ืžืขืœื“ื•ื ื’ ืคื•ืŸ GnuPG 2.4.0

ื ืึธืš ืคื™ื ืฃ ื™ืึธืจ ืคื•ืŸ ืึทื ื˜ื•ื•ื™ืงืœื•ื ื’, ื“ื™ ืžืขืœื“ื•ื ื’ ืคื•ืŸ ื“ื™ GnuPG 2.4.0 (GNU ืคึผืจื™ื•ื•ืึทื˜ืงื™ื™ื˜ ื’ืึทืจื“) ื˜ืึธืึธืœืงื™ื˜ ืื™ื– ื“ืขืจืœืื ื’ื˜, ืงืึทืžืคึผืึทื˜ืึทื‘ืึทืœ ืžื™ื˜ OpenPGP (RFC-4880) ืื•ืŸ S/MIME ืกื˜ืึทื ื“ืึทืจื“ืก, ืื•ืŸ ืคึผืจืึทื•ื•ื™ื™ื“ื™ื ื’ ื™ื•ื˜ื™ืœืึทื˜ื™ื– ืคึฟืึทืจ ื“ืึทื˜ืŸ ืขื ืงืจื™ืคึผืฉืึทืŸ, ืืจื‘ืขื˜ืŸ ืžื™ื˜ ืขืœืขืงื˜ืจืึธื ื™ืฉ ืกื™ื’ื ืึทื˜ืฉืขืจื–, ืฉืœื™ืกืœืขืŸ. ืคืึทืจื•ื•ืึทืœื˜ื•ื ื’ ืื•ืŸ ืึทืงืกืขืก ืฆื• ืฆื™ื‘ื•ืจ ืกื˜ืึธืจื™ื“ื–ืฉ ืฉืœื™ืกืœืขืŸ.

GnuPG 2.4.0 ืื™ื– ืคึผืึทื–ื™ืฉืึทื ื“ ื•ื•ื™ ื“ืขืจ ืขืจืฉื˜ืขืจ ืžืขืœื“ื•ื ื’ ืคื•ืŸ ืึท ื ื™ื™ึท ืกื˜ืึทื‘ื™ืœ ืฆื•ื•ื™ื™ึทื’, ื•ื•ืึธืก ื™ื ืงืึธืจืคึผืขืจื™ื™ืฅ ืขื ื“ืขืจื•ื ื’ืขืŸ ืึทืงื™ื•ืžื™ืึทืœื™ื™ื˜ื™ื“ ื‘ืขืฉืึทืก ื“ืขืจ ืฆื•ื’ืจื™ื™ื˜ื•ื ื’ ืคื•ืŸ 2.3.x ืจื™ืœื™ืกื™ื–. ืฆื•ื•ื™ื™ึทื’ 2.2 ืื™ื– ืจืขืœืึทื’ื™ื™ื˜ื™ื“ ืฆื• ื“ื™ ืึทืœื˜ ืกื˜ืึทื‘ื™ืœ ืฆื•ื•ื™ื™ึทื’, ื•ื•ืึธืก ื•ื•ืขื˜ ื–ื™ื™ืŸ ื’ืขืฉื˜ื™ืฆื˜ ื‘ื™ื– ื“ืขื ืกื•ืฃ ืคื•ืŸ 2024. ื“ื™ GnuPG 1.4 ืฆื•ื•ื™ื™ึทื’ ื”ืืœื˜ ืฆื• ื–ื™ื™ืŸ ืžื™ื™ื ื˜ื™ื™ื ื“ ื•ื•ื™ ืึท ืงืœืึทืกื™ืฉ ืกืขืจื™ืข ื•ื•ืึธืก ืงืึทื ืกื•ืžื– ืžื™ื ื™ืžืึทืœ ืจืขืกื•ืจืกืŸ, ืื™ื– ืคึผืึทืกื™ืง ืคึฟืึทืจ ืขืžื‘ืขื“ื™ื“ ืกื™ืกื˜ืขืžืขืŸ ืื•ืŸ ืื™ื– ืงืึทืžืคึผืึทื˜ืึทื‘ืึทืœ ืžื™ื˜ ืœืขื’ืึทื˜ ืขื ืงืจื™ืคึผืฉืึทืŸ ืึทืœื’ืขืจื™ื“ืึทืžื–.

