[B! Cryptography] RMS-099ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

RMS-099 id:RMS-099

Cryptographyã«é–¢ã™ã‚‹RMS-099ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (24)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

https://www.cryptrec.go.jp/list/cryptrec-ls-0001-2012r4.pdf
RMS-099 2024/08/14
Cryptography

Security
ãƒªãƒ³ã‚¯
ã‚°ãƒ¼ã‚°ãƒ«ã€OpenSSLã®æ–°ãŸãªforkã¨ã—ã¦ã€ŒBoringSSLã€ç™ºè¡¨
ã‚°ãƒ¼ã‚°ãƒ«ãŒOpenSSLã®forkã‚’ç™ºè¡¨ã€ç‹¬è‡ªã®å®Ÿè£…ã«OpenSSLå´ã®å¤‰æ›´ã‚’ãƒžãƒ¼ã‚¸ã™ã‚‹ä½“åˆ¶ã‚’æŽ¡ã‚‹ã€‚OSSã§ã®å±•é–‹ã¯ã—ãªã„æ–¹é‡ã ã¨ã„ã†ã€‚ ç±³ã‚°ãƒ¼ã‚°ãƒ«ãŒã€ã‚ªãƒ¼ãƒ—ãƒ³ã‚½ãƒ¼ã‚¹ã®SSL/TLSå®Ÿè£…ã€ŒOpenSSLã€ã‹ã‚‰æ–°ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã®ã€ŒBoringSSLã€ã‚’æ´¾ç”Ÿã•ã›ãŸã€‚åŒç¤¾ã®ç ”ç©¶è€…ã‚¢ãƒ€ãƒ ãƒ»ãƒ©ãƒ³ã‚°ãƒªãƒ¼æ°ãŒ2014å¹´6æœˆ20æ—¥ã€è‡ªèº«ã®ãƒ–ãƒã‚°ã€ŒImperialVioletã€ã§æ˜Žã‚‰ã‹ã«ã—ãŸã€‚ ãƒ©ãƒ³ã‚°ãƒªãƒ¼æ°ã«ã‚ˆã‚‹ã¨ã€ã‚°ãƒ¼ã‚°ãƒ«ã§ã¯ã€ŒHeartbleedã€ã¨å‘¼ã°ã‚Œã‚‹é‡å¤§ãªè„†å¼±æ€§ãŒç™ºè¦šã™ã‚‹ä»¥å‰ã‹ã‚‰OpenSSLã®ã‚³ãƒ¼ãƒ‰ã‚’æ¤œè¨¼ã—ã€ä½•å¹´ã«ã‚‚ã‚ãŸã£ã¦å¤šæ•°ã®ãƒ‘ãƒƒãƒã‚’ä½¿ç”¨ã—ã¦ããŸã€‚ã“ã®ä¸ã«ã¯OpenSSLã®ãƒ¡ã‚¤ãƒ³ãƒ¬ãƒã‚¸ãƒˆãƒªã«æŽ¡ç”¨ã•ã‚ŒãŸã‚‚ã®ã‚‚ã‚ã‚‹ä¸€æ–¹ã§ã€OpenSSLãŒä¿è¨¼ã™ã‚‹APIã‚„ABIã®å®‰å®šæ€§ã¨ã‹ã¿åˆã‚ãªã„ã‚‚ã®ã‚„ã€ã‚„ã‚„å®Ÿé¨“çš„éŽãŽã‚‹ã‚‚ã®ã‚‚å¤šã‹ã£ãŸã¨ã„ã†ã€‚ ã—ã‹ã—ã€Androidã‚„Chromeãªã©ã®è£½å“ã§ãã†ã—ãŸãƒ‘ãƒƒãƒã®ã‚µãƒ–
RMS-099 2015/02/15
ã€Œç‹¬è‡ªã®å®Ÿè£…ã«OpenSSLå´ã®å¤‰æ›´ã‚’ãƒžãƒ¼ã‚¸ã™ã‚‹ä½“åˆ¶ã‚’æŽ¡ã‚‹ã€‚OSSã§ã®å±•é–‹ã¯ã—ãªã„æ–¹é‡ã ã¨ã„ã†ã€‚ã€

