Molo, Habr! Kwizimvo komnye wethu Abafundi babuze umbuzo onomdla: "Kutheni ufuna i-flash drive ene-encryption ye-hardware xa i-TrueCrypt ikhona?" - kwaye bade bavakalise iinkxalabo malunga "Ungaqiniseka njani ukuba akukho zibhukhimakhi kwisoftware kunye nehardware yeKingston drive ?β Siyiphendule le mibuzo ngokufutshane, kodwa emva koko sagqiba kwelokuba isihloko sifanele uhlalutyo olusisiseko. Yile nto siza kuyenza kule post.
I-AES ye-encryption ye-hardware, efana ne-software encryption, sele ikhona ixesha elide, kodwa ingaba ikhusela njani idatha ebuthathaka kwi-flash drives? Ngubani oqinisekisa ezo drives, kwaye ngaba ezi ziqinisekiso zinokuthenjwa? Ngubani ofuna i-flash drives "enzima" ukuba ungasebenzisa iinkqubo zasimahla ezifana neTrueCrypt okanye iBitLocker. Njengoko ubona, isihloko esibuzwe kumagqabaza siphakamisa imibuzo emininzi. Masizame ukuyiqonda yonke into.
Ngaba uguqulelo oluntsonkothileyo lwehardware lwahluke njani kuguqulelo oluntsonkothileyo lwesoftware?
Kwimeko ye-flash drives (kunye nee-HDD kunye nee-SSD), i-chip ekhethekileyo ebekwe kwibhodi yesekethe yesixhobo isetyenziselwa ukuphumeza ukubethelwa kwedatha ye-hardware. Inenombolo eyakhelwe-ngaphakathi yejenereyitha eyenza izitshixo zoguqulelo oluntsonkothileyo. Idatha iguqulelwa ngokuntsonkothileyo kwaye icocwe ngoko nangoko xa ufaka igama eliyimfihlo lomsebenzisi. Kule meko, phantse akunakwenzeka ukufikelela kwidatha ngaphandle kwegama lokugqitha.
Xa usebenzisa i-software encryption, "ukutshixa" idatha kwi-drive inikezelwa yi-software yangaphandle, esebenza njengeendleko eziphantsi kwiindlela zokubethelwa kwe-hardware. Ukungalungi kwesoftware enjalo kunokubandakanya imfuneko ye-banal yohlaziyo oluqhelekileyo ukuze unikeze ukuchasana kubuchule obuhlala buphucuka. Ukongeza, amandla enkqubo yekhompyuter (kunokuba i-chip ye-hardware eyahlukileyo) isetyenziselwa ukucima idatha, kwaye, ngokwenene, izinga lokukhusela i-PC limisela inqanaba lokukhusela i-drive.
Olona phawu luphambili lokuqhuba nge-encryption yehardware yiprosesa eyahlukileyo ye-cryptographic, ubukho bayo busixelela ukuba izitshixo ze-encryption aziyishiyi i-USB drive, ngokungafaniyo nezitshixo zesoftware ezinokugcinwa okwethutyana kwi-RAM yekhompyuter okanye kwi-hard drive. Kwaye ngenxa yokuba uguqulelo oluntsonkothileyo lwesoftwe lusebenzisa imemori yePC ukugcina inani leenzame zokungena, ayinakunqanda uhlaselo olukhohlakeleyo lwegama lokugqitha okanye isitshixo. Ikhawuntari yokuzama ukungena inokuphinda isetwe ngokutsha ngumhlaseli de inkqubo yokuqhekeka kwegama lokugqitha ifumane indibaniselwano efunekayo.
Ngendlela ..., kumazwana kwinqaku "βAbasebenzisi baye baqaphela ukuba, umzekelo, inkqubo yeTrueCrypt inemowudi ephathwayo yokusebenza. Nangona kunjalo, oku akusiyo inzuzo enkulu. Inyaniso kukuba kule meko inkqubo yokufihla igcinwe kwimemori ye-flash drive, kwaye oku kwenza kube lula ukuhlaselwa.