ืฉืœื™ืกืœ ืขื ื“ืขืจื•ื ื’ืขืŸ ืื™ืŸ GnuPG 2.4 ืงืึทืžืคึผืขืจื“ ืžื™ื˜ ื“ื™ ืคืจื™ืขืจื“ื™ืงืข ืกื˜ืึทื‘ื™ืœ ืฆื•ื•ื™ื™ึทื’ 2.2:

  • ื ื”ื™ื ื˜ืขืจื’ืจื•ื ื˜ ืคึผืจืึธืฆืขืก ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื™ื ืกื˜ืจื•ืžืขื ื˜ ืึท ืฉืœื™ืกืœ ื“ืึทื˜ืึทื‘ื™ื™ืก, ื ื™ืฆืŸ ื“ื™ SQLite DBMS ืคึฟืึทืจ ืกื˜ืึธืจื™ื“ื–ืฉ ืื•ืŸ ื“ืขืžืึทื ืกื˜ืจื™ื™ื˜ื™ื ื’ ืึท ื‘ืื˜ื™ื™ื˜ื™ืง ืคืึทืกื˜ืขืจ ื–ื•ื›ืŸ ืคึฟืึทืจ ืฉืœื™ืกืœืขืŸ. ืฆื• ื’ืขื‘ืŸ ื“ื™ ื ื™ื™ึทืข ืจื™ืคึผืึทื–ืึทื˜ืึธืจื™, ืื™ืจ ืžื•ื–ืŸ ื’ืขื‘ืŸ ื“ื™ "ื ื•ืฆืŸ-ืงื™ื™ื‘ืึธืงืกื“" ืึธืคึผืฆื™ืข ืื™ืŸ common.conf.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ tpm2d ื”ื™ื ื˜ืขืจื’ืจื•ื ื˜ ืคึผืจืึธืฆืขืก ืฆื• ืœืึธื–ืŸ TPM 2.0 ื˜ืฉื™ืคึผืก ืฆื• ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ืฆื• ื‘ืึทืฉื™ืฆืŸ ืคึผืจื™ื•ื•ืึทื˜ ืฉืœื™ืกืœืขืŸ ืื•ืŸ ื“ื•ืจื›ืคื™ืจืŸ ืขื ืงืจื™ืคึผืฉืึทืŸ ืึธื“ืขืจ ื“ื™ื’ื™ื˜ืึทืœ ื›ืกื™ืžืข ืึทืคึผืขืจื™ื™ืฉืึทื ื– ืื•ื™ืฃ ื“ื™ TPM ืžืึธื“ื•ืœืข ื–ื™ื™ึทื˜.
  • ื ื ื™ื™ึทืข ื’ืคึผื’ ืงืึธืจื˜ ื ื•ืฆืŸ ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜, ื•ื•ืึธืก ืงืขื ืขืŸ ื–ื™ื™ืŸ ื’ืขื•ื•ื™ื™ื ื˜ ื•ื•ื™ ืึท ืคืœืขืงืกืึทื‘ืึทืœ ืฆื•ื‘ื™ื ื“ ืคึฟืึทืจ ืึทืœืข ืฉื˜ื™ืฆื˜ ืกืžืึทืจื˜ ืงืึทืจื˜ืœ ื˜ื™ื™ืคึผืก.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ื ื™ื™ึท gpg-auth ื ื•ืฆืŸ ืคึฟืึทืจ ืึธื˜ืขื ื˜ืึทืงื™ื™ืฉืึทืŸ.