Cryptography

Google

BoringSSL

OpenSSL
ãƒªãƒ³ã‚¯
boringssl - Git at Google
059585c Update tools and add a .bazelversion by David Benjamin Â· 3 days ago masterfcef13a Speed up sha512 on x86 by Ilya Tokar Â· 2 days ago5813c2c crypto: switch to C++ by Adam Langley Â· 4 weeks ago7a60220 Remove the old SSL_R_APPLICATION_DATA_INSTEAD_OF_HANDSHAKE logic by David Benjamin Â· 2 days ago9a85565 Don't access the read_buffer directly in read_v2_client_hello by David Benjamin Â· 2 days ag
RMS-099 2015/02/15
Cryptography

Google

BoringSSL

OpenSSL
ãƒªãƒ³ã‚¯
ã€ŒHeartbleedã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å•é¡Œã‚’å—ã‘ã€OpenBSDãŒOpenSSLãƒ•ã‚©ãƒ¼ã‚¯ã®ã€ŒLibreSSLã€ã‚’é–‹ç™º | OSDN Magazine
The OpenBSD Projectã®ãƒ¡ãƒ³ãƒãƒ¼ãŒæ–°ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã€ŒLibreSSLã€ã‚’ç«‹ã¡ä¸Šã’ãŸã€‚OpenSSLã§ç™ºè¦‹ã•ã‚ŒãŸã€ŒHeartbleedã€è„†å¼±æ€§å•é¡Œã‚’å—ã‘ã¦ã®ã‚‚ã®ã§ã€OpenSSLã‚’ãƒ•ã‚©ãƒ¼ã‚¯ã—ã¦æ–°ãŸãªSSL/TLSãƒ—ãƒãƒˆã‚³ãƒ«ã®ãƒ•ãƒªãƒ¼å®Ÿè£…ã‚’ä½œæˆã™ã‚‹ã¨ã„ã†ã€‚æ¬¡æœŸã€ŒOpenBSD 5.6ã€ã«å°Žå…¥ã™ã‚‹äºˆå®šã§é–‹ç™ºã‚’é€²ã‚ã‚‹ã¨ã„ã†ã€‚ 4æœˆåˆã‚ã€OpenSSLã®Heartbeatæ©Ÿèƒ½ã«è„†å¼±æ€§ãŒç™ºè¦‹ã•ã‚ŒãŸã€‚ã“ã‚Œã¯é€šç§°ã€ŒHeartbleedã€ã¨å‘¼ã°ã‚Œã€æ‚ªç”¨ã™ã‚‹ã¨OpenSSLãƒ—ãƒã‚»ã‚¹ãŒä½¿ç”¨ã—ã¦ã„ã‚‹ãƒ¡ãƒ¢ãƒªã®å†…å®¹ã‚’ä¸æ£ã«å¤–éƒ¨ã‹ã‚‰é–²è¦§ã™ã‚‹ã“ã¨ãŒå¯èƒ½ã«ãªã‚‹ã€‚OpenSSLã¯4æœˆ7æ—¥ãƒã‚°ã‚’ä¿®æ£ã—ãŸOpenSSL 1.0.1gã‚’ãƒªãƒªãƒ¼ã‚¹ã—ã¦ã„ã‚‹ã€‚ LibreSSLã§ã¯OpenSSLã®ã‚³ãƒ¼ãƒ‰ã®æ›¸ãç›´ã—ã‚„éžæŽ¨å¥¨æ©Ÿèƒ½ã®å‰Šé™¤ã€ãƒªãƒ•ã‚¡ã‚¯ã‚¿ãƒªãƒ³ã‚°ã‚„ä¿®æ£ãªã©ã‚’è¡Œã†ã¨ã„ã†ã€‚ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã¯ä¸»ã¨ã—ã¦OpenBSD Projectã«
RMS-099 2015/02/15
Cryptography

