{"id":99236,"date":"2021-02-22T22:22:43","date_gmt":"2021-02-22T20:22:43","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov"},"modified":"2021-02-22T22:22:43","modified_gmt":"2021-02-22T20:22:43","slug":"vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","title":{"rendered":"Utg\u00e5van av passwdqc 2.0.0 med st\u00f6d f\u00f6r externa filter","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En ny version av passwdqc har sl\u00e4ppts \u2014 ett verktyg f\u00f6r att kontrollera komplexiteten av l\u00f6senord och l\u00f6senfraser, vilket inkluderar modulen pam_passwdqc, programmen pwqcheck, pwqfilter (tillagt i denna version) och pwqgen f\u00f6r manuell anv\u00e4ndning eller fr\u00e5n skript, samt biblioteket libpasswdqc. B\u00e5de system med PAM (de flesta Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX) och utan PAM st\u00f6ds (gr\u00e4nssnittet passwordcheck i OpenBSD st\u00f6ds, en bindning f\u00f6r att anv\u00e4nda pwqcheck fr\u00e5n PHP medf\u00f6ljer, en betalversion f\u00f6r Windows finns, och programmen samt biblioteket kan \u00e4ven anv\u00e4ndas p\u00e5 andra system). <\/p>\n

J\u00e4mf\u00f6rt med tidigare versioner har st\u00f6d f\u00f6r externa l\u00f6senordsfiltreringsfiler lagts till, inklusive bin\u00e4ra filer, vilket f\u00f6r n\u00e4rvarande utg\u00f6r en implementation av en f\u00f6rb\u00e4ttrad kuggfilter. Detta filter garanterar att inga f\u00f6rbjudna l\u00f6senord slipper igenom, men kan ibland leda till falska positiva resultat, vars sannolikhet \u00e4r f\u00f6rsumbart liten med de inst\u00e4llningar och algoritmer som anv\u00e4nds i passwdqc. Kontroll av ett l\u00f6senord f\u00f6r f\u00f6rekomst i filtret kr\u00e4ver inte mer \u00e4n tv\u00e5 random-access l\u00e4sning fr\u00e5n disken, vilket g\u00e5r mycket snabbt och vanligtvis inte skapar n\u00e5gon \u00f6verbelastning. servern<\/a>. <\/p>\n

F\u00f6r att skapa och arbeta med bin\u00e4ra filter i passwdqc har programmet pwqfilter lagts till. Det kan skapa filter b\u00e5de fr\u00e5n listor \u00f6ver sj\u00e4lva l\u00f6senorden och fr\u00e5n deras MD4- eller NTLM-hashar. St\u00f6d f\u00f6r NTLM-hashar m\u00f6jligg\u00f6r import av l\u00f6senord fr\u00e5n listan HIBP (Pwned Passwords), som distribueras i denna form. Mycket arbete har lagts ner p\u00e5 att optimera pwqfilter f\u00f6r hastighet, kompakthet av de resulterande filtren samt niv\u00e5er av falska positiva resultat. Till exempel tar det ungef\u00e4r 8 minuter av en Core i7-4770K-processor att skapa ett kuggfilter med en belastningskoefficient p\u00e5 98 % fr\u00e5n filen pwned-passwords-ntlm-ordered-by-hash-v7.txt, som \u00e4r 21 GiB (22 GB) stor och inneh\u00e5ller mer \u00e4n 613 miljoner rader. Det resulterande filtret tar 2.3 GiB (2.5 GB) och har en niv\u00e5 av falska positiva resultat p\u00e5 cirka 1 per 1.15 miljarder. Med en l\u00e4gre m\u00e5lniv\u00e5 f\u00f6r belastningskoefficienten kan filtret skapas betydligt snabbare och kommer att ha en l\u00e4gre niv\u00e5 av falska positiva resultat, men dess storlek blir st\u00f6rre. <\/p>\n