  • ืฆื•ื’ืขื’ืขื‘ืŸ ืึท ื ื™ื™ึทืข ืคึผืจืึธืกื˜ ืงืึทื ืคื™ื’ื™ืขืจื™ื™ืฉืึทืŸ ื˜ืขืงืข, common.conf, ื•ื•ืึธืก ืื™ื– ื’ืขื ื™ืฆื˜ ืฆื• ื’ืขื‘ืŸ ื“ื™ ืงื™ื™ื‘ืึธืงืกื“ ื”ื™ื ื˜ืขืจื’ืจื•ื ื˜ ืคึผืจืึธืฆืขืก ืึธืŸ ืึทื“ื™ื ื’ ืกืขื˜ื˜ื™ื ื’ืก ืฆื• gpg.conf ืื•ืŸ gpgsm.conf ืกืขืคึผืขืจืึทื˜ืœื™.
  • ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ื™ ืคื™ื ืคื˜ ื•ื•ืขืจืกื™ืข ืคื•ืŸ โ€‹โ€‹ืฉืœื™ืกืœืขืŸ ืื•ืŸ ื“ื™ื’ื™ื˜ืึทืœ ืกื™ื’ื ืึทื˜ืฉืขืจื– ืื™ื– ืฆื•ื’ืขืฉื˜ืขืœื˜, ื•ื•ืึธืก ื ื™ืฆื˜ ื“ื™ SHA256 ืึทืœื’ืขืจื™ื“ืึทื ืึทื ืฉื˜ืึธื˜ ืคื•ืŸ SHA1.
  • ื“ื™ ืคืขืœื™ืงื™ื™ึทื˜ ืึทืœื’ืขืจื™ื“ืึทืžื– ืคึฟืึทืจ ืฆื™ื‘ื•ืจ ืฉืœื™ืกืœืขืŸ ื–ืขื ืขืŸ ed25519 ืื•ืŸ cv25519.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ AEAD ื‘ืœืึธืง ืขื ืงืจื™ืคึผืฉืึทืŸ ืžืึธื“ืขืก OCB ืื•ืŸ EAX.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ X448 ื™ืœื™ืคึผื˜ื™ืง ืงื•ืจื•ื•ืขืก (ืขื“448, cv448).
  • ื“ืขืจืœื•ื™ื‘ื˜ ืฆื• ื ื•ืฆืŸ ื’ืจื•ืคึผืข ื ืขืžืขืŸ ืื™ืŸ ืฉืœื™ืกืœ ืจืฉื™ืžื•ืช.
  • ืฆื•ื’ืขื’ืขื‘ืŸ "--ื˜ืฉื•ื™ื“" ืึธืคึผืฆื™ืข ืฆื• gpg, gpgsm, gpgconf, gpg-card ืื•ืŸ gpg-connect-agent ืฆื• ื˜ื•ื™ืฉืŸ ื“ื™ ื‘ืึทื ื™ืฆืขืจ ืฉื™ื™ึทืŸ.
  • ืื•ื™ืฃ ื“ื™ Windows ืคึผืœืึทื˜ืคืึธืจืžืข, ืคื•ืœ ืื•ื ื™ืงืึธื“ ืฉื˜ื™ืฆืŸ ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“ ืื•ื™ืฃ ื“ื™ ื‘ืึทืคึฟืขืœืŸ ืฉื•ืจื”.
  • ืฆื•ื’ืขืœื™ื™ื’ื˜ ื‘ื•ื™ืขืŸ ืึธืคึผืฆื™ืข "--ืžื™ื˜-ืฆืก" ืฆื• ืื•ื™ืกืงืœื™ื™ึทื‘ืŸ ื“ื™ TSS ื‘ื™ื‘ืœื™ืึธื˜ืขืง.