Umgca ophantsi: indlela yesofthiwe ayiboneleli kwinqanaba eliphezulu lokhuseleko njenge-encryption ye-AES. Kungaphezulu kokhuselo olusisiseko. Kwelinye icala, uguqulelo oluntsonkothileyo lwesoftware lwedatha ebalulekileyo lusengcono kunokuba lungabonakali konke konke. Kwaye le nyaniso isenza sikwazi ukwahlula ngokucacileyo phakathi kwezi ntlobo ze-cryptography: i-hardware encryption ye-flash drives iyimfuneko, kunoko, kwicandelo loshishino (umzekelo, xa abasebenzi benkampani besebenzisa iidrives ezikhutshwe emsebenzini); kwaye isoftware ifanelekile ngakumbi kwiimfuno zabasebenzisi.
Nangona kunjalo, i-Kingston iyahlula iimodeli zayo zokuqhuba (umzekelo, i-IronKey S1000) kwiinguqulelo eziSiseko kunye nezeShishini. Ngokumalunga nokusebenza kunye neempawu zokukhusela, ziphantse zifane omnye komnye, kodwa inguqulo yenkampani inika amandla okulawula i-drive usebenzisa i-SafeConsole/IronKey EMS software. Ngale software, i-drive isebenza kunye nelifu okanye iiseva zendawo ukunyanzelisa ukude ukhuseleko kunye nemigaqo-nkqubo yokufikelela. Abasebenzisi banikwa ithuba lokufumana kwakhona amagama ayimfihlo alahlekileyo, kwaye abalawuli bayakwazi ukutshintsha iidrive ezingasasetyenziswa kwimisebenzi emitsha.
Iqhuba njani iKingston flash drives enomsebenzi wofihlo we-AES?
I-Kingston isebenzisa i-256-bit ye-AES-XTS ye-encryption ye-hardware (usebenzisa iqhosha elikhethiweyo elipheleleyo elipheleleyo) kuzo zonke iidrives zayo ezikhuselekileyo. Njengoko siphawulile ngasentla, ii-flash drives ziqulathe kwisiseko sazo i-chip eyahlukileyo yoguqulelo oluntsonkothileyo kunye nokucofa idatha, esebenza njenge-generator yeenombolo ezisoloko zisebenza.
Xa uqhagamshela isixhobo kwizibuko le-USB okokuqala, iWizard yokuSeta ngokuQalisa ikukhuthaza ukuba usete igama lokugqitha elingundoqo ukufikelela kwisixhobo. Emva kokuvula i-drive, i-encryption algorithms iya kuqala ukusebenza ngokuhambelana nokukhethwa komsebenzisi.
Ngelo xesha, kumsebenzisi, umgaqo wokusebenza kwe-flash drive uya kuhlala ungatshintshi - uya kukwazi ukukhuphela kunye nokubeka iifayile kwimemori yesixhobo, njengaxa usebenza nge-USB flash drive eqhelekileyo. Ukwahlukana kuphela kukuba xa udibanisa i-flash drive kwikhompyutheni entsha, kuya kufuneka ukuba ufake igama lokugqitha ukuze ufumane ukufikelela kulwazi lwakho.
Kutheni kwaye ngubani ofuna i-flash drives kunye ne-encryption ye-hardware?
Kwimibutho apho idatha ebuthathaka iyinxalenye yeshishini (nokuba yezemali, ezempilo, okanye urhulumente), uguqulelo oluntsonkothileyo yeyona ndlela ithembekileyo yokhuseleko. I-AES ye-encryption ye-hardware sisisombululo esinokutshatyalaliswa esinokusetyenziswa yiyo nayiphi na inkampani: ukusuka kubantu ngabanye kunye namashishini amancinci ukuya kwiinkampani ezinkulu, kunye nemikhosi yomkhosi kunye nemibutho karhulumente. Ukujonga lo mbandela ngakumbi ngakumbi, ukusebenzisa iidrive ze-USB ezifihliweyo kuyimfuneko:
- Ukuqinisekisa ukhuseleko lwedatha yenkampani eyimfihlo
- Ukukhusela ulwazi lwabathengi
- Ukukhusela iinkampani ekulahlekeni kweengeniso kunye nokunyaniseka kwabathengi
Kuyafaneleka ukuba uqaphele ukuba abanye abavelisi bee-flash drives ezikhuselekileyo (kubandakanywa ne-Kingston) babonelela ngeenkampani ngezisombululo ezilungiselelwe ukuhlangabezana neemfuno kunye neenjongo zabathengi. Kodwa imigca eveliswe ngobuninzi (kubandakanya i-DataTraveler flash drives) ihlangabezana nemisebenzi yabo ngokugqibeleleyo kwaye iyakwazi ukubonelela ngokhuseleko lodidi lwenkampani.