OSS

LibreSSL

OpenSSL
ãƒªãƒ³ã‚¯
LibreSSL
LibreSSL 4.0.0 released Oct 14th, 2024 LibreSSL is a version of the TLS/crypto stack forked from OpenSSL in 2014, with goals of modernizing the codebase, improving security, and applying best practice development processes. Primary development occurs inside the OpenBSD source tree with the usual care the project is known for. On a regular basis the code is re-packaged for porta ble use by other ope
RMS-099 2015/02/15
Cryptography

OSS

LibreSSL

OpenSSL
ãƒªãƒ³ã‚¯
è‹±å›½è«œå ±æ©Ÿé–¢è¬¹è£½ã€ãŸã®ã—ã„ã€Œæš—å·åŒ–æŠ€è¡“å¦ç¿’ã‚¢ãƒ—ãƒªã€ãŒç„¡æ–™å…¬é–‹ä¸
RMS-099 2014/12/16
ã€ŒCryptoyã¯ã€è‹±å›½ã§ã€ŒKey Stage 4ã€ã¨å‘¼ã°ã‚Œã‚‹ã€14æ³ã‹ã‚‰16æ³ã¾ã§ã€å¦å¹´ã§ã„ã†ã¨10å¹´ç”Ÿï½ž11å¹´ç”Ÿã®ç”Ÿå¾’ã‚’å¯¾è±¡ã«ã—ã¦ã„ã‚‹ã€

Android

Cryptography

Learning
ãƒªãƒ³ã‚¯
https://jp.techcrunch.com/2014/10/13/20141011edward-snowden-new-yorker-festival/
RMS-099 2014/10/13
ã€Œç±³å›½ã¸å¸°ã£ã¦æ³•å»·ã«ç«‹ãŸãªã„ã®ã‹ã¨ã„ã†ç†ç”±ã«ã¤ã„ã¦å½¼ã¯ã€ç±³å›½æ”¿åºœã®Thomas Drakeã‚„Chelsea Manningãªã©ã®å†…éƒ¨å‘Šç™ºè€…ã«å¯¾ã™ã‚‹æ‰±ã„ã‚’è¦‹ã¦ã€è‡ªåˆ†ãŒé–‹ã‹ã‚ŒãŸæ³•å»·ã§é™ªå¯©å“¡ã«ã‚ˆã£ã¦è£ã‹ã‚Œã‚‹ã“ã¨ã¯ãªã„ã¨ç¢ºä¿¡ã—ãŸã‹ã‚‰ã ã¨è¨€ã†ã€‚ã€

USA

Russia

Judgement

Leak

Cryptography

Dropbox

Facebook
ãƒªãƒ³ã‚¯
æš—å·åŒ–ã‚½ãƒ•ãƒˆã€ŒTrueCryptã€ã®ç›£æŸ»ã‚’äºˆå®šé€šã‚Šå®Ÿæ–½ã€€ï½žæ•°ã‚«æœˆå¾Œã«ã¯å ±å‘Šæ›¸ã‚’å…¬é–‹ã€å±é™ºæ€§ã«ã¤ã„ã¦ã‚‚è§£æ˜Žã®è¦‹é€šã—
RMS-099 2014/06/04
ã€ŒWindowsä¸Šã®æš—å·åŒ–ã‚½ãƒ•ãƒˆã‚’é–‹ç™ºã™ã‚‹ã¨ã„ã†å½“åˆã®ç›®çš„ã‚’é”æˆã—ã€Microsoftã®BitLockerãŒååˆ†ã«ãã®ç›®çš„ã‚’é”æˆã§ãã‚‹ã“ã¨ã‹ã‚‰èˆˆå‘³ã‚’å¤±ã„ã€ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã‚’ä¸æ¢ã—ãŸã ã‘ã§ã€ä½•ã‚‰åœ§åŠ›ã¯ã‹ã‹ã£ã¦ã„ãªã„ã€

