\u00cbsht\u00eb l\u00ebshuar nj\u00eb version i ri i passwdqc \u2014 nj\u00eb grup mjetesh p\u00ebr kontrollin e kompleksitetit t\u00eb fjal\u00ebkalimeve dhe frazave t\u00eb fjal\u00ebkalimeve, duke p\u00ebrfshir\u00eb modulin pam_passwdqc, programet pwqcheck, pwqfilter (e shtuar n\u00eb k\u00ebt\u00eb version) dhe pwqgen p\u00ebr p\u00ebrdorim manual ose nga skriptet, si dhe bibliotek\u00ebn libpasswdqc. Sistema me PAM (shumica e Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX) suportohen, si dhe ato pa PAM (ku mb\u00ebshtetet nd\u00ebrfaqja passwordcheck n\u00eb OpenBSD, ofrohet nj\u00eb mb\u00ebshtetje p\u00ebr p\u00ebrdorimin e pwqcheck nga PHP, dhe ka nj\u00eb version t\u00eb paguar p\u00ebr Windows, si dhe programet dhe biblioteka mund t\u00eb p\u00ebrdoren edhe n\u00eb sisteme t\u00eb tjera). <\/p>\n
N\u00eb krahasim me versionet e kaluara, \u00ebsht\u00eb shtuar mb\u00ebshtetje p\u00ebr skedar\u00ebt e jasht\u00ebm t\u00eb filtrimit t\u00eb fjal\u00ebkalimeve, duke p\u00ebrfshir\u00eb ata binar\u00eb, t\u00eb cil\u00ebt aktualisht jan\u00eb realizimi i filtrit t\u00eb p\u00ebrmir\u00ebsuar t\u00eb kukushek\u00ebs. Ky filt\u00ebr garanton q\u00eb nuk do t\u00eb kaloj\u00eb asnj\u00eb nga fjal\u00ebkalimet e ndaluara, por mund t\u00eb sjell\u00eb ndonj\u00ebher\u00eb alarmet false, probabiliteti i t\u00eb cilave \u00ebsht\u00eb minimal me parametrat dhe algoritmin e p\u00ebrdorur n\u00eb passwdqc. Kontrolli i fjal\u00ebkalimit p\u00ebr pranin\u00eb n\u00eb filt\u00ebr k\u00ebrkon jo m\u00eb shum\u00eb se dy aksese t\u00eb rast\u00ebsishme p\u00ebr t\u00eb lexuar nga disku, q\u00eb \u00ebsht\u00eb shum\u00eb i shpejt\u00eb dhe, n\u00eb p\u00ebrgjith\u00ebsi, nuk krijon ngarkes\u00eb t\u00eb tepruar. serverit<\/a>. <\/p>\n P\u00ebr krijimin dhe funksionimin e filtreve binar\u00eb n\u00eb passwdqc, \u00ebsht\u00eb shtuar programi pwqfilter. Ai mund t\u00eb krijoj\u00eb nj\u00eb filt\u00ebr si nga lista e fjal\u00ebkalimeve ashtu edhe nga hashes e tyre MD4 ose NTLM. Mb\u00ebshtetje p\u00ebr hashes NTLM lejon importimin e fjal\u00ebkalimeve nga lista HIBP (Fjal\u00ebkalimet e P\u00ebrdorura), e shp\u00ebrndar\u00eb n\u00eb k\u00ebt\u00eb form\u00eb. \u00cbsht\u00eb investuar shum\u00eb pun\u00eb n\u00eb optimizimin e pwqfilter p\u00ebr shkall\u00ebn e performanc\u00ebs, kompakt\u00ebsin\u00eb e filtreve t\u00eb marra, si dhe nivelin e alarmeve false. P\u00ebr shembull, krijimi i nj\u00eb filtri cuckoo me nj\u00eb koeficient ngarkese prej 98% nga skedari pwned-passwords-ntlm-ordered-by-hash-v7.txt me nj\u00eb madh\u00ebsi prej 21 GiB (22 GB) dhe q\u00eb p\u00ebrmban m\u00eb shum\u00eb se 613 milion rreshta zgjat rreth 8 minuta n\u00eb procesorin Core i7-4770K. Filtri q\u00eb rezulton z\u00eb 2.3 GiB (2.5 GB) dhe ka nj\u00eb nivel alarmesh false rreth 1 n\u00eb 1.15 miliard. Me nj\u00eb koeficient ngarkese m\u00eb t\u00eb ul\u00ebt, filtri mund t\u00eb krijohet shum\u00eb m\u00eb shpejt dhe do t\u00eb ket\u00eb nj\u00eb nivel alarmesh false edhe m\u00eb t\u00eb ul\u00ebt, por madh\u00ebsia e tij do t\u00eb jet\u00eb m\u00eb e madhe. <\/p>\n passwdqc p\u00ebrballon shum\u00eb mir\u00eb k\u00ebrc\u00ebnimin e fjal\u00ebkalimeve t\u00eb dob\u00ebta pa p\u00ebrdorimin e skedar\u00ebve t\u00eb jasht\u00ebm. P\u00ebrdorimi i tyre mund t\u00eb rris\u00eb efektivitetin e passwdqc ende m\u00eb shum\u00eb pa shkaktuar pothuajse asnj\u00eb shqet\u00ebsim p\u00ebr p\u00ebrdoruesit, ose mund t\u00eb lejoj\u00eb leht\u00ebsimin e kufizimeve t\u00eb tjera. Kontrolli i fjal\u00ebkalimeve q\u00eb p\u00ebrdoruesit zgjedhin sipas shp\u00ebrndarjeve t\u00eb njohura rekomandohet nga NIST. P\u00ebr projektin Openwall, kjo \u00ebsht\u00eb nj\u00eb mund\u00ebsi potenciale financimi p\u00ebr zhvillimin e passwdqc (dhe m\u00eb shum\u00eb) p\u00ebrmes shitjes s\u00eb filtreve t\u00eb gatshme, pa e kufizuar p\u00ebrdoruesin n\u00eb mund\u00ebsin\u00eb e krijimit t\u00eb filtreve vetjak duke p\u00ebrdorur programin pwqfilter t\u00eb lir\u00eb. <\/p>\n pwqfilter funksionon me strings t\u00eb rast\u00ebsishme dhe mund t\u00eb p\u00ebrdoret si nj\u00eb z\u00ebvend\u00ebsim p\u00ebr grep p\u00ebr shum\u00eb q\u00ebllime, madje dhe ato q\u00eb nuk lidhen me fjal\u00ebkalimet dhe sigurin\u00eb. Nd\u00ebrsa marrim parasysh k\u00ebt\u00eb, pwqfilter ka disa opsione t\u00eb ngjashme me ato t\u00eb grep, shmang p\u00ebrdorimin e emrave t\u00eb opsioneve q\u00eb do t\u00eb ishin n\u00eb kund\u00ebrshtim me ato q\u00eb ka grep dhe p\u00ebrdor kodet e nj\u00ebjta t\u00eb kthimit si grep. <\/p>\n