Osapereka zilembo zazing'ono

Ma block cipher ang'onoang'ono ndi ma aligorivimu a symmetric encryption omwe amagwira ntchito pa midadada ya 64 bits kapena kucheperapo, ndipo kumvetsetsa mphamvu zawo ndi malire ndikofunikira pabizinesi iliyonse yomwe imagwiritsa ntchito deta yachinsinsi. Ngakhale kuti machitidwe obadwa nawo amadalirabe, miyezo yamakono yachitetezo ikufuna kwambiri njira yabwino yosankha ma cipher omwe amayang'anira kufananirana, magwiridwe antchito, ndi kuwonekera pachiwopsezo.

Kodi Ma Ciphers Ang'onoang'ono Ndi Chiyani Ndipo Chifukwa Chiyani Mabizinesi Ayenera Kusamala?

A block cipher encrypts tinthu tating'onoting'ono tomwe titha kukhala ndi mawu osavuta kumva. Ma block siphers ang'onoang'ono - omwe amagwiritsa ntchito makulidwe a 32- mpaka 64-bit - anali muyeso waukulu kwazaka zambiri. DES, Blowfish, CAST-5, ndi 3DES onse ali mgululi. Adapangidwa munthawi yomwe zida zowerengera zidasowa, ndipo makulidwe ake ophatikizika amawonetsa zopingazi.

Kwa mabizinesi masiku ano, kugwirizana kwa zilembo zazing'ono sizophunzira. Makina abizinesi, zida zophatikizika, zoyambira zamabanki, ndi makina owongolera mafakitale nthawi zambiri amagwiritsa ntchito mawu ngati 3DES kapena Blowfish. Ngati bungwe lanu limagwira ntchito iliyonse mwazinthu izi—kapena kuyanjana ndi mabwenzi amene amatero—muli kale m’gulu laling’ono la chilengedwe, kaya mukuzindikira kapena ayi.

Nkhani yayikulu ndi yomwe olemba ma cryptographer amatcha birthday bound. Ndi 64-bit block cipher, pambuyo pa pafupifupi 32 gigabytes ya data yosungidwa pansi pa kiyi yomweyo, kuthekera kwa kugunda kumakwera mpaka kuopsa. M'malo amakono a data pomwe ma terabytes amayenda m'makina tsiku lililonse, gawoli limadutsa mwachangu.

Kodi Zowopsa Zenizeni Zachitetezo Zomangika ku Ma Ciphers Ang'onoang'ono Ndi Ziti?

Zowopsa zomwe zimalumikizidwa ndi zilembo zazing'ono zolembedwa bwino komanso zimagwiritsidwa ntchito mwachangu. Gulu lodziwika kwambiri lowukira ndiSWEET32 attack, zowululidwa ndi ofufuza mu 2016. SWEET32 inawonetsa kuti wowukira yemwe amatha kuyang'anira kuchuluka kwa magalimoto omwe asungidwa pansi pa 64-bit block cipher (monga 3DES mu TLS) akhoza kubwezeretsanso mawu omveka bwino podutsa tsiku lakubadwa.

"Chitetezo sikutanthauza kupeŵa zoopsa zonse-komanso kumvetsetsa zoopsa zomwe mukuzivomereza ndikupanga zisankho zodziwika bwino za iwo. Kunyalanyaza tsiku lobadwa pa ma block ciphers ang'onoang'ono si chiopsezo chowerengedwa; ndi kuyang'anitsitsa."

Kupitilira SWEET32, zilembo zazing'ono zimakumana ndi zoopsa izi:

• Lekani kugundana: Mibulo iwiri ikatulutsa zilembo zofanana, owukira amazindikira kugwirizana komwe kulipo pakati pa zigawo za data, zomwe zimatha kuwonetsa ma tokeni otsimikizira kapena makiyi agawo.
• Kuwonekera kwa protocol ya zolowa: Ma block block ang'onoang'ono nthawi zambiri amawonekera m'masinthidwe achikale a TLS (TLS 1.0/1.1), kukulitsa chiwopsezo chamunthu pakati pamakampani akale omwe amatumizidwa.
• Ziwopsezo zazikulu zogwiritsanso ntchito: Makina omwe samatembenuza makiyi achinsinsi pafupipafupi mokwanira amakulitsa vuto la tsiku lobadwa, makamaka nthawi yayitali kapena kutumiza ma data ambiri.
• Kulephera kutsatira: Zowongolera zomwe zikuphatikiza PCI-DSS 4.0, HIPAA, ndi GDPR tsopano mwina zikukhumudwitsa kapena kuletsa 3DES muzochitika zina, ndikuyika mabizinesi pachiwopsezo chowunika.
• Kuwonekera kwa Supply chain: Malaibulale ena ndi ogulitsa ma API omwe sanasinthidwe atha kukambirana mwakachetechete timagulu tating'onoting'ono ta block cipher, kupangitsa ziwopsezo zomwe simungathe kuzilamulira.