  • gpgsm ืžื•ืกื™ืฃ ื™ืงืขืจื“ื™ืง ECC ืฉื˜ื™ืฆืŸ ืื•ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืฉืึทืคึฟืŸ ืขื“ื“ืกืึท ืกืขืจื˜ื™ืคื™ืงืึทืฅ. ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื“ืขืงืจื™ืคึผื˜ื™ื ื’ ื“ืึทื˜ืŸ ื™ื ืงืจื™ืคึผื˜ื™ื“ ื ื™ืฆืŸ ืึท ืคึผืึทืจืึธืœ. ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ AES-GCM ื“ืขืงืจื™ืคึผื˜ื™ืึธืŸ. ืฆื•ื’ืขืœื™ื™ื’ื˜ ื ื™ื™ึทืข ืึธืคึผืฆื™ืขืก "--ldapserver" ืื•ืŸ "--show-certs".
  • ื“ืขืจ ืึทื’ืขื ื˜ ืึทืœืึทื•ื– ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ ื“ื™ "ืœื™ื™ื‘ืœ:" ื•ื•ืขืจื˜ ืื™ืŸ ื“ื™ ืฉืœื™ืกืœ ื˜ืขืงืข ืฆื• ืงืึทื ืคื™ื’ื™ืขืจ ื“ื™ PIN ืคึผื™ื ื˜ืœืขืš. ื™ืžืคึผืœืึทืžืขื ืึทื“ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ssh-agent ื™ืงืกื˜ืขื ืฉืึทื ื– ืคึฟืึทืจ ืกื•ื•ื™ื•ื•ืข ื•ื•ืขืจื™ืึทื‘ืึทืœื–. ืฆื•ื’ืขื’ืขื‘ืŸ Win32-OpenSSH ืขืžื™ืึทืœื™ื™ืฉืึทืŸ ื“ื•ืจืš gpg-agent. ืฆื• ืฉืึทืคึฟืŸ ืคื™ื ื’ื’ืขืจืคึผืจื™ื ืฅ ืคื•ืŸ SSH ืฉืœื™ืกืœืขืŸ, ื“ื™ SHA-256 ืึทืœื’ืขืจื™ื“ืึทื ืื™ื– ื’ืขื ื™ืฆื˜ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜. ืฆื•ื’ืขื’ืขื‘ืŸ "--pinentry-formatted-passphrase" ืื•ืŸ "--check-sym-passphrase-pattern" ืึธืคึผืฆื™ืขืก.
  • Scd ื”ืื˜ ื™ืžืคึผืจื•ื•ื•ื“ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ืืจื‘ืขื˜ืŸ ืžื™ื˜ ืงื™ื™ืคืœ ืงืึธืจื˜ ืœื™ื™ืขื ืขืจ ืื•ืŸ ื˜ืึธืงืขื ืก. ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ื ื•ืฆืŸ ืขื˜ืœืขื›ืข ืึทืคึผืœืึทืงื™ื™ืฉืึทื ื– ืžื™ื˜ ืึท ืกืคึผืขืฆื™ืคื™ืฉ ืงืœื•ื’ ืงืึธืจื˜ ืื™ื– ื™ืžืคึผืœืึทืžืขื ืึทื“. ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ PIV ืงืึทืจื“ืก, Telesec Signature Cards v2.0 ืื•ืŸ Rohde&Schwarz Cybersecurity. ืฆื•ื’ืขืœื™ื™ื’ื˜ ื ื™ื™ึทืข ืึธืคึผืฆื™ืขืก "--ืึทืคึผืคึผืœื™ืงืึทื˜ื™ืึธืŸ-ื‘ื™ืœื›ืขืจืงื™ื™ึทื˜" ืื•ืŸ "--ืคึผืกืงืกืง-ืฉืขืจื“".
  • ื“ื™ "--show-configs" ืึธืคึผืฆื™ืข ืื™ื– ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฆื• ื“ื™ gpgconf ื ื•ืฆืŸ.
