[B! crypt] HeavyFeatherã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

HeavyFeather id:HeavyFeather

cryptã«é–¢ã™ã‚‹HeavyFeatherã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (6)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

PHP5.3.7ã®crypté–¢æ•°ã«è‡´å‘½çš„ãªè„†å¼±æ€§(Bug #55439)
PHP5.3.7ã®crypté–¢æ•°ã«ã¯è‡´å‘½çš„ãªè„†å¼±æ€§ãŒã‚ã‚Šã¾ã™ã€‚æœ€æ‚ªã®ã‚±ãƒ¼ã‚¹ã§ã¯ã€ä»»æ„ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã§ãƒã‚°ã‚¤ãƒ³ã§ãã¦ã—ã¾ã†ã¨ã„ã†äº‹æ…‹ãŒç™ºç”Ÿã—ã¾ã™ã€‚è©²å½“ã™ã‚‹åˆ©ç”¨è€…ã¯ã€è‡³æ€¥ã€å¾Œè¿°ã™ã‚‹å›žé¿ç–ã‚’å®Ÿæ–½ã™ã‚‹ã“ã¨ã‚’æŽ¨å¥¨ã—ã¾ã™ã€‚ æ¦‚è¦ PHPã®crypté–¢æ•°ã¯ã€ã‚½ãƒ«ãƒˆä»˜ããƒãƒƒã‚·ãƒ¥å€¤ã‚’ç°¡å˜ã«æ±‚ã‚ã‚‹ã“ã¨ãŒã§ãã¾ã™ï¼ˆå…¬å¼ãƒªãƒ•ã‚¡ãƒ¬ãƒ³ã‚¹ï¼‰ã€‚crypté–¢æ•°ã®ãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¨ã—ã¦MD5ã‚’æŒ‡å®šã—ãŸå ´åˆã€ã‚½ãƒ«ãƒˆã®ã¿ãŒå‡ºåŠ›ã•ã‚Œã€ãƒãƒƒã‚·ãƒ¥å€¤ãŒç©ºã«ãªã‚Šã¾ã™ã€‚ã“ã‚Œã¯ã€crypté–¢æ•°ã®çµæžœãŒã‚½ãƒ«ãƒˆã®ã¿ã«ä¾å˜ã—ã€ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ã¯å½±éŸ¿ã•ã‚Œãªã„ã“ã¨ã‚’æ„å‘³ã—ã€crypté–¢æ•°ã‚’èªè¨¼ã«ç”¨ã„ã¦ã„ã‚‹å ´åˆã€ä»»æ„ã®ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã§ãƒã‚°ã‚¤ãƒ³ã«æˆåŠŸã™ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ å½±éŸ¿ã‚’å—ã‘ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ crypté–¢æ•°ã‚’ç”¨ã„ã€ãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¨ã—ã¦MD5ã‚’æŒ‡å®šã—ã¦ã„ã‚‹ã‚¢ãƒ—ãƒªã‚±ãƒ¼ã‚·ãƒ§ãƒ³ã€‚ ç’°å¢ƒã«ã‚‚ä¾å˜ã—ã¾ã™ãŒã€ãƒ‡ãƒ•ã‚©ãƒ«ãƒˆãŒMD5ã®å ´åˆã‚‚ã‚ã‚Šã¾ã™ã€‚ç†è€…ã®ãƒ†ã‚¹ãƒˆç’°å¢ƒ
HeavyFeather 2011/09/05
php