1. Ukuqinisekisa ukhuseleko lwedatha yenkampani eyimfihlo
Kwi-2017, umhlali waseLondon wafumanisa i-USB drive kwenye yeepaki eziqulethe ulwazi olungakhuselekanga lwe-password olunxulumene nokhuseleko lwe-Airport ye-Heathrow, kubandakanywa indawo yeekhamera zokucupha kunye nolwazi olucacileyo malunga namanyathelo okhuseleko kwimeko yokufika kwe-Airport ye-Heathrow. amagosa aphezulu. I-flash drive ikwaqulathe iinkcukacha zokudlula nge-elektroniki kunye neekhowudi zokufikelela kwiindawo ezithintelweyo zesikhululo seenqwelo-moya.
Abahlalutyi bathi isizathu seemeko ezinjalo kukungakwazi ukufunda nokubhala nge-cyber kwabasebenzi benkampani, abanokuthi "bavuze" idatha eyimfihlo ngokungakhathali kwabo. I-Flash drives kunye ne-encryption ye-hardware ixazulula le ngxaki ngokuyinxenye, kuba ukuba i-drive enjalo ilahlekile, awuyi kukwazi ukufikelela kwidatha kuyo ngaphandle kwegama eliyimfihlo legosa elifanayo lokhuseleko. Kwimeko nayiphi na into, oku akuyichasi into yokuba abasebenzi kufuneka baqeqeshelwe ukuphatha ii-flash drives, nokuba sithetha ngezixhobo ezikhuselweyo ngokufihlwa.
2. Ukukhusela ulwazi lwabathengi
Umsebenzi obaluleke ngakumbi kunawo nawuphi na umbutho kukunyamekela idatha yabathengi, engafanele ibe phantsi komngcipheko wokulungelelaniswa. Ngendlela, yile ngcaciso ehlala idluliswa phakathi kwamacandelo ahlukeneyo amashishini kwaye, njengomthetho, iyimfihlo: umzekelo, ingaba nedatha malunga nokuthengiselana kwemali, imbali yonyango, njl.
3. Ukukhuselwa kwilahleko yenzuzo kunye nokunyaniseka kwabathengi
Ukusebenzisa izixhobo ze-USB ezinoguqulelo lwehardware kunokunceda ukuthintela iziphumo ezibi kwimibutho. Iinkampani ezaphula imithetho yokhuseleko lwedatha yobuqu zinokuhlawuliswa iimali ezinkulu. Ngoko ke, umbuzo kufuneka ubuze: ngaba kufanelekile ukuthatha umngcipheko wokwabelana ngolwazi ngaphandle kokukhuselwa okufanelekileyo?
Ngaphandle kokuthathela ingqalelo impembelelo yezemali, isixa sexesha kunye nezibonelelo ezichithwe ukulungisa iziphene zokhuseleko ezenzekayo zinokubaluleke ngokufanayo. Ukongeza, ukuba ukophulwa kwedatha kubeka esichengeni idatha yabathengi, inkampani ibeka emngciphekweni ukunyaniseka kwebhrendi, ngakumbi kwiimarike apho kukho abakhuphisana nabo ababonelela ngemveliso okanye inkonzo efanayo.
Ngubani oqinisekisa ukungabikho kwe "bookmarks" kumenzi xa usebenzisa i-flash drives nge-encryption ye-hardware?