  • ืขื ื“ืขืจื•ื ื’ืขืŸ ืื™ืŸ gpg:
    • ืฆื•ื’ืขื’ืขื‘ืŸ ืคึผืึทืจืึทืžืขื˜ืขืจ "--ืœื™ืกื˜-ืคื™ืœื˜ืขืจ" ืคึฟืึทืจ ืกืึทืœืขืงื˜ื™ื•ื•ืœื™ ื“ื–ืฉืขื ืขืจื™ื™ื˜ื™ื ื’ ืึท ืจืฉื™ืžื” ืคื•ืŸ ืฉืœื™ืกืœืขืŸ, ืคึฟืึทืจ ื‘ื™ื™ึทืฉืคึผื™ืœ "gpg -k --list-filter 'select=revoked-f && sub/algostr=ed25519โ€ฒ".
    • ืฆื•ื’ืขืœื™ื™ื’ื˜ ื ื™ื™ึท ืงืึทืžืึทื ื“ื– ืื•ืŸ ืึธืคึผืฆื™ืขืก: "--ืฉื ืขืœ-ื“ืขืจื”ื™ื™ึทื ื˜ื™ืงืŸ-ืคึผืจืขืฃ", "ื•ื•ื™ื™ึทื–ืŸ-ืคึผืจืขืฃ", "ื•ื•ื™ื™ึทื–ืŸ-ืคึผืจืขืฃ-ื•ื•ืขืจื‘ืึธื•ืกืข", "-ืขืงืกืคึผืึธืจื˜-ืคื™ืœื˜ืขืจ ืขืงืกืคึผืึธืจื˜-ืจืขื•ื•ืึธืงืก", "-ืคื•ืœ-ื˜ื™ืžืขืกื˜ืจื™ื ื’ืก", "-ืžื™ืŸ - rsa-length", "--forbid-gen-key", "--override-compliance-check", "--force-sign-key" ืื•ืŸ "--no-auto-trust-new-key".
    • ืฆื•ื’ืขืœื™ื™ื’ื˜ ืฉื˜ื™ืฆืŸ ืคึฟืึทืจ ื™ืžืคึผืึธืจื˜ื™ื ื’ ืžื ื”ื’ ื‘ืึทื•ื•ื™ื™ึทื–ืŸ ืจืขื•ื•ืึธืงืึทื˜ื™ืึธืŸ ืจืฉื™ืžื•ืช.
    • ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ืคื•ืŸ ื“ื™ื’ื™ื˜ืึทืœ ืกื™ื’ื ืึทื˜ืฉืขืจื– ืื™ื– ืึทืงืกืขืœืขืจื™ื™ื˜ื™ื“ 10 ืžืืœ ืึธื“ืขืจ ืžืขืจ.
    • ื“ื™ ื•ื•ืขืจืึทืคืึทืงื™ื™ืฉืึทืŸ ืจืขื–ื•ืœื˜ืึทื˜ืŸ ืื™ืฆื˜ ืึธืคืขื ื’ืขืŸ ืื•ื™ืฃ ื“ื™ "--ืกืขื ื“ืขืจ" ืึธืคึผืฆื™ืข ืื•ืŸ ื“ื™ ืฉื™ื™ึทืŸ ืคื•ืŸ ื“ื™ ื›ืกื™ืžืข ื‘ืืฉืขืคืขืจ.
    • ืฆื•ื’ืขื’ืขื‘ืŸ ื“ื™ ืคื™ื™ื™ืงื™ื™ื˜ ืฆื• ืึทืจื•ื™ืกืคื™ืจืŸ ืขื“448 ืฉืœื™ืกืœืขืŸ ืคึฟืึทืจ SSH.
    • ื‘ืœื•ื™ื– OCB ืžืึธื“ืข ืื™ื– ืขืจืœื•ื™ื‘ื˜ ืคึฟืึทืจ AEAD ืขื ืงืจื™ืคึผืฉืึทืŸ.