Windows

Cryptography

Audit
ãƒªãƒ³ã‚¯
TrueCryptã§ã€Dropboxã‚’ã‚‚ã£ã¨â€œã‚»ã‚ãƒ¥ã‚¢â€ã«ä½¿ã† - ITmedia Biz.ID
ç¬¬21å›ž TrueCryptã§ã€Dropboxã‚’ã‚‚ã£ã¨â€œã‚»ã‚ãƒ¥ã‚¢â€ã«ä½¿ã†ï¼šâ€œPCã§ä»•äº‹â€ã‚’é€Ÿãã™ã‚‹ Dropboxã¯ä¾¿åˆ©ãªã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã‚µãƒ¼ãƒ“ã‚¹ã ãŒã€ãƒ•ã‚¡ã‚¤ãƒ«ã‚’ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã«ã‚‚ç½®ãã“ã¨ã«ãªã‚‹ã®ã§ã€ã©ã†ã—ã¦ã‚‚ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒæ°—ã«ãªã‚‹ã€‚ãã“ã§ã€æš—å·åŒ–ãƒ‰ãƒ©ã‚¤ãƒ–ä½œæˆã‚½ãƒ•ãƒˆTrueCryptã¨çµ„ã¿åˆã‚ã›ã¦ã‚»ã‚ãƒ¥ã‚¢ã«ä½¿ã£ã¦ã¿ã‚ˆã†ã€‚ Dropboxã¨ã„ãˆã°ã€ï¼ˆ1ï¼‰å·®åˆ†ã ã‘ã‚’ã»ã¼ãƒªã‚¢ãƒ«ã‚¿ã‚¤ãƒ ã«é«˜é€Ÿãƒãƒƒã‚¯ã‚¢ãƒƒãƒ— ï¼ˆ2ï¼‰è¤‡æ•°ã®PCï¼ˆMacã‚‚Windowsã‚‚Linuxã‚‚ï¼‰ã§ãƒ•ã‚¡ã‚¤ãƒ«ã‚’è‡ªå‹•åŒæœŸ ï¼ˆ3ï¼‰å±¥æ´è‡ªå‹•ä¿å˜ã§ä¸Šæ›¸ãã—ãŸãƒ•ã‚¡ã‚¤ãƒ«ã‚‚å¾©æ´»å¯èƒ½ ã¨ã„ã£ãŸç‰¹å¾´ã‚’æŒã¤ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã‚¹ãƒˆãƒ¬ãƒ¼ã‚¸ã‚µãƒ¼ãƒ“ã‚¹ï¼ˆã“ã¡ã‚‰ã®è¨˜äº‹å‚ç…§ï¼‰ã€‚å¹´é¡99.99ãƒ‰ãƒ«ã§50Gãƒã‚¤ãƒˆã€2Gãƒã‚¤ãƒˆãªã‚‰ç„¡æ–™ã§åˆ©ç”¨ãŒå¯èƒ½ã ã€‚ ã—ã‹ã—ãƒ‡ãƒ¼ã‚¿ã‚’ã‚ªãƒ³ãƒ©ã‚¤ãƒ³ã«ã‚‚ç½®ãã“ã¨ã«ãªã‚‹ãŸã‚ã€åˆ©ç”¨ã«å½“ãŸã£ã¦ã¯ãã®ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ãŒæ°—ã«ãªã‚‹äººã‚‚ã„ã‚‹ã ã‚ã†ã€‚IDã¨ãƒã‚°ã‚¤ãƒ³ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã ã‘
RMS-099 2014/05/18
ã€Œæš—å·åŒ–ã‚’å®Ÿè¡Œã™ã‚‹ã¨æš—å·åŒ–ãƒ•ã‚¡ã‚¤ãƒ«â€•â€•ä¾‹ãˆã°secure.tcãªã©ã®ãƒ•ã‚¡ã‚¤ãƒ«ãŒã§ãã‚ãŒã‚‹ã€