Kwisihloko esisiphakamisile, lo mbuzo mhlawumbi ngowona uphambili. Phakathi kwamagqabantshintshi kwinqaku elimalunga neKingston DataTraveler drives, sadibana nomnye umbuzo onomdla: "Ngaba izixhobo zakho zinophicotho oluvela kwiingcali ezizimeleyo zomntu wesithathu?" Kulungile ... inomdla onengqondo: abasebenzisi bafuna ukuqiniseka ukuba ii-USB drives zethu aziqulathanga iimpazamo eziqhelekileyo, ezifana ne-encryption ebuthathaka okanye ukukwazi ukudlula ukungena kwephasiwedi. Kwaye kule nxalenye yenqaku siza kuthetha malunga nokuba zeziphi iinkqubo zokuqinisekiswa kwe-Kingston drives ezihamba ngayo ngaphambi kokufumana isimo se-flash drives ekhuselekileyo ngokwenene.
Ngubani oqinisekisa ukuthembeka? Kubonakala ngathi sinokuthi, "UKingston uyenzile - uyaqinisekisa." Kodwa kule meko, ingxelo enjalo iya kuba ichanekile, kuba umenzi ngumntu onomdla. Ngoko ke, zonke iimveliso zivavanywa ngumntu wesithathu onobuchule obuzimeleyo. Ngokukodwa, i-Kingston hardware-encrypted drives (ngaphandle kwe-DTLPG3) ngabathathi-nxaxheba kwi-Cryptographic Module Validation Programme (CMVP) kwaye baqinisekiswa kwi-Federal Information Processing Standard (FIPS). Iidrives zikwaqinisekiswa ngokwe-GLBA, HIPPA, HITECH, PCI kunye nemigangatho ye-GTSA.
1. Inkqubo yokuqinisekisa imodyuli yeCryptographic
Inkqubo ye-CMVP yiprojekthi edibeneyo yeZiko leSizwe leMigangatho kunye neTekhnoloji yeSebe lezoRhwebo lase-US kunye neZiko lezoKhuseleko le-Cyber ββββlaseCanada. Injongo yeprojekthi kukukhuthaza imfuno yezixhobo ze-cryptographic eziqinisekisiweyo kunye nokubonelela ngeemetriki zokhuseleko kwii-arhente ze-federal kunye namashishini alawulwayo (njengamaziko emali kunye nezempilo) asetyenziswa ekuthengeni izixhobo.
Izixhobo zivavanywa ngokubhekiselele kwiseti ye-cryptographic kunye neemfuno zokhuseleko nge-cryptography ezimeleyo kunye neelebhu zokuvavanya ukhuseleko ezivunyiweyo yiNkqubo yeSizwe yokuVunywa kweLabhoratri yeSizwe (i-NVLAP). Ngelo xesha, ingxelo nganye yebhubhoratri ihlolwe ukuthotyelwa kwe-Federal Information Processing Standard (FIPS) 140-2 kwaye iqinisekiswe yi-CMVP.
Iimodyuli eziqinisekisiweyo njenge-FIPS 140-2 ezithobelayo ziyacetyiswa ukuba zisetyenziswe yi-US kunye nee-arhente zomdibaniso waseKhanada ukuya ngoSeptemba 22, 2026. Emva koku, ziya kufakwa kuluhlu olugciniweyo, nangona ziseza kusetyenziswa. Ngomhla wama-22 kuSeptemba, 2020, ukwamkelwa kwezicelo zokuqinisekiswa ngokomgangatho we-FIPS 140-3 kwaphela. Nje ukuba izixhobo ziphumelele iitshekhi, ziya kuhanjiswa kuluhlu olusebenzayo lwezixhobo ezivavanyiweyo nezithembekileyo iminyaka emihlanu. Ukuba i-cryptographic device ayidluli ukuqinisekiswa, ukusetyenziswa kwayo kwii-arhente zikarhulumente e-United States naseKhanada akukhuthazwa.
2. Zeziphi iimfuno zokhuseleko ezenziwa sisiqinisekiso se-FIPS?
I-Hacking idatha nakwi-drive efihliweyo engaqinisekiswanga kunzima kwaye bambalwa abantu abanokuyenza, ngoko xa ukhetha idrayivu yabathengi yokusetyenziswa kwekhaya kunye nesatifikethi, akufanele ukhathazeke. Kwicandelo leenkampani, imeko yahlukile: xa ukhetha i-USB drives ekhuselekileyo, iinkampani zihlala zincamathela ukubaluleka kumanqanaba esiqinisekiso se-FIPS. Nangona kunjalo, ayinguye wonke umntu onombono ocacileyo wokuba athetha ukuthini la manqanaba.