    • ื“ืขืงืจื™ืคึผื˜ื™ืึธืŸ ืึธืŸ ืึท ืฆื™ื‘ื•ืจ ืฉืœื™ืกืœ ืื™ื– ืขืจืœื•ื™ื‘ื˜ ืื•ื™ื‘ ืึท ืงืœื•ื’ ืงืึธืจื˜ ืื™ื– ื™ื ืกืขืจื˜ืึทื“.
    • ืคึฟืึทืจ ื“ื™ ed448 ืื•ืŸ cv448 ืึทืœื’ืขืจื™ื“ืึทืžื–, ื“ื™ ืฉืึทืคื•ื ื’ ืคื•ืŸ ืฉืœื™ืกืœืขืŸ ืคื•ืŸ ื“ื™ ืคื™ื ืคื˜ ื•ื•ืขืจืกื™ืข ืื™ื– ืื™ืฆื˜ ืคืึธืจืกืึทื‘ืœื™ ืขื ื™ื™ื‘ืึทืœื“
    • ื•ื•ืขืŸ ื™ืžืคึผืึธืจื˜ื™ื ื’ ืคื•ืŸ ืึท LDAP ืกืขืจื•ื•ืขืจ, ื“ื™ ื–ื™ืš-ืกื™ื’-ื‘ืœื•ื™ื– ืึธืคึผืฆื™ืข ืื™ื– ืคืึทืจืงืจื™ืคึผืœื˜ ื“ื•ืจืš ืคืขืœื™ืงื™ื™ึทื˜.
  • gpg ื ื™ื˜ ืžืขืจ ื ื™ืฆื˜ 64-ื‘ื™ืกืœ ื‘ืœืึธืง ื’ืจื™ื™ืก ืึทืœื’ืขืจื™ื“ืึทืžื– ืคึฟืึทืจ ืขื ืงืจื™ืคึผืฉืึทืŸ. ื“ื™ ื ื•ืฆืŸ ืคื•ืŸ 3DES ืื™ื– ืคึผืจืึธื•ื›ื™ื‘ืึทื˜ืึทื“, ืื•ืŸ AES ืื™ื– ื“ืขืจืงืœืขืจื˜ ื•ื•ื™ ื“ืขืจ ืžื™ื ื™ืžื•ื ื’ืขืฉื˜ื™ืฆื˜ ืึทืœื’ืขืจื™ื“ืึทื. ืฆื• ื“ื™ืกื™ื™ื‘ืึทืœ ื“ื™ ืจื™ืกื˜ืจื™ืงืฉืึทืŸ, ืื™ืจ ืงืขื ืขืŸ ื ื•ืฆืŸ ื“ื™ "--ืœืึธื–ืŸ-ืึทืœื˜-ืกื™ืคืขืจ-ืึทืœื’ืึธืก" ืึธืคึผืฆื™ืข.
  • ื“ื™ ืกื™ืžืงืจื™ืคึผืจื•ืŸ ื ื•ืฆืŸ ืื™ื– ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ (ืึทื•ื˜ื“ื™ื™ื˜ื™ื“ ืจืึทืคึผืขืจ ืื•ื™ืฃ ืฉืคึผื™ืฅ ืคื•ืŸ ื“ื™ ืคื•ื ื“ืจื•ื™ืกื ื“ื™ืง ื˜ืฉื™ืึทืกืžื•ืก ื ื•ืฆืŸ).
  • ื“ื™ ืœืขื’ืึทื˜ PKA ืฉืœื™ืกืœ ื•ืคื“ืขืงื•ื ื’ ืื•ืคึฟืŸ ืื™ื– ื“ื™ืกืงืึทื ื˜ื™ื ื™ื•ื“ ืื•ืŸ ืึธืคึผืฆื™ืขืก ืคึฟืึทืจื‘ื•ื ื“ืŸ ืžื™ื˜ ืขืก ื–ืขื ืขืŸ ืึทื•ื•ืขืงื’ืขื ื•ืžืขืŸ.

ืžืงื•ืจ: opennet.ru

ืœื™ื™ื’ืŸ ืึท ื‘ืึทืžืขืจืงื•ื ื’