Musa ukugqithisa iibhloko ze-ciphers ezincinci

Iibhloko ze-ciphers ezincinci zi-symmetric encryption algorithms ezisebenza kwiibhloko zedatha ye-bits ye-64 okanye ngaphantsi, kwaye ukuqonda amandla kunye nemida kubalulekile kulo naliphi na ishishini eliphethe idatha ebuthathaka. Ngelixa iinkqubo zelifa zisaxhomekeke kuzo, imigangatho yokhuseleko yanamhlanje iya ifuna indlela yobuchule ekukhetheni i-cipher elinganisa ukuhambelana, ukusebenza, kunye nokuvezwa komngcipheko.

Ziziphi kanye iiBhloko eziNcinci iiCiphers kwaye kutheni kufuneka amashishini akhathalele?

Ibhloko ye-cipher iguqulela ngokuntsonkothileyo ubukhulu beengceba zemibhalo ecacileyo ibe yi-ciphertext. Iibhloko ezincinci ze-ciphers-ezo zisebenzisa i-32- ukuya kwi-64-bit ubukhulu beebhloko-yayiyeyona mgangatho obalaseleyo kumashumi eminyaka. I-DES, i-Blowfish, i-CAST-5, kunye ne-3DES zonke ziwela kolu didi. Zaziyilwa ngexesha apho izixhobo zokubala zazinqongophele, kwaye ubukhulu bebhloko bazo obubambeneyo bubonise loo miqobo.

Kumashishini namhlanje, ukufaneleka kweebhloko ze-ciphers ezincinci akuyomfundo. Iisistim zamashishini, izixhobo ezizinzisiweyo, iziseko zebhanki zelifa, kunye neenkqubo zolawulo lwamashishini zihlala zisebenzisa ii-ciphers ezifana ne-3DES okanye i-Blowfish. Ukuba umbutho wakho usebenza nayiphi na kwezi meko-okanye idibanisa namahlakani akwenzayo-sele ukwi-ecosystem encinci yebhloko, nokuba uyayiqonda okanye hayi.

Umba ongundoqo yinto ebizwa ngokuba yi-cryptographers i-birthday bound. Ngebhloko ye-64-bit ye-cipher, emva kwe-32 ye-gigabytes yedatha efihliweyo phantsi kwesitshixo esifanayo, ukungqubana kwamathuba kunyuka kumanqanaba ayingozi. Kwiindawo zedatha zangoku apho iiterabytes zihamba ngeesistim yonke imihla, lo mqobo ugqithwa ngokukhawuleza.

Ziziphi iiNgcipheko zoKhuseleko zokwenyani ezibotshelelwe kwiiBloko eziNcinci iiCiphers?

Ubuthathaka obunxulunyaniswa neebhloko ezincinci ze-ciphers zibhalwe kakuhle kwaye ziyaxhatshazwa. Olona didi lohlaselo lubalaseleyo luyiSWEET32 uhlaselo, oluchazwe ngabaphandi ngo-2016. I-SWEET32 ibonise ukuba umhlaseli onokubeka iliso ngokwaneleyo itrafikhi efihliweyo phantsi kwe-64-bit block cipher (njenge-3DES kwi-TLS) unokubuyisela umbhalo ocacileyo ngokungqubana kweentsuku zokuzalwa.

"Ukhuseleko alukho malunga nokuphepha yonke ingozi-imalunga nokuqonda ukuba yeyiphi imingcipheko oyamkelayo kunye nokwenza izigqibo ezinolwazi malunga nabo. Ukungahoywa usuku lokuzalwa oluboshwe kwiibhloko ezincinci ze-block ciphers akuyona ingozi ebalwayo; kukugqithiswa. "

Ngapha kwe SWEET32, iibhloko ezincinci ze-ciphers zijongana nale ngozi ibhaliweyo:

• Block uhlaselo longquzulwano: Xa iibhloko ezimbini ezingenanto zivelisa iibhloko ezifanayo ze-ciphertext, abahlaseli bafumana ukuqonda malunga nobudlelwane phakathi kwamacandelo edatha, okunokuthi kuveze iithokheni zobungqina okanye izitshixo zeseshoni.
• Utyhileko lweprothokholi yelifa: Iibhloko ze-ciphers ezincinci zihlala zivela kuhlengahlengiso lwe-TLS yakudala (TLS 1.0/1.1), esonyusa umngcipheko woluntu ekumiselweni kwamashishini amadala.
• Ubuthathaka bokusebenzisa kwakhona okungundoqo: Iinkqubo ezingajikisi izitshixo zoguqulelo oluntsonkothileyo rhoqo ngokwaneleyo ziyayikhulisa ingxaki yokuzalwa, ngakumbi kwiiseshoni eziqhuba ixesha elide okanye ugqithiso lwedatha eninzi.
• Ukungaphumeleli kokuthotyelwa: Izikhokelo zolawulo ezibandakanya i-PCI-DSS 4.0, i-HIPAA, kunye ne-GDPR ngoku mhlawumbi idikibala okanye inqande ngokuthe ngqo i-3DES kwiimeko ezithile, ibeka amashishini ekuphicothweni komngcipheko.
• Supply chain exposure: Ithala leencwadi leqela lesithathu kunye nomthengisi APIs ezingahlaziywanga zingathethathethana ngokuthe cwaka iibhloko ze-cipher suites, zidale ubuthathaka ngaphandle kolawulo lwakho oluthe ngqo.

