeve jan\u00eb <noindex><a rel=\"nofollow\" href=\"https:\/\/github.com\/jovanbulck\/0xbadc0de\/blob\/master\/ccs19-tale.pdf\">identifikuar<\/a><\/noindex> 35 vulnerabilitete, mbi t\u00eb cilat jan\u00eb zhvilluar disa skenar\u00eb sulmi, q\u00eb lejojn\u00eb nxjerrjen e \u00e7el\u00ebsave AES nga anklavi ose organizimin e ekzekutimit t\u00eb kodit t\u00eb tij p\u00ebrmes krijimit t\u00eb kushteve p\u00ebr d\u00ebmtimin e p\u00ebrmbajtjes s\u00eb memories.<\/p>\n<p><center><noindex><a rel=\"nofollow\" href=\"https:\/\/raw.githubusercontent.com\/jovanbulck\/0xbadc0de\/master\/thumbnail.jpg\"><img decoding=\"async\" alt=\"Vulnerabiliteti TPM-Fail, i cili lejon rikuperimin e \u00e7el\u00ebsave t\u00eb ruajtur n\u00eb modulet TPM\" src=\"\/wp-content\/uploads\/2019\/11\/4c83ec77b9618ac531060dc585820d32.png\" style=\"display:block;margin: 0 auto;\" \/><\/a><\/noindex><\/center><\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Burimi: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=51862\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0412\u0443\u0441\u0442\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u0438\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0445 \u0432 TPM (Trusted Platform Module). \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f TPM-Fail \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 fTPM (\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u043c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 CPU) \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Intel (CVE-2019-11090) \u0438 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":52698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-52697","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0412\u0443\u0441\u0442\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u0438\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0445 \u0432 TPM (Trusted Platform Module). \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f TPM-Fail \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 fTPM (\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u043c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 CPU) \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Intel (CVE-2019-11090) \u0438 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c TPM-Fail, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043b\u044e\u0447\u0438, \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0435 \u0432 TPM-\u043c\u043e\u0434\u0443\u043b\u044f\u0445 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0412\u0443\u0441\u0442\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u0438\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0445 \u0432 TPM (Trusted Platform Module). \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f TPM-Fail \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 fTPM (\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u043c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 CPU) \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Intel (CVE-2019-11090) \u0438 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-11-13T21:00:00+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-02-18T11:00:29+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00c7\u00ebshtja e siguris\u00eb TPM-Fail, q\u00eb lejon rikuperimin e \u00e7el\u00ebsave t\u00eb ruajtur n\u00eb modulat TPM | ProHoster","description":"Nj\u00eb grup hulumtuesish nga Instituti Politeknik i Worcesterit, Universiteti i Luebeckut dhe Universiteti i Kalifornis\u00eb n\u00eb San Diego ka zhvilluar nj\u00eb metod\u00eb sulmi p\u00ebrmes kanaleve an\u00ebsore, q\u00eb lejon rikuperimin e vlerave t\u00eb \u00e7el\u00ebsave t\u00eb mbyllur, t\u00eb ruajtur n\u00eb TPM (Moduli i Platform\u00ebs s\u00eb Besuar). Sulmi mban emrin kodues TPM-Fail dhe preku fTPM (implementimi softuerik bazuar n\u00eb firmware, q\u00eb funksionon n\u00eb nj\u00eb mikroprocesor t\u00eb ve\u00e7ant\u00eb brenda CPU-s\u00eb) nga Intel (CVE-2019-11090) dhe pajisjet harduerike.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c TPM-Fail, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043b\u044e\u0447\u0438, \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0435 \u0432 TPM-\u043c\u043e\u0434\u0443\u043b\u044f\u0445 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0412\u0443\u0441\u0442\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u0438\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0445 \u0432 TPM (Trusted Platform Module). \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f TPM-Fail \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 fTPM (\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u043c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 CPU) \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Intel (CVE-2019-11090) \u0438 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435","og:url":"https:\/\/prohoster.info\/sq\/blog\/novosti-interneta\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-13T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52697","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:30:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:38:25","updated":"2026-01-24 04:30:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/52697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=52697"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/52697\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/52698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=52697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=52697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=52697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}