Umgangatho wangoku we-FIPS 140-2 uchaza amanqanaba amane awohlukeneyo okhuseleko anokuthi ahlangabezane nawo. Inqanaba lokuqala linika isethi ephakathi yeempawu zokhuseleko. Inqanaba lesine lithetha iimfuno ezingqongqo zokuzikhusela kwezixhobo. Inqanaba lesibini nelesithathu libonelela ngokuhlelwa kwezi mfuno kwaye lenze uhlobo lwentsingiselo yegolide.
- Ukhuseleko lweNqanaba loku-XNUMX: Inqanaba le-XNUMX le-USB drives eqinisekisiweyo ifuna ubuncinci i-algorithm ye-encryption okanye enye into yokhuseleko.
- Inqanaba lesibini lokhuseleko: apha i-drive ayifuni kuphela ukubonelela ngokukhuselwa kwe-cryptographic, kodwa kunye nokubona ukungena okungavumelekanga kwinqanaba le-firmware ukuba umntu uzama ukuvula i-drive.
- Inqanaba lesithathu lokhuseleko: libandakanya ukuthintela ukukhwabanisa ngokutshabalalisa "izitshixo" ze-encryption. Oko kukuthi, impendulo kwimizamo yokungena iyafuneka. Kwakhona, inqanaba lesithathu liqinisekisa umgangatho ophezulu wokukhusela ekuphazamisekeni kwe-electromagnetic: oko kukuthi, ukufunda idatha kwi-flash drive usebenzisa izixhobo zokungena ngaphandle kwamacingo akuyi kusebenza.
- Inqanaba lesine lokhuseleko: inqanaba eliphezulu, elibandakanya ukukhuselwa okupheleleyo kwemodyuli ye-cryptographic, enika ithuba eliphezulu lokufumana kunye nokuchasana nayo nayiphi na imizamo yokufikelela engagunyaziswanga ngumsebenzisi ongagunyaziswanga. Iiflash drives ezifumene isatifikethi senqanaba lesine zikwabandakanya iindlela zokukhusela ezingavumeli ukukhwabanisa ngokuguqula i-voltage kunye nobushushu be-ambient.
Ezi drives zilandelayo zaseKingston ziqinisekisiwe kwi-FIPS 140-2 iNqanaba 2000: DataTraveler DT4000, DataTraveler DT2G1000, IronKey S300, IronKey D10. Into ephambili yala ma-drives kukukwazi ukuphendula umzamo wokungena: ukuba igama eliyimfihlo lifakwe ngokungalunganga ngamaxesha angama-XNUMX, idatha kwi-drive iya kutshatyalaliswa.
Yintoni enye enokwenziwa yi-Kingston flash drives ngaphandle koguqulelo oluntsonkothileyo?
Xa kufikwa kukhuseleko olupheleleyo lwedatha, kunye ne-hardware encryption ye-flash drives, ii-antivirus ezakhelwe ngaphakathi, ukukhuselwa kwiimpembelelo zangaphandle, ulungelelwaniso kunye namafu obuqu kunye nezinye izinto esiza kuxoxa ngazo ngezantsi zisiza. Akukho mahluko mkhulu kwii-flash drives ezinofihlo lwesoftware. Umtyholi ukwiinkcukacha. Kwaye nantsi into.
1. Kingston DataTraveler 2000
Makhe sithathe i-USB drive umzekelo. . Le yenye yee-flash drives kunye ne-encryption ye-hardware, kodwa kwangaxeshanye ekuphela kwayo enekhibhodi yayo ebonakalayo kwimeko. Eli qhosha-liqhosha le-11 lenza i-DT2000 izimele ngokupheleleyo kwiinkqubo zenginginya (ukusebenzisa i-DataTraveler 2000, kufuneka ucinezele iqhosha leSitshixo, emva koko ngenisa igama lokugqitha lakho, kwaye ucinezele iqhosha leSitshixo kwakhona). Ukongeza, le flash drive ine-IP57 idigri yokukhusela kumanzi kunye nothuli (okumangalisayo kukuba, i-Kingston ayithethi oku naphi na okanye kwi-package okanye kwiinkcukacha kwiwebhusayithi esemthethweni).