Cryptography

Dropbox
ãƒªãƒ³ã‚¯
Heartbleedè„†å¼±æ€§æ¤œæŸ»
Heartbleedè„†å¼±æ€§(CVE-2014-0160)ã‚’å®¹æ˜“ã«æ¤œæŸ»ã§ãã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã‚’ç„¡å„Ÿã§æä¾›è‡´ã—ã¾ã™ã€‚ ä»¥ä¸‹ãƒ•ã‚©ãƒ¼ãƒ ã«ã€æ¤œæŸ»å¯¾è±¡ã‚¢ãƒ‰ãƒ¬ã‚¹ã‚’å…¥åŠ›ã—ã€æ¤œæŸ»ã™ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ å…¥åŠ›ä¾‹ï¼šssl.netagent.co.jp ã“ã®è„†å¼±æ€§ã¯ã©ã®ã‚ˆã†ãªã‚‚ã®ã§ã€ã©ã®ã‚ˆã†ãªå½±éŸ¿ãŒã‚ã‚‹ã®ã§ã™ã‹ï¼Ÿ æš—å·åŒ–é€šä¿¡ã‚’ã—ã¦ã„ã‚‹ãƒ—ãƒã‚°ãƒ©ãƒ å†…ã®ãƒ¡ãƒ¢ãƒªãŒèªã‚ã¦ã—ã¾ã†è„†å¼±æ€§ã§ã™ã€‚ æš—å·åŒ–é€šä¿¡ã§é‡è¦ãªã€Œç§˜å¯†éµã€ãŒç›—ã¿å‡ºã•ã‚Œã¦ã—ã¾ã†å¯èƒ½æ€§ãŒã‚ã‚Šã€éŽåŽ»ã«æš—å·åŒ–ã—ã¦é€šä¿¡ã—ãŸå†…å®¹ãŒè§£èªã§ãã¦ã—ã¾ã„ã¾ã™ã€‚ ã¾ãŸã€ã“ã®è„†å¼±æ€§ã§ã€ãã®æ™‚åˆ©ç”¨ã—ã¦ã„ãŸãƒ¦ãƒ¼ã‚¶ãƒ¼ã®æš—å·åŒ–é€šä¿¡ã®å†…å®¹ãŒã€æš—å·åŒ–ã•ã‚Œã¦ã„ãªã„çŠ¶æ…‹ã§è¦‹ã‚‰ã‚Œã¦ã—ã¾ã„ã¾ã™ã€‚ å®Ÿéš›ã«å…¬é–‹ã•ã‚Œã¦ã„ã‚‹äº‹ä¾‹ã¨ã—ã¦ã¯ã€ ç±³å›½ã®å¤§æ‰‹ãƒãƒ¼ã‚¿ãƒ«ã‚µã‚¤ãƒˆã®ãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒ“ã‚¹ã§ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ã®IDãƒ»ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãªã©ãŒç›—ã¾ã‚ŒãŸã‚ˆã†ã§ã™ã€‚ ãƒ¦ãƒ¼ã‚¶ãƒ¼ã¸ã®å½±éŸ¿ã¯ã‚ã‚Šã¾ã™ã‹ï¼Ÿ è„†å¼±æ€§ã‚’åˆ©ç”¨ã•ã‚Œã¦ç§˜å¯†éµã‚’æŒã¡ã ã•ã‚Œã€éŽåŽ»ã®é€š
RMS-099 2014/04/21
Cryptography