Kodi Ma Ciphers Ang'onoang'ono Amafananiza Bwanji ndi Njira Zamakono Zakubisa?

AES-128 ndi AES-256 amagwira ntchito pa midadada 128-bit, kuwirikiza kanayi nthawi yobadwa kuyerekeza ndi 64-bit ciphers. Mwachidziwitso, AES ikhoza kubisa pafupifupi ma 340 undecillion byte chiwopsezo chodzabadwa chisanakhale chachikulu - kuthetsa nkhawa za kugunda kwa ntchito iliyonse yotheka.

ChaCha20, njira ina yamakono, ndi njira yolumikizirana yomwe imalepheretsa zovuta zazikuluzikulu ndipo imapereka magwiridwe antchito apadera pa Hardware popanda kuthamangitsa kwa AES - kupangitsa kuti ikhale yabwino pama foni am'manja ndi kutumiza kwa IoT. TLS 1.3, mulingo wagolide wapano pachitetezo cha mayendedwe, umangothandizira ma cipher suites ozikidwa pa AES-GCM ndi ChaCha20-Poly1305, kuchotsa ma block ang'onoang'ono ang'onoang'ono pamayendedwe otetezeka amakono.

Mtsutso wa kagwiridwe ka ntchito womwe poyamba unkakondera zilembo zazing'ono wagweranso. Ma CPU amakono akuphatikiza AES-NI hardware acceleration yomwe imapangitsa kuti AES-256 encryption ikhale yofulumira kuposa Blowfish kapena 3DES yokhazikitsidwa ndi mapulogalamu pa pafupifupi zida zonse zamabizinesi zomwe zidagulidwa chaka cha 2010 chitatha.

Ndi Zochitika Zotani Zenizeni Zapadziko Lonse Zomwe Zikutsimikizirabe Chidziwitso Chachidule Cha Block Block?

Ngakhale ali pachiwopsezo, zilembo zazing'ono sizinasowe. Kumvetsetsa komwe amalimbikira ndikofunikira pakuwunika kolondola kwachiwopsezo:

Kuphatikizika kwadongosolo lakale kumakhalabe vuto lalikulu. Malo a Mainframe, ma SCADA akale ndi machitidwe owongolera mafakitale, ndi maukonde azachuma omwe ali ndi mapulogalamu azaka makumi ambiri nthawi zambiri sangasinthidwe popanda ndalama zazikulu zaumisiri. Muzochitika izi, yankho siliri kuvomereza mwachibwana-ndiko kuchepetsa chiopsezo kupyolera mu kusintha kwakukulu, kuyang'anira kuchuluka kwa magalimoto, ndi magawo a maukonde.

Malo ophatikizika ndi oponderezedwa nthawi zina amakomerabe kukhazikitsa kwa compact cipher. Masensa ena a IoT ndi kugwiritsa ntchito makhadi anzeru amagwira ntchito mokumbukira ndikuwongolera komwe ngakhale AES imakhala yosatheka. Ma ciphers opepuka opangidwa ndi cholinga monga PRESENT kapena SIMON, opangidwira makamaka kuti azigwira ntchito movutikira, amapereka mbiri yabwino yachitetezo kuposa ma ciphers a 64-bit omwe adakhalako munthawi imeneyi.

Kafukufuku wa Cryptographic ndi kusanthula kwa protocol amafuna kumvetsetsa zilembo zazing'onoting'ono kuti muwunikire bwino malo owukira mumayendedwe omwe alipo. Akatswiri achitetezo omwe akuchita mayeso olowera kapena kuwunika zophatikizika ndi gulu lachitatu ayenera kudziwa bwino izi.

