NIST imalimbikitsa kuti aliyense amene amadalira SHA-1 kuti asinthe chitetezo kuti agwiritse ntchito ma algorithms otetezeka kwambiri a SHA-2 ndi SHA-3.
US National Institute of Standards and Technology. (NIST) yalengeza kuti SHA-1 hash algorithm yachotsedwa, osati yotetezeka, ndipo kugwiritsa ntchito kwake sikuvomerezeka, akuti akukonzekera kusiya kugwiritsa ntchito SHA-1 mpaka Disembala 31, 2030 ndikusinthiratu ma algorithms otetezeka a SHA-2 ndi SHA-3.
SHA-1 inali imodzi mwa njira zoyamba kugwiritsidwa ntchito kwambiri Pofuna kuteteza deta, SHA-1, yomwe imayimira "chitetezo cha hash algorithm," yagwiritsidwa ntchito Kuchokera ku 1995 monga gawo la Federal Information Processing Standard (FIPS) 180-1.
Ndi mtundu wosinthidwa pang'ono wa SHA, ntchito yoyamba ya hashi yomwe boma la feduro linakhazikitsidwa kuti ligwiritsidwe ntchito ponseponse mu 1993. Popeza makompyuta amphamvu kwambiri masiku ano amatha kuwononga ndondomekoyi, NIST imalengeza kuti SHA-1 iyenera kuchotsedwa pa December 31. , 2030, mokomera magulu otetezedwa kwambiri a SHA-2 ndi SHA-3 algorithm.
"Tikupangira kuti aliyense amene amadalira SHA-1 kuti atetezedwe asamukire ku SHA-2 kapena SHA-3 posachedwa," adatero Chris Celi, wasayansi wamakompyuta wa NIST.
Ma module a Cryptographic omwe amathandizira SHA-1 sangathe kuyesedwa kotsatira ku NIST ndipo kutumizidwa kwawo ku mabungwe a boma la US sikutheka (satifiketiyo imaperekedwa kwa zaka zisanu zokha, pambuyo pake kuyesedwanso kumafunika) .
Mu 2005, kuthekera kongoyerekeza kuukira kwa SHA-1 kudatsimikiziridwa. Mu 2017, chiwopsezo choyamba cha kugundana ndi chiwongolero chopatsidwa cha SHA-1 chidawonetsedwa, chomwe chimalola ma seti awiri osiyanasiyana kuti asankhe zowonjezera, kulumikizana komwe kungayambitse kugundana komanso kupanga hashi yofananayo (mwachitsanzo, pazikalata ziwiri zomwe zilipo, zowonjezera ziwiri zitha kuwerengedwa, ndipo ngati imodzi ikalumikizidwa ku chikalata choyamba ndi ina yachiwiri, zotsatira za SHA-1 za mafayilowa zidzakhala zofanana).
Pomwe kuwukira kwa SHA-1 m'mapulogalamu ena kukuchulukirachulukira, NIST idzasiya kugwiritsa ntchito SHA-1 pamadongosolo ake omaliza omwe atsala pofika pa Disembala 31, 2030. Pofika tsikulo, NIST ikukonzekera:
Sindikizani FIPS 180-5 (kukonzanso kwa FIPS 180) kuti muchotse tsatanetsatane wa SHA-1.
Wunikaninso SP 800-131A ndi zofalitsa zina za NIST zomwe zakhudzidwa kuti ziwonetsere SHA-1 yomwe ikukonzekera kupuma pantchito.
Pangani ndikusindikiza njira yosinthira kuti mutsimikizire ma algorithms a cryptographic ndi ma module.
Chinthu chomaliza chikutanthauza NIST's Cryptographic Module Validation Program (CMVP), yomwe imayesa ngati ma modules, midadada yomangira yomwe imapanga makina osungiramo ntchito, amagwira ntchito bwino. Ma module onse a cryptographic omwe amagwiritsidwa ntchito mu federal encryption ayenera kutsimikiziridwa zaka zisanu zilizonse, kotero kusintha kwa SHA-1 kudzakhudza makampani omwe amapanga ma module.
Mu 2019, njira yodziwira kugunda idasinthidwa kwambiri ndipo mtengo wochitira chiwembucho unatsitsidwa kufika pa madola masauzande angapo. Mu 2020, kuwukira kogwira ntchito kuti apange siginecha ya digito ya PGP ndi GnuPG idawonetsedwa.
"Boma silingalole kugula ma module omwe akugwiritsabe ntchito SHA-1 pambuyo pa 2030," adatero Celi. "Mabizinesi ali ndi zaka zisanu ndi zitatu kuti apereke ma module osinthidwa omwe sagwiritsanso ntchito SHA-1. Chifukwa nthawi zambiri pamakhala zotsalira zomwe zatumizidwa tsiku lomaliza lisanafike, timalimbikitsa kuti opanga atumize ma module awo osinthidwa pasadakhale, kuti CMVP ikhale ndi nthawi yoyankha. "
Kuyambira 2011, SHA-1 idachotsedwa ntchito kuti zigwiritsidwe ntchito posayina digito, ndipo mu 2017 asakatuli onse akuluakulu adasiya kuthandizira ziphaso zosainidwa ndi SHA-1 hash algorithm. Komabe, SHA-1 imagwiritsidwabe ntchito pamacheke, ndipo pali ma module ndi malaibulale opitilira 2200 ovomerezeka a SHA-1 ndi malaibulale munkhokwe ya NIST.
Pomaliza, ziyenera kukumbukiridwa kuti pa Disembala 31, 2030, zonse zomwe zilipo panopa za NIST sizidzagwiritsanso ntchito SHA-1. Mapeto a mafotokozedwe a SHA-1 awonetsedwa mu mulingo watsopano wa FIPS 180-5. Kuphatikiza apo, zosintha zidzasinthidwa pazolinga zofananira, monga SP 800-131A, pomwe kutchulidwa kwa SHA-1 kudzachotsedwa.
Ngati mukufuna kudziwa zambiri za izi, mutha kuwona zambiri pa ulalo wotsatirawu.
Khalani oyamba kuyankha