web

bug

Security

crypt
ãƒªãƒ³ã‚¯
PHP5.3.7ã®crypté–¢æ•°ã®ãƒã‚°ã¯ã“ã†ã—ã¦ç”Ÿã¾ã‚ŒãŸ
æ˜¨æ—¥ã®ãƒ–ãƒã‚°ã‚¨ãƒ³ãƒˆãƒªã€ŒPHP5.3.7ã®crypté–¢æ•°ã«è‡´å‘½çš„ãªè„†å¼±æ€§(Bug #55439)ã€ã«ã¦ã€crypté–¢æ•°ã®é‡å¤§ãªè„†å¼±æ€§ã«ã¤ã„ã¦å ±å‘Šã—ã¾ã—ãŸã€‚è„†å¼±æ€§ã®å‡ºæ–¹ãŒè¿‘å¹´ã¾ã‚Œã«è¦‹ã‚‹ã»ã©ã®ã‚‚ã®ã ã£ãŸã®ã§ã€twitterã‚„ãƒ–ã‚¯ãƒžãªã©ã‚’è¦‹ã¦ã‚‚ã€ã€Œã©ã†ã—ã¦ã“ã†ãªã£ãŸã€ã¨ã„ã†ç–‘å•ã‚’å¤šæ•°ç›®ã«ã—ã¾ã—ãŸã€‚ ãã“ã§ã€ã“ã®ã‚¨ãƒ³ãƒˆãƒªã§ã¯ã€ã“ã®è„†å¼±æ€§ãŒã©ã®ã‚ˆã†ã«æ··å…¥ã—ãŸã®ã‹ã‚’è¿½ã£ã¦ã¿ãŸã„ã¨æ€ã„ã¾ã™ã€‚ PHPã®ãƒ¬ãƒã‚¸ãƒˆãƒªã®ãƒã‚°ã‚„å…¬é–‹ã•ã‚Œã¦ã„ã‚‹ã‚½ãƒ¼ã‚¹ã®çŠ¶æ³ã‹ã‚‰ã€PHP5.3.7RC4ã¾ã§ã“ã®ãƒã‚°ã¯ãªãã€PHP5.3.7RC5ã§ã“ã®ãƒã‚°ãŒæ··å…¥ã—ãŸæ¨¡æ§˜ã§ã™ã€‚RC5ã¯PHP5.3.7æœ€å¾Œã®Release Candidateã§ã™ã‹ã‚‰ã€ã¾ã•ã«æ£å¼ãƒªãƒªãƒ¼ã‚¹ã®ç›´å‰ã§ãƒã‚°ãŒå…¥ã£ãŸã“ã¨ã«ãªã‚Šã¾ã™ã€‚ ãƒã‚°ã®å…¥ã‚‹ç›´å‰ã®ã‚½ãƒ¼ã‚¹ã¯ã€ã“ã“ã®é–¢æ•°php_md5_crypt_rã‹ã‚‰å‚ç…§ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ä»¥ä¸‹ã«ã€ãŠãŠã¾ã‹ãªæµã‚Œã‚’å›³ç¤ºã—ã¾ã™ã€‚ã¾ãšã¯ãƒ
HeavyFeather 2011/09/05
php

crypt

bug

security

programming
ãƒªãƒ³ã‚¯
å¢—ç”°ã®èª¤è§£ - Crypt Alarm Basic (ä»®ç§°) æ–¹å¼ã«ã¤ã„ã¦ - 186 @ hatenablog
è¿½è¨˜: 2008/04/15 0:03 â€œè§£èªä¸èƒ½â€ã®æ–°æš—å·ã®è¨˜äº‹ã«ã¤ã„ã¦ã€ã„ã¤ãã‹ã®ãŠè©«ã³ âˆ’ ï¼ IT ç¶šå ±å‡ºãŸ. å¤§æ–¹ã®äºˆæƒ³é€šã‚Š, ã‚¹ãƒˆãƒªãƒ¼ãƒ æš—å·ã®ç–‘ä¼¼ä¹±æ•°ç”Ÿæˆéƒ¨ã‚’ãƒ–ãƒãƒƒã‚¯æš—å·ãŒæ‹…ã£ã¦ã„ã‚‹ã‚¿ã‚¤ãƒ—ã®ã‚ˆã†ã . ç…½ã‚Šã£ã½ã„ã®ã¯å¤§çŸ¢æ•™æŽˆ/å…¥çŸ¢åŠ©æ•™ã¸ã®ä¸æº€ã ã¨æ€ã£ã¦ãã ã•ã„. ã‚ã¨@ITã®è¨˜è€… (è¥¿æ‘è³¢æ°) ã¯ã‚‚ã£ã¨çºã¾ã£ãŸè¨˜äº‹ã‚’æ›¸ã„ã¦ãã ã•ã„. ref:ã€Œè§£èªä¸èƒ½ã¯æ•°å¦çš„ã«è¨¼æ˜Žæ¸ˆã¿ã€ã€RSAã‚’è¶…ãˆã‚‹æ–°æš—å·æ–¹å¼ã¨ã¯ âˆ’ ï¼ IT ref:æ–°æš—å·æ–¹å¼ã¯ãŸã¶ã‚“èƒ¡æ•£è‡ããªã„ã‚ˆ ã„ã‚„ãƒ¼ãã‚Œã¯ã©ã†ã‹ãªãƒ¼. ã€Œç†è«–çš„ã€ãªèƒ¡æ•£è‡ã• å¤§çŸ¢æ°ãŒãƒãƒƒã‚¿ãƒªã‚’ã‹ã¾ã™å‹•æ©ŸãŒãªã„ ã¾ãšã€å¤§çŸ¢æ°ã¯ãã®é“ã§ã¯æœ‰åŠ›ãªç ”ç©¶è€…ã§ã€åå‰ã‚‚å£²ã‚Œã¦ã¾ã™ã€‚ä¿ºã®ã‚ˆã†ãªé–€å¤–æ¼¢ã§ã‚‚çŸ¥ã£ã¦ã‚‹ãã‚‰ã„ã ã‹ã‚‰ã€‚ã ã‹ã‚‰ã€èƒ¡æ•£è‡ã„ã‚‚ã®ã«æ‰‹ã‚’å‡ºã™ã¨ã„ã†å‹•æ©ŸãŒã¾ãšãªã„ã‚“ã§ã™ã‚ˆã€‚ ã„ã‚„, ãƒãƒƒã‚¿ãƒªã‚’ã‹ã¾ã™å‹•æ©Ÿã¯ç„¡ã„ã«ã›ã‚ˆ, èª¤è§£ã™ã‚‹å¯èƒ½æ€§ã¯ã‚ã‚Šã¾ã™ã‚ˆã? æš—å·å®¶è¦‹ç¿’
HeavyFeather 2008/04/15
security