OpenSSL

Vulnerability

Validation
ãƒªãƒ³ã‚¯
Wiresharkã§SSLé€šä¿¡ã®ä¸èº«ã‚’è¦—ã„ã¦ã¿ã‚‹ - ã‚ã°é›»åãŒè©°ã¾ã¤ã¦ã‚ã‚‹
OpenSSLã®è„†å¼±æ€§ã€ŒHeartbleedã€ãŒä¸–é–“ã‚’è³‘ã‚ã›ã¦ã„ã¾ã™ãŒã€è‰²ã€…ã¨ä¹—ã‚Šé…ã‚Œã¦ã—ã¾ã£ãŸæ„ŸãŒã‚ã‚‹ã®ã§ã€ã‚†ã‚‹ã‚†ã‚‹ã¨è½ã¡ç©‚æ‹¾ã„ã‚’ã—ã‚ˆã†ã‹ã¨æ€ã„ã¾ã™ã€‚ Heartbleedã§ç§˜å¯†éµã‚’æ‰‹ã«å…¥ã‚ŒãŸã‚‰SSLé€šä¿¡ã®ä¸èº«å…¨éƒ¨è¦‹ãˆã¡ã‚ƒã†ã˜ã‚ƒã‚“!! ã¨ã„ã†äº‹æ…‹ã«ãªã£ã¦ã„ã¾ã™ãŒã€ãªã‚“ã¨ãªãç†è«–çš„ã«ãã†ã ã‚ã†ãªã¨åˆ†ã‹ã‚‹ã‚‚ã®ã®ã‚¤ãƒžã‚¤ãƒå…·ä½“çš„ãªæ‰‹é †ãŒåˆ†ã‹ã‚‰ãªã„ã€‚ ã¨ã„ã†ã‚ã‘ã§ä»Šå›žã®ãƒ†ãƒ¼ãƒžã¨ã—ã¦ã€æ‰‹å…ƒã«ã‚µãƒ¼ãƒã®ç§˜å¯†éµã¨ã€SSLé€šä¿¡ã‚’ãƒ‘ã‚±ãƒƒãƒˆã‚ãƒ£ãƒ—ãƒãƒ£ã—ãŸpcapãƒ•ã‚¡ã‚¤ãƒ«ãŒã‚ã‚‹ã¨ãã«ã€Wiresharkã§ã©ã‚“ãªæ„Ÿã˜ã§SSLé€šä¿¡ã‚’ã€Œã»ã©ãã€ã®ã‹â€¦â€¦ã¨ã„ã†å…·ä½“çš„ãªæ‰‹é †ã‚’ã€ãƒãƒžã‚Šæ‰€ã‚’å«ã‚ã¦ã¾ã¨ã‚ã¦ãŠã“ã†ã‹ã¨æ€ã„ã¾ã™ã€‚ ã¨ã„ã†ã‹ã€ç§è‡ªèº«ãŒãƒãƒžã£ãŸã®ã§è‡ªåˆ†ç”¨ãƒ¡ãƒ¢ã§ã™ãªã€‚ãªãŠã“ã®æ–‡æ›¸ã§ã¯"SSL"ã¨ã ã‘è¨˜è¿°ã—ã€TLSã¯ç„¡è¦–ã—ã¦ã„ã¾ã™ã€‚ å‰ææ¡ä»¶ ã¨ã‚Šã‚ãˆãšä»¥ä¸‹ã®ã‚ˆã†ãªæ„Ÿã˜ã®æ¤œè¨¼ç’°å¢ƒã§è©¦ã—ã¾ã—ãŸã€‚ IPã‚¢ãƒ‰ãƒ¬ã‚¹ èª¬æ˜Ž ãƒ›ã‚¹ãƒˆO
RMS-099 2014/04/21
Cryptography

OpenSSL

SSL

Wireshark
ãƒªãƒ³ã‚¯
ã€Œã‚ãŸã—ã¯ä¸å¹¸ã«ã‚‚è¦‹é€ƒã—ãŸã€ï¼šå£Šæ»…çš„ãƒã‚°ãƒ»Heartbleedã‚’è¿½åŠ ã—ãŸäººç‰©ã¸ã®ã‚¤ãƒ³ã‚¿ãƒ´ãƒ¥ãƒ¼
RMS-099 2014/04/21
ã€Œæ–°ã—ã„æ©Ÿèƒ½ã®ã²ã¨ã¤ã§ã€æ®‹å¿µãªã“ã¨ã«ã€é•·ã•ã‚’å«ã‚€å¤‰æ•°ã‚’æ¤œè¨¼ã—ãã“ãã¦ã—ã¾ã£ãŸã€