passwdqc fungerar mycket bra f\u00f6r att f\u00f6rhindra svaga l\u00f6senord utan anv\u00e4ndning av externa filer. Deras anv\u00e4ndning kan \u00f6ka effektiviteten hos passwdqc ytterligare utan att orsaka anv\u00e4ndarna mer besv\u00e4r, eller kan till\u00e5ta att andra begr\u00e4nsningar l\u00e4ttar. NIST rekommenderar att kontrollera de l\u00f6senord som anv\u00e4ndarna v\u00e4ljer mot k\u00e4nda l\u00e4ckor. F\u00f6r Openwall-projektet \u00e4r detta en potentiell finansieringsm\u00f6jlighet f\u00f6r utvecklingen av passwdqc (och mer) genom f\u00f6rs\u00e4ljning av f\u00e4rdiga filter, utan att begr\u00e4nsa anv\u00e4ndarnas m\u00f6jlighet att skapa filter sj\u00e4lva med det frisl\u00e4ppta programmet pwqfilter under en \u00f6ppen licens. <\/p>\n

pwqfilter arbetar med godtyckliga str\u00e4ngar och kan anv\u00e4ndas ist\u00e4llet f\u00f6r grep f\u00f6r m\u00e5nga syften, \u00e4ven s\u00e5dana som inte r\u00f6r l\u00f6senord och s\u00e4kerhet. Med detta i \u00e5tanke har pwqfilter flera alternativ som liknar de som finns i grep, undviker att anv\u00e4nda alternativnamn som skulle mots\u00e4ga de som finns i grep, och anv\u00e4nder samma returkoder som grep. <\/p>\n

F\u00f6r uppgifter d\u00e4r falska positiva resultat \u00e4r extremt o\u00f6nskade kan deras niv\u00e5 s\u00e4nkas, exempelvis till en p\u00e5 kvintillion (miljard miljarders) med en belastningsfaktor p\u00e5 upp till 44 %. (Den klassiska cuckoo-filter ger inte en s\u00e5 betydande minskning av falska positiva resultat vid minskad belastningsfaktor. I passwdqc uppn\u00e5s detta tack vare f\u00f6rb\u00e4ttringar i algoritmen).
\n
K\u00e4lla: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f passwdqc — \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0440\u0430\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c pam_passwdqc, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b pwqcheck, pwqfilter (\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438) \u0438 pwqgen \u0434\u043b\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0440\u0443\u0447\u043d\u0443\u044e \u0438\u043b\u0438 \u0438\u0437 \u0441\u043a\u0440\u0438\u043f\u0442\u043e\u0432, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0443 libpasswdqc. \u041f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0441 PAM (\u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e Linux, FreeBSD, DragonFly BSD, Solaris, HP-UX), \u0442\u0430\u043a \u0438 \u0431\u0435\u0437 PAM (\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 passwordcheck […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-99236","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Uppsl\u00e4pp av passwdqc 2.0.0 med st\u00f6d f\u00f6r externa filter | ProHoster","description":"En ny version av passwdqc har sl\u00e4ppts - ett verktyg f\u00f6r att kontrollera komplexiteten i l\u00f6senord och l\u00f6senfraser, som inkluderar modulen pam_passwdqc, programmen pwqcheck, pwqfilter (tillagd i denna version) och pwqgen.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u044b\u043f\u0443\u0441\u043a passwdqc 2.0.0 \u0441 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u043e\u0439 \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0444\u0438\u043b\u044c\u0442\u0440\u043e\u0432 | ProHoster","og:description":"\u0412\u044b\u043f\u0443\u0449\u0435\u043d\u0430 \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f passwdqc - \u043d\u0430\u0431\u043e\u0440\u0430 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u0432 \u0434\u043b\u044f \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0441\u043b\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u043f\u0430\u0440\u043e\u043b\u0435\u0439 \u0438 \u043f\u0430\u0440\u043e\u043b\u044c\u043d\u044b\u0445 \u0444\u0440\u0430\u0437, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044c pam_passwdqc, \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u044b pwqcheck, pwqfilter (\u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0432 \u044d\u0442\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438) \u0438 pwqgen \u0434\u043b\u044f.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/vypusk-passwdqc-2-0-0-s-podderzhkoj-vneshnih-filtrov","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2021-02-22T20:22:43+00:00","article:modified_time":"2021-02-22T20:22:43+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"99236","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[],"defaultGraph":"","defaultPostTypeGraph":""},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 09:53:59","updated":"2026-02-22 15:29:50","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/99236","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=99236"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/99236\/revisions"}],"predecessor-version":[{"id":162219,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/99236\/revisions\/162219"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=99236"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=99236"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=99236"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}