Kodi Mabizinesi Angapange Bwanji Njira Yoyendetsera Ntchito Yachinsinsi?

Kuwongolera zisankho zachinsinsi pabizinesi yomwe ikukula sivuto laukadaulo chabe, ndi momwe zimagwirira ntchito. Mabizinesi omwe ali ndi zida zingapo, nsanja, ndi zophatikizira amakumana ndi vuto losunga kuwonekera kwa momwe deta imasinthidwira panthawi yopuma komanso podutsa m'magulu awo onse.

Njira yokonzedwa bwino imaphatikizapo kuwunika ntchito zonse za cipher suite configuration, kukakamiza TLS 1.2 osachepera (TLS 1.3) pa mapeto onse, kukhazikitsa mfundo zazikuluzikulu za kasinthasintha zomwe zimapangitsa kuti magawo 64-bit asakhale afupi kwambiri kuti asapitirire malire okhudzana ndi tsiku lobadwa, ndikumanga njira zowunikira ogulitsa zomwe zikuphatikiza zofunikira za cryptographiclist.

Kuyika pakati pa bizinesi yanu kudzera papulatifomu yolumikizana kumachepetsa kwambiri zovuta zamalamulo pochepetsa kuchuluka kwa mfundo zonse zophatikizira zomwe zimafunikira kuwunikanso chitetezo chamunthu payekha.

Mafunso Ofunsidwa Kawirikawiri

Kodi 3DES ikadali yotetezeka kugwiritsa ntchito bizinesi?

NIST idasiya kugwiritsa ntchito 3DES mpaka 2023 ndikuyiletsa kuzinthu zatsopano. Kwa machitidwe omwe alipo kale, 3DES ingakhale yovomerezeka ndi makina osinthasintha kwambiri (kusunga deta pansi pa 32GB pa kiyi iliyonse) ndi maulamuliro amtundu wa netiweki, koma kusamukira ku AES kumalimbikitsidwa kwambiri ndipo kumafunikira kwambiri ndi machitidwe omvera.

Ndimadziwa bwanji ngati mabizinesi anga akugwiritsa ntchito zilembo zazing'ono?

Gwiritsani ntchito zida zojambulira za TLS monga kuyesa kwa seva ya SSL Labs kuti mupeze malo omwe anthu amakumana nawo. Pazithandizo zamkati, zida zowunikira ma netiweki zokhala ndi kuthekera kowunika ma protocol zitha kuzindikira kukambirana kwa cipher suite mu traffic yomwe idagwidwa. Gulu lanu la IT kapena mlangizi wachitetezo atha kuyendetsa kafukufuku wokhudzana ndi ma API, nkhokwe, ndi maseva ogwiritsira ntchito kuti apange mndandanda wathunthu.

Kodi kusintha ku AES kumafuna kuti ndilembenso nambala yanga yofunsira?

Nthawi zambiri, ayi. Malaibulale amakono a cryptographic (OpenSSL, BouncyCastle, libsodium) amapanga kusankha kwa cipher kusintha kosintha m'malo molembanso kachidindo. Khama loyambirira la uinjiniya limaphatikizapo kukonzanso mafayilo osinthira, zoikamo za TLS, ndikuyesa kuti zomwe zidasungidwa kale zitha kusamutsidwa kapena kubisidwanso popanda kutayika kwa data. Mapulogalamu omangidwa pazifukwa zamakono nthawi zambiri amawonetsa kusankha kwa cipher ngati gawo, osati tsatanetsatane wa kukhazikitsa.

Zisankho zachinsinsi zomwe zapangidwa lero zimatanthawuza zachitetezo cha bizinesi yanu kwazaka zambiri. Mewayz imapatsa mabizinesi omwe akukula gawo la 207-module-module yophimba CRM, kutsatsa, ecommerce, analytics, ndi zina zambiri - zomangidwa ndi zida zosamalira chitetezo, kuti mutha kuyang'ana kwambiri pakukulitsa m'malo moyika ziwopsezo pazida zogawika. Lowani nawo anthu 138,000+ omwe akuwongolera bizinesi yawo mwanzeru pa app.mewayz.com, ndi mapulani oyambira $19/mwezi basi.