Cryptography

OpenSSL

Bug
ãƒªãƒ³ã‚¯
OpenSSLã®è„†å¼±æ€§ã¸ã®å¯¾å¿œæ–¹æ³•ï¼ˆAWSã‚µãƒ¼ãƒ“ã‚¹/OSã”ã¨ï¼‰ - ã‚µãƒ¼ãƒãƒ¼ãƒ¯ãƒ¼ã‚¯ã‚¹ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãƒ–ãƒã‚°
ã“ã¡ã‚‰ã§ã¯åˆã‚ã¾ã—ã¦ã€å¤§é˜ªã§å¤è»å¥®é—˜ä¸ã®æ¡¶è°·ã§ã™ã€‚<br /> ç¾åœ¨ã€è©±é¡Œã«ãªã£ã¦ã„ã‚‹OpenSSLã®è„†å¼±æ€§ã¸ã®å¯¾å¿œæ–¹æ³•ã‚’ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ â€»éšæ™‚æ›´æ–°ä¸ã€‚æœ€çµ‚æ›´æ–° 2014/04/11 12:29 OpenSSLã«è„†å¼±æ€§ã€ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚„ã‚µãƒ¼ãƒã«ãƒ¡ãƒ¢ãƒªéœ²å‘ˆã®æã‚Œ http://www.itmedia.co.jp/enterprise/articles/1404/08/news038.htm ã“ã¡ã‚‰ã«ä»Šå›žã®è„†å¼±æ€§ã«ã¤ã„ã¦ã®èª¬æ˜Žå‹•ç”»ãŒã‚ã‚Šã¾ã™Â http://vimeo.com/91425662 The Heartbleed Bug http://heartbleed.com/ å¯¾å¿œã‚’è¡Œã‚ãªã„ã¨ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆ/ã‚µãƒ¼ãƒé–“ã®é€šä¿¡ãŒæ‚ªæ„ã®ã‚ã‚‹ç¬¬ä¸‰è€…ã«è¦—ã‹ã‚Œã‚‹æã‚ŒãŒã‚ã‚Šã€ç—•è·¡ã‚’æ®‹ã•ãšã«ãƒˆãƒ©ãƒ•ã‚£ãƒƒã‚¯ã®å†…å®¹ã€ãƒ¦ãƒ¼ã‚¶ãƒ¼ID/ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ãªã©ãŒç›—ã¾ã‚Œã¦ã—ã¾ã†å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ AWSã‹ã‚‰å…¬å¼è¦‹è§£ã¯ã“ã¡ã‚‰ã§
RMS-099 2014/04/20
Cryptography

SSL

OpenSSL

Vulnerability

*ã¾ã¨ã‚
ãƒªãƒ³ã‚¯
OpenSSLã®â€œå‡ºè¡€ãƒã‚°â€ã‚’æŠ±ãˆã¦ã„ã‚‹ã‚µã‚¤ãƒˆã€ã€Œ.jpã€ã§ã¯HTTPSã‚µã‚¤ãƒˆã®45ï¼…ã€€
RMS-099 2014/04/20
ã€Œä½¿ã£ã¦ã„ã‚‹OpenSSLãŒè„†å¼±æ€§ã®ã‚ã‚‹ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã ã£ãŸå ´åˆã¯ã€ä¿®æ£ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«æ›´æ–°ã™ã‚‹ã‹ã€Heartbeatã‚¨ã‚¯ã‚¹ãƒ†ãƒ³ã‚·ãƒ§ãƒ³ã‚’ç„¡åŠ¹åŒ–ã—ãŸä¸Šã§å†ã‚³ãƒ³ãƒ‘ã‚¤ãƒ«ã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã€