encryption

crypt
ãƒªãƒ³ã‚¯
â€œè§£èªä¸èƒ½â€ã®æ–°æš—å·ã®è¨˜äº‹ã«ã¤ã„ã¦ã€ã„ã¤ãã‹ã®ãŠè©«ã³ â€• ï¼ IT
å…ˆé€±æœ«ã®é‡‘æ›œæ—¥ã«æŽ²è¼‰ã—ãŸã€Œã€Žè§£èªä¸èƒ½ã¯æ•°å¦çš„ã«è¨¼æ˜Žæ¸ˆã¿ã€ã€RSAã‚’è¶…ãˆã‚‹æ–°æš—å·æ–¹å¼ã¨ã¯ã€ãŒã‚¢ã‚¯ã‚»ã‚¹ãƒ©ãƒ³ã‚ãƒ³ã‚°ã®2ä½ã«å…¥ã£ã¦ã„ã‚‹ãŒã€ã¯ã¦ãªãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ã‚„ãƒ–ãƒã‚°ã§ã€ãŸãã•ã‚“ã®ã”æŒ‡æ‘˜ã€ã”æ‰¹åˆ¤ã‚’ã„ãŸã ã„ãŸã€‚å–æã€åŸ·ç†ã—ãŸãƒ‹ãƒ¥ãƒ¼ã‚¹æ‹…å½“è¨˜è€…ã§ã‚ã‚‹ç§ï¼ˆè¥¿æ‘è³¢ï¼‰ã¯ã„ãã¤ã‹ãŠè©«ã³ã—ãªã‘ã‚Œã°ãªã‚‰ãªã„ã€‚ 1ã¤ã¯è¨˜äº‹ã‚¿ã‚¤ãƒˆãƒ«ã‚„å†’é ã®è¨˜è¿°ã ã‘ã‚’è¦‹ã‚‹ã¨ã€ã¾ã‚‹ã§ç¢ºå®šäº‹é …ã®ã‚ˆã†ã«è¦‹ãˆã‚‹ã“ã¨ã€‚ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®å…¬é–‹ã‚„æ¤œè¨¼ãŒæ¸ˆã‚“ã§ã„ãªã„ã®ã§ã€ŒåŽŸç†çš„ã«è§£èªä¸èƒ½ã¨ä¸»å¼µã™ã‚‹ç ”ç©¶è€…ãŒç¾ã‚ŒãŸã€ã¨æ›¸ã‹ãªã‘ã‚Œã°ãªã‚‰ãªã„ã¨ã“ã‚ã ã£ãŸã€‚è¨˜äº‹ã®æœ«å°¾ã§ã€ŒCABæ–¹å¼ã¯ã€ã¾ã å®Ÿç¸¾ãŒãªãäº‹å®Ÿä¸Šæœªå…¬è¡¨ã®æŠ€è¡“ã ã€‚æƒ…å ±ãŒå…¬ã«ãªã£ã¦ã„ãã«ã¤ã‚Œã¦ã€å°‚é–€å®¶ãŸã¡ãŒã©ã†åå¿œã™ã‚‹ã‹ã¯æœªçŸ¥æ•°ã ã€ã¨æ›¸ã„ãŸã¨ãã«ã¯ã€ä»Šå¾Œã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒå…¬è¡¨ã•ã‚Œã¦ã™ãã«ç†è«–çš„ãªç‘•ç–µãŒè¦‹ã¤ã‹ã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã¨ã„ã†æ„å‘³ã®ã¤ã‚‚ã‚Šã ã£ãŸãŒã€èª¤è§£ã‚’ä¸Žãˆã‚‹è¨˜äº‹æ§‹æˆã ã£ãŸã€‚ ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã‚’éžå…¬è¡¨ã«ã—ãŸã¾ã¾ã€Œè§£èªä¸èƒ½
HeavyFeather 2008/04/15
security

