AES: Uxhumano ngocingo

Ngokungangabazeki, abaningi abasebenzisa ikhompyutha ungena kwi-Inthanethi (hhayi kuphela) Niye nezwa lokhu eside, njengoba ukubethela idatha AES. Hlobo luni system, yini ama-algorithm lisebenzisa nokuthi yini sisetshenziswa, ine umqondo kunalokho umbuthano elilinganiselwe labantu. abasebenzisi abavamile iwukuba kanye azi esikhulu akudingeki. Nokho, cabangela leli uhlelo cryptographic, ikakhulukazi ngaphandle kokukhuluma eziyinkimbinkimbi izibalo amafomula ukuthi kungaba aqondwa yimuphi umuntu.

Uyini AES-ukubethela?

Ake uqale nge yokuthi uhlelo ngokwawo iqoqo algorithm ukufihla umbono kokuqala ezinye ngocansi, yatholwa noma yagcinwa umsebenzisi idatha kwikhompyutha. Ngokuvamile isetshenziswa nobuchwepheshe Inthanethi njengoba kudingeka ukuqinisekisa ubumfihlo ephelele ulwazi, futhi libhekisela okuthiwa lesinesitfombe-sibuko ukubethela ubuchule obuphezulu.

AES ukubethela uhlobo ukusebenzisa ukuguqula imininingwane kwifomu eziphephile ekuhlahlela ukuhlanekezela isihluthulelo efanayo, okuyinto kokubili ukuthumela ohlangothini eyamukelayo, ngokungafani kuya ukubethela lesinesitfombe-sibuko ohlinzekela ukusetshenziswa izihluthulelo ezimbili ezaziwa - ezimele kanye nekahulumeni. Ngakho, kulula ukuphetha ngokuthi uma zombili izinhlangothi ukwazi ngokhiye olungile, ukubethela nencazelo inqubo yenziwa nje ngokwanele.

Umlando omncane

AES-ukubethela okokuqala okukhulunywa ngo-2000, lapho umuntu owayezothatha isikhundla ukuze DES Ukukhetha uhlelo mncintiswano, owawungumnyaka ejwayelekile e-United States kusukela ngo-1977, i-winner kwaba Rijndael algorithm.

Ngo-2001, AES-uhlelo lalimisa bokutholwa entsha Federal elintathu, futhi ibilokhu isetshenziswa kusukela kabanzi.

Izinhlobo AES ukubethela

Evolution algorithm kufakwe izigaba eziningana Lesisemkhatsini, okuyinto ikakhulu zihlotshaniswa anda obuphelele ukhiye. Namuhla kunezinhlobo ezintathu eziyinhloko: AES-128 ukubethela, AES-192 futhi AES-256.

Igama liyazikhulumela. izimpawu Digital oluhambisana ubude ukhiye esetshenziswa oluboniswa izingcezu. Futhi, AES-ukubethela osebenza ku uhlobo block nge egxilile obuphelele idatha amayunithi esebenza ngokuqondile, ikhodi ngamunye wabo, ngokungafani okusemgqeni algorithm ukuthi usebenze yezimpawu olulodwa umyalezo ovulekile, ukuhumusha nabo ifomu ngekhodi. Esikhathini AES block ubude 128 izingcezu.

Ukukhuluma ulimi isayensi, algorithm efanayo esebenzisa AES-256 ukubethela, kusho ukusebenza ngesisekelo izethulo polynomial zokusebenza amakhodi e ukucutshungulwa afanayo lamabili (matrices).

Isebenza kanjani?

I-algorithm usebenza ngempela eziyinkimbinkimbi, kodwa kuhilela ukusetshenziswa izakhi eziyisisekelo ezimbalwa. Ekuqaleni,-matrix mgudumbili isetshenziswa, imijikelezo ukuguqulwa (imizuliswano), okhiye round namathebula futhi ukuhlanekezela permutation kokuqala.

Ukuvikelwa kwedatha siqukethe izinyathelo eziningana:

• ekubalweni zonke nxazonke ukhiye;
• ibhayithi esikhundleni usebenzisa S-Ibhokisi ithebula main;
• shift ifomu usebenzisa ubungako obuhlukahlukeneko (bheka sibalo ngenhla.);
• ukuxuba idatha phakathi ikholomu ye-matrix (isikhunta) ngamunye;
• Ukwengezwa ukuma round ukhiye.

Sokuqonda kwenziwa oda reverse, kodwa esikhundleni itafula S-Ibhokisi ithebula osebenza imikhiqizo ephambene, okwakubekelwa eshiwo ngenhla.