Kukho ibhetri ye-lithium ye-polymer ye-2000mAh ngaphakathi kwe-DataTraveler 40, kwaye u-Kingston ucebisa abathengi ukuba bafake i-drive kwi-port ye-USB ubuncinane iyure ngaphambi kokuyisebenzisa ukuvumela ibhetri ukuba ihlawule. Ngendlela, kwenye yezinto zangaphambili : Akukho sizathu sokukhathazeka - i-flash drive ayivulwanga kwitshaja kuba akukho zicelo kumlawuli yinkqubo. Ke ngoko, akukho mntu uya kuba idatha yakho ngokungena ngaphandle kwamacingo.
2. I-Kingston DataTraveler Locker+ G3
Ukuba sithetha ngemodeli yaseKingston -itsala ingqalelo ngokukwazi ukuqwalasela ukugcinwa kwedatha ukusuka kwi-flash drive ukuya kwisitoreji selifu likaGoogle, i-OneDrive, i-Amazon Cloud okanye iDropbox. Ungqamaniso lwedatha nezi nkonzo lukwabonelelwe.
Omnye wemibuzo esibuzwa ngabafundi bethu ngulo: "Kodwa ungayithatha njani idatha efihliweyo kwi-backup?" Ilula kakhulu. Inyaniso kukuba xa ungqamaniso kunye nelifu, ulwazi luchithwa, kwaye ukukhuselwa kwe-backup efini kuxhomekeke kubuchule belifu ngokwalo. Ngoko ke, iinkqubo ezinjalo zenziwa kuphela ngokubona komsebenzisi. Ngaphandle kwemvume yakhe, akukho datha iya kulayishwa kwilifu.
3. I-Kingston DataTraveler Vault yaBucala 3.0
Kodwa izixhobo zeKingston Zikwaza ne-antivirus eyakhelwe-ngaphakathi yoKhuseleko lweDrive evela kwi-ESET. Le yokugqibela ikhusela idatha ekuhlaselweni kwe-USB drive yi-virus, i-spyware, i-Trojans, iimbungu, i-rootkits, kunye nokudibanisa kwiikhompyutheni zabanye abantu, umntu unokuthi, akoyiki. I-antivirus iya kulumkisa ngokukhawuleza umnini we-drive malunga neengozi ezinokubakho, ukuba kukho naziphi na ezifunyenweyo. Kule meko, umsebenzisi akadingi ukufaka isoftware ye-anti-virus ngokwakhe kwaye ahlawule olu khetho. I-ESET Drive Security ifakwe kwangaphambili kwi-flash drive kunye nelayisensi yeminyaka emihlanu.
I-Kingston DT Vault Privacy 3.0 yenzelwe kwaye ijoliswe ngokukodwa kwiingcali ze-IT. Ivumela abalawuli ukuba bayisebenzise njenge-standalone drive okanye bayongeze njengenxalenye yesisombululo solawulo oluphakathi, kwaye ingasetyenziselwa ukuqwalasela okanye ukuseta kwakhona ukude amagama agqithisiweyo kunye nokuqwalasela imigaqo-nkqubo yesixhobo. UKingston wongeze i-USB 3.0, ekuvumela ukuba udlulise idatha ekhuselekileyo ngokukhawuleza kune-USB 2.0.
Ngokubanzi, i-DT Vault Privacy 3.0 lolona khetho lubalaseleyo kwicandelo leshishini kunye nemibutho efuna ukhuseleko oluphezulu lwedatha yabo. Inokucetyiswa kubo bonke abasebenzisi abasebenzisa iikhompyuter ezibekwe kuthungelwano loluntu.
Ngolwazi oluthe kratya malunga neemveliso zeKingston, qhagamshelana .
umthombo: www.habr.com