Cryptography

SSL

OpenSSL

Vulnerability
ãƒªãƒ³ã‚¯
ã‚¹ãƒŽãƒ¼ãƒ‡ãƒ³äº‹ä»¶ã®è£ã§èµ·ãã¦ã„ãŸSSLç§˜å¯†éµã‚’å·¡ã‚‹æˆ¦ã„:Geekãªãºãƒ¼ã˜
ä»Šæœˆ7æ—¥ã‹ã‚‰9æ—¥ã«ã‚¢ãƒªã‚¾ãƒŠå·žã§é–‹å‚¬ã•ã‚ŒãŸNANOG 59ã§ã€Ladar Levisonæ°ãŒFBIã«ã‚µãƒ¼ãƒ“ã‚¹å…¨ä½“ã®SSLç§˜å¯†éµã‚’è¦æ±‚ã•ã‚ŒãŸè©±ãŒå…¬é–‹ã•ã‚Œã¦ã„ã¾ã—ãŸã€‚ Ladar Levisonæ°ãŒé‹å–¶ã—ã¦ã„ãŸã€Lavabitã¨ã„ã†é›»åãƒ¡ãƒ¼ãƒ«ã‚µãƒ¼ãƒ“ã‚¹ã¯ã‚¹ãƒŽãƒ¼ãƒ‡ãƒ³äº‹ä»¶ã«é–¢é€£ã—ã¦çªå¦‚8æœˆ8æ—¥ã«é–‰éŽ–ã•ã‚Œã¦ã„ã¾ã™ã€‚ é–‰éŽ–æ™‚ã«ã¯è©³ç´°ãŒæ›¸ã‹ã‚Œã¦ãŠã‚‰ãšã€æ§˜ã€…ãªæ†¶æ¸¬ãŒèªžã‚‰ã‚Œã¦ã„ã¾ã—ãŸãŒã€ä¸–ç•Œä¸ã‹ã‚‰å¤šæ•°ã®ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚¨ãƒ³ã‚¸ãƒ‹ã‚¢ãŒé›†ã¾ã‚‹NANOGã§ã€ãã®ä¸€éƒ¨å§‹çµ‚ãŒèªžã‚‰ã‚Œã¾ã—ãŸã€‚ ã“ã®ç™ºè¡¨ã¯ã€NANOG 59ãŒé–‹å§‹ã•ã‚Œã‚‹å‰ã®é€±ã«ã€è£åˆ¤æ‰€ãŒèª¿æŸ»å¯¾è±¡ã®æ°åä»¥å¤–ã‚’æ©Ÿå¯†è§£é™¤ã—ãŸã“ã¨ã«ã‚ˆã£ã¦å®Ÿç¾ã—ã¦ã„ã¾ã™ã€‚ ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆä¸Šã§æä¾›ã•ã‚Œã¦ã„ã‚‹ã‚µãƒ¼ãƒ“ã‚¹äº‹æ¥è€…ã«SSLç§˜å¯†éµã‚’æå‡ºã•ã›ã€ã‹ã¤ã€ãã®äº‹å®Ÿã®å…¬è¡¨ãŒé•æ³•è¡Œç‚ºã¨ãªã‚‹ã‚ˆã†ã«ã•ã‚Œã¦ã—ã¾ã£ã¦ã„ã‚‹ä¸€æ–¹ã§ã€ã“ã†ã„ã£ãŸå†…å®¹ã‚’å…¬çš„ã«èªžã‚Œã‚‹ã‚ˆã†ã«è£åˆ¤æ‰€ã§æˆ¦ã£ã¦ã€å®Ÿéš›ã«ãã‚Œã‚’å‹ã¡å–ã‚‹ã¨ã„ã†ã®ã¯å‡„
RMS-099 2013/10/20
SSL

Cryptography

Judgement
ãƒªãƒ³ã‚¯
å…¬é–‹éµæš—å·ã‚½ãƒ•ãƒˆã€ŒGnuPGã€ã®ã‚ªãƒ¼ãƒ«ã‚¤ãƒ³ãƒ¯ãƒ³ãƒ»ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸
Gpg4winã¯ï¼Œå…¬é–‹éµæš—å·ã‚’ä½¿ã£ã¦é›»åãƒ¡ãƒ¼ãƒ«ã‚„ãƒ•ã‚¡ã‚¤ãƒ«ã‚’æš—å·åŒ–ã™ã‚‹ã‚½ãƒ•ãƒˆã€