Uma isibonelo, uma ubude ayisihluthulelo 4 izingcezu kudingeka ukuhlela ngokusebenzisa zonke izigaba 16 (imizuliswano), ukuthi kuyadingeka ukuhlola zonke inhlanganisela kungenzeka, oqala 0000 nesiphetho 1111. Yiqiniso, isivikelo esinjalo ibhidliza ngokushesha ngokwanele. Kodwa uma uthatha okhiye esengeziwe-16-bit kudingeka izinyathelo 65.536, futhi 256-bit - 1.1 x 10 ^77. Futhi njengoba kushiwo Ochwepheshe American, ku Ukukhetha kahle inhlanganisela (ukhiye) kuzothatha iminyaka engaba ngu-149 trillion.

Ezisebenza uma wamisa inethiwekhi umkhuba: AES noma TKIP?

Manje phenya ukusetshenziswa AES-256 ukufaka ikhowudi kwimininingo yonke wathumela futhi wathola e amanethiwekhi wireless.

Njengomthetho, iyiphi router (umzila), kukhona ongakhetha eziningana ongakhetha kuzo: Kuphela AES, TKIP, futhi kuphela AES + TKIP. Basuke esetshenzisiwe kuncike protocol (WEP noma WEP2). Kodwa! System TKIP akusebenzi ngoba degree engezansi Ukuvikelwa noma ukwesekwa 802.11n lwenethiwekhi ngesilinganiso idatha esingeqile 54 Mbits / s. Ngakho, esiphelweni sesimiso ukusetshenziswa igunya aes nge imodi yezokuphepha WPA2-PSK isobala, nakuba ungasebenzisa kokubili algorithm abhanqiwe.

Imibuzo ngokuthembeka nokuvikeleka AES algorithm

Naphezu izitatimende elikhulu ochwepheshe, AES algorithm zisekhona sengozini ngemcondvo, ngoba yona kanye ukubethela has a incazelo elula we-Aljibhra. Kwaphawulwa ngu Niels Ferguson. Futhi ngo-2002, uJosefa Nikolya Kurtua Pepshik yashicilela isihloko ulunge kangakanani engase ibe kuhlasela Olwandisekayo. Nokho, kuyinto emhlabeni yesayensi iye yabangela okuningi impikiswano, futhi abanye babenomuzwa ukubala kwabo okungalungile.

nokucabanga senziwe 2005 ukuthi umhlaseli ongasebenzisa iziteshi third-party, hhayi nje izibalo. Ngesikhathi esifanayo Kokunye ukuhlasela ibale esemqoka ngemva 800 imisebenzi, kuyilapho omunye wathola ke 2 ³² imisebenzi (round lwesishiyagalombili).

Ngokungangabazeki, namuhla kwalesi simiso sezinto nasekupheleni ingathiwa omunye eziphambili kakhulu, uma kungesiyo eyodwa kodwa. Eminyakeni embalwa edlule kwi igagasi Inthanethi virus ukuhlaselwa, lapho igciwane coder (futhi kanyekanye futhi extortionist), engena kumakhompyutha ngekhodi ngokugcwele idatha ezidinga kulungiswa isamba lungisa imali. Kulokhu, lo mbiko waphawula ukuthi ukubethela ezenziwe usebenzisa AES1024 algorithm, okuyinto kukholakala kuze kube muva nje, abekho.

Zithanda noma zingathandi, kodwa ngisho unjiniyela kunazo owaziwa isofthiwe ye-antivirus, kuhlanganise "Kaspersky Lab ', uma uzama ukususa ukubhala idatha zazingenawo amandla. Ochwepheshe abaningi bavuma ukuthi elidumile igciwane I Love You, kanye utheleleke izigidi amakhompyutha emhlabeni wonke futhi awabhubhise ulwazi olubalulekile uma eqhathaniswa usongo kwenzakala prattle uyingane. Ngaphezu kwalokho, I Love You Okuningi yayihloselwe abezindaba, futhi igciwane abasha bakwazi ukuthola ulwazi oluyimfihlo izinkampane ezinkulu kuphela. Nokho, ukuze ezifakazela ngokucacile ukuthi lapha lalisetshenziswa ukubethela AES-1024 kuphela, akekho ongaphendula.

isiphetho

Uma ngezinga elithile afingqa, noma kunjalo singasho ukuthi AES-ukubethela iyona eziphambili kakhulu futhi avikelwe, kungakhathaliseki ukuthi ubude ukhiye esetshenziswa. Akumangalisi ukuthi lokhu ejwayelekile isetshenziswa cryptosystems kakhulu futhi has a nombono ngokwanele lokubanti mayelana nentuthuko kanye nekwentiwa ncono esikhathini esizayo, ikakhulukazi njengoba kungenzeka kungaba futhi ngokuhlanganisa izinhlobo eziningana ukubethela kwelinye iyunithi (isib ukusetshenziswa ngesikhathi esifanayo lesinesitfombe-sibuko futhi quin noma ukuvimba nokusakaza ukubethela).