Njani iibhloko zebhloko eziNcinci xa zithelekiswa neendlela ezizezinye zokuFihliswa kwangoku?

AES-128 kunye ne-AES-256 zisebenza kwiibhloko ze-128-bit, ziphindaphinda kane umda wokuzalwa xa kuthelekiswa ne-64-bit ciphers. Ngokwezinto ezisebenzayo, i-AES inokuguqulela ngokuntsonkothileyo malunga nama-340 eebhayithi ze-undecillion phambi kokuba umngcipheko wokuzalwa ube ngobalulekileyo-ukuphelisa ngokufanelekileyo inkxalabo yongquzulwano kuwo nawuphi na umsebenzi obambekayo.

I-ChaCha20, enye indlela yanamhlanje, i-cipher yomlambo eshiya inkxalabo yobungakanani bebhloko ngokupheleleyo kwaye inikezela ngokusebenza okukhethekileyo kwi-hardware ngaphandle kokukhawuleza kwe-AES-iyenza ilungele indawo eziphathwayo kunye nokuthunyelwa kwe-IoT. I-TLS 1.3, umgangatho wangoku wegolide wokhuseleko lwezothutho, ixhasa ngokukodwa i-cipher suites esekelwe kwi-AES-GCM kunye ne-ChaCha20-Poly1305, isusa iibhloko zebhloko ezincinci kunxibelelwano olukhuselekileyo lwangoku ngokuyila.

Ingxoxo yokusebenza ebikhe yathanda iibhloko ezincinci ze-ciphers nayo iye yawa. Ii-CPUs zangoku zibandakanya i-AES-NI hardware acceleration eyenza i-AES-256 encryption ikhawuleze kune-software-implemented Blowfish okanye i-3DES phantse kuzo zonke iihardware zeshishini ezithengwe emva ko-2010.

Zeziphi iimeko zehlabathi zokwenyani ezisathethelela uLwazi lweBloko encinci yeCipher?

Ngaphandle kobuthathaka babo, iibhloko ezincinci ze-ciphers azikanyamalali. Ukuqonda apho azingisa khona kubalulekile kuvavanyo oluchanekileyo lomngcipheko:

Udibaniso lwenkqubo yelifa ihlala isisiseko sokusetyenziswa. Iimeko ezingqongileyo ze-Mainframe, iSCADA endala kunye neenkqubo zolawulo lwemizi-mveliso, kunye nothungelwano lwezemali oluqhuba isoftware yamashumi eminyaka ubudala kaninzi alunakuhlaziywa ngaphandle kotyalo-mali olubalulekileyo lobunjineli. Kwezi meko, impendulo ayikokwamkelwa ngokungaboniyo—kukunciphisa umngcipheko ngokujikeleziswa okungundoqo, ukujongwa komthamo wezithuthi, kunye nokwahlulwa kwenethiwekhi.

Iindawo ezizinzisiweyo nezithintelweyo ngamanye amaxesha zisathanda ukuphunyezwa kwe-compact cipher. Ezinye izinzwa ze-IoT kunye nezicelo zekhadi elihlakaniphile zisebenza phantsi kwememori kunye nemiqobo yokucubungula apho i-AES ingasebenzi. Injongo-ezakhelwe ii-ciphers ezinobunzima obukhaphukhaphu ezifana ne-PRESENT okanye i-SIMON, eyilelwe ngokukodwa i-hardware ethintelweyo, ibonelela ngeeprofayile zokhuseleko ezingcono kunelifa le-64-bit ciphers kule meko.

Uphando lweCryptographic kunye nohlalutyo lweprotocolidinga ukuqonda i-block ciphers encinci ukuvavanya ngokufanelekileyo iindawo zokuhlaselwa kwiinkqubo ezikhoyo. Iingcali zokhuseleko eziqhuba iimvavanyo zokungena okanye ukuphicotha udibaniso lweqela lesithathu kufuneka zikwazi kakuhle ezi ziphathamandla ze-cipher.