news

crypt

neta
ãƒªãƒ³ã‚¯
é«˜æœ¨æµ©å…‰ï¼ è‡ªå®…ã®æ—¥è¨˜ - å…¬é–‹éµæš—å·æ–¹å¼ã®èª¤ã‚Šè§£èª¬ã®æ°¾æ¿«ã‚’ãã‚ãã‚ã©ã’ã‚“ã‹ã›ã‚“ã¨
â– å…¬é–‹éµæš—å·æ–¹å¼ã®èª¤ã‚Šè§£èª¬ã®æ°¾æ¿«ã‚’ãã‚ãã‚ã©ã’ã‚“ã‹ã›ã‚“ã¨ ã€Œã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’åŸºç¤Žã‹ã‚‰ã€ã¨ã„ã†ã¨ã€æš—å·ã®è§£èª¬ã€ç‰¹ã«å…±é€šéµæš—å·ã¨å…¬é–‹éµæš—å·ã®é•ã„ã‹ã‚‰ãªã©ã¨ã„ã£ãŸè§£èª¬ã‚’ã‚ˆãç›®ã«ã™ã‚‹ã€‚æ˜”ã¯å°‚é–€ã®æ–¹ã«ã‚ˆã£ã¦æ³¨æ„æ·±ãæ›¸ã‹ã‚Œã¦ã„ãŸã®ã«å¯¾ã—ã€ã“ã“ä½•å¹´ã‹ã¯ã²ã©ã„çŠ¶æ³ã«ãªã£ã¦ã„ã‚‹ã€‚å…ˆæœˆã€å®®å´Žã§é–‹ã‹ã‚ŒãŸSCIS 2008ã®å¸ã§ã‚‚æš—å·ç ”ç©¶è€…ã®æ–¹ã€…ã¨ã®é›‘è«‡ã§ãã†ã„ã†è©±ã«ãªã£ãŸã€‚ç§ã¯æš—å·ã¯å°‚é–€ã§ãªã„ã®ã§ãã®è©±é¡Œã¯è¿‚é—Šã«æ›¸ã‘ãªã„ã§ããŸãŒã€ã“ã®ã¨ã“ã‚ã®å··ã®èª¤ã‚Šè§£èª¬ã®æ°¾æ¿«ã¶ã‚Šã¯ç›®ã«ä½™ã‚‹ã‚‚ã®ãŒã‚ã‚‹ã€‚ æœ€ã‚‚ã²ã©ãè”“å»¶ã£ã¦ã„ã¦ã—ã°ã‚‰ãæ¶ˆãˆãã†ã«ãªã„é–“é•ã„è§£èª¬ã®å…¸åž‹ä¾‹ã¯æ¬¡ã ã€‚ ã€Œå…¬é–‹éµã§æš—å·åŒ–ã—ãŸã‚‚ã®ã‚’ç§˜å¯†éµã§å¾©å·ã™ã‚‹ã®ã¨åŒæ§˜ã«ã€ç§˜å¯†éµã§æš—å·åŒ–ã—ãŸã‚‚ã®ã‚’å…¬é–‹éµã§å¾©å·ã§ãã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã€‚ã€ äº‹ä¾‹1: æ—¥æœ¬ãƒ™ãƒªã‚µã‚¤ãƒ³æ ªå¼ä¼šç¤¾ã«ã‚ˆã‚‹å…¬é–‹éµæš—å·æ–¹å¼ã®è§£èª¬ ã“ã®ã‚ˆã†ãªå…±é€šéµæš—å·æ–¹å¼ã®å•é¡Œç‚¹ã‚’è§£æ±ºã™ã‚‹æš—å·æ–¹å¼ãŒã€å…¬é–‹éµæš—å·æ–¹å¼
HeavyFeather 2008/03/04
security