Kufuneka Amashishini Asakhe Njani iSicwangciso esiSebenzayo soLawulo lokuFihla?

Ukulawula izigqibo ezintsonkothileyo kulo lonke ishishini elikhulayo asiyongxaki yobuchwephesha kuphela—yinto esebenzayo. Amashishini asebenzisa izixhobo ezininzi, amaqonga, kunye nokudityaniswa ajongene nomceli mngeni wokugcina ukubonakala kwindlela idatha efihliweyo ngayo xa uphumle kwaye uthutha kuyo yonke i-stack yabo.

Indlela ecwangcisiweyo iquka ukuphicotha zonke iinkonzo zoqwalaselo lwe-cipher suite, ukunyanzeliswa kwe-TLS 1.2 ubuncinane (TLS 1.3 ekhethwayo) kuzo zonke iindawo zokuphela, ukumisela imigaqo-nkqubo engundoqo yokujikeleza egcina iiseshoni ze-64-bit cipher zimfutshane ngokwaneleyo ukuze zihlale ngaphantsi kwemida yokuzalwa, kunye nokwakhiwa kweenkqubo zovavanyo lwabathengisi ezibandakanya iimfuno zokujonga i-cryptographic kwipropathi.

Ukwenza ishishini lakho libe kwindawo enye ngeqonga elidityanisiweyo kunciphisa kakhulu ukuntsonkotha kolawulo ngokunciphisa inani lilonke lamanqaku okudibanisa afuna uhlolo lokhuseleko lomntu ngamnye.

Imibuzo Ebuzwa Rhoqo

Ngaba i-3DES isathathwa njengekhuselekile kusetyenziso lweshishini?

I-NIST iye yarhoxiswa ngokusesikweni i-3DES ukuya kutsho ngo-2023 kwaye ayizange iyivumeleke kwizicelo ezitsha. Kwiinkqubo ezikhoyo zelifa, i-3DES inokwamkeleka ngokujikeleza okungqongqo okungqongqo (ukugcina idatha yeseshoni ingaphantsi kwe-32GB ngesitshixo) kunye nolawulo lwenqanaba lenethiwekhi, kodwa ukufudukela kwi-AES kukhuthazwa kakhulu kwaye kufunwa kakhulu yimimiselo yokuthotyelwa.

Ndingafumanisa njani ukuba iisistim zeshishini lam zisebenzisa iibhlokhi ezincinci?

Sebenzisa izixhobo zokuskena ze-TLS ezifana ne-SSL Labs' yovavanyo lweseva yeendawo ezijongene noluntu. Kwiinkonzo zangaphakathi, izixhobo zokubeka iliso zothungelwano ezinezakhono zokuhlola iprotocol zinokuchonga uthethathethwano lwe-cipher suite kwitrafikhi ebanjwayo. Iqela lakho le-IT okanye umcebisi wokhuseleko unokuqhuba uphicotho lwe-cipher ngokuchasene ne-APIs, i-database, kunye neeseva zesicelo ukuvelisa uluhlu olupheleleyo.

Ngaba ukutshintshela kwi-AES kufuna ukuba ndiyibhale kwakhona ikhowudi yesicelo sam?

Kwiimeko ezininzi, hayi. Iilayibrari ze-cryptographic zanamhlanje (i-OpenSSL, i-BouncyCastle, i-libsodium) yenza ukhetho lwe-cipher lutshintshe ulungelelwaniso kunokuba ikhowudi ibhale kwakhona. Inzame yobunjineli ephambili ibandakanya ukuhlaziywa kweefayile zokucwangcisa, izicwangciso ze-TLS, kunye nokuvavanya ukuba idatha ekhoyo efihliweyo ingafuduswa okanye iguqulelwe kwakhona ngaphandle kokulahleka kwedatha. Usetyenziso olwakhelwe kwiinkqubo zangoku ngokuqhelekileyo luveza ukhetho lwe-cipher njengeparameter, hayi inkcukacha yophumezo enekhowudi.

Izigqibo zoguqulelo oluntsonkothileyo ezenziweyo namhlanje zichaza ukuma kokhuseleko lweshishini lakho iminyaka. I-Mewayz inika amashishini akhulayo iqonga elisebenzayo lemodyuli engama-207-egubungela iCRM, ukuthengisa, i-ecommerce, uhlalutyo, kunye nokunye-eyakhelwe ngeziseko zokhuseleko, ukuze ukwazi ukugxila ekwandiseni kunokuba ubambe ubuthathaka kwisixhobo esiqhekezayo. Joyina abasebenzisi abayi-138,000+ abalawula ishishini labo ngokukrelekrele eapp.mewayz.com, ngezicwangciso eziqala kwi-$19/ngenyanga kuphela.