crypt
ãƒªãƒ³ã‚¯
ã‚¦ãƒŽã‚¦ãƒ©ãƒœ Unoh Labs: PHPã§æš—å·åŒ–ãƒ»å¾©å·åŒ–ã‚ã‚Œã“ã‚Œ
GT Nitro: Car Game Drag Raceã¯ã€å…¸åž‹çš„ãªã‚«ãƒ¼ã‚²ãƒ¼ãƒ ã§ã¯ã‚ã‚Šã¾ã›ã‚“ã€‚ã“ã‚Œã¯ã‚¹ãƒ”ãƒ¼ãƒ‰ã€ãƒ‘ãƒ¯ãƒ¼ã€ã‚¹ã‚ãƒ«å…¨é–‹ã®ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã‚²ãƒ¼ãƒ ã§ã™ã€‚ãƒ–ãƒ¬ãƒ¼ã‚ã¯å¿˜ã‚Œã¦ã€ã“ã‚Œã¯ãƒ‰ãƒ©ãƒƒã‚°ãƒ¬ãƒ¼ã‚¹ã€ãƒ™ã‚¤ãƒ“ãƒ¼ï¼å¤å…¸çš„ãªã‚¯ãƒ©ã‚·ãƒƒã‚¯ã‹ã‚‰æœªæ¥çš„ãªãƒ“ãƒ¼ã‚¹ãƒˆã¾ã§ã€æœ€ã‚‚ã‚¯ãƒ¼ãƒ«ã§é€Ÿã„è»Šã¨ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã§ãã¾ã™ã€‚ã‚¹ãƒ†ã‚£ãƒƒã‚¯ã‚·ãƒ•ãƒˆã‚’ãƒžã‚¹ã‚¿ãƒ¼ã—ã€ãƒ‹ãƒˆãƒã‚’è³¢ãä½¿ã£ã¦ç«¶äº‰ã‚’æ‰“ã¡ç ´ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ã“ã®ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã‚²ãƒ¼ãƒ ã¯ãã®ãƒªã‚¢ãƒ«ãªç‰©ç†å¦ã¨ç´ æ™´ã‚‰ã—ã„ã‚°ãƒ©ãƒ•ã‚£ãƒƒã‚¯ã‚¹ã§ã‚ãªãŸã®å¿ƒã‚’çˆ†ç™ºã•ã›ã¾ã™ã€‚ã“ã‚Œã¾ã§ãƒ—ãƒ¬ã‚¤ã—ãŸã“ã¨ã®ãªã„ã‚ˆã†ãªã‚‚ã®ã§ã™ã€‚ GT Nitroã¯ã€ãƒªãƒ•ãƒ¬ãƒƒã‚¯ã‚¹ã¨ã‚¿ã‚¤ãƒŸãƒ³ã‚°ã‚’è©¦ã™ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã‚²ãƒ¼ãƒ ã§ã™ã€‚æ£ã—ã„çž¬é–“ã«ã‚®ã‚¢ã‚’ã‚·ãƒ•ãƒˆã—ã€ã‚¬ã‚¹ã‚’æ€ã„åˆ‡ã‚Šè¸ã‚€å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ã¾ãŸã€å¤§ç‰©ãŸã¡ã¨ç«¶ã„ã¤ã¤ã€è»Šã®ãƒãƒ¥ãƒ¼ãƒ‹ãƒ³ã‚°ã¨ã‚¢ãƒƒãƒ—ã‚°ãƒ¬ãƒ¼ãƒ‰ã‚‚è¡Œã‚ãªã‘ã‚Œã°ãªã‚Šã¾ã›ã‚“ã€‚ä¸–ç•Œä¸ã§æœ€é«˜ã®ãƒ‰ãƒ©ã‚¤ãƒãƒ¼ã¨è»Šã¨ã‚«ãƒ¼ãƒ¬ãƒ¼ã‚¹ã«æŒ‘ã‚€ã“ã¨ã«ãªã‚Šã€ãƒ‰ãƒ©ãƒƒã‚°ãƒ¬ãƒ¼ã‚¹ã®çŽ‹å†
HeavyFeather 2007/11/07
php

crypt

security

tips
ãƒªãƒ³ã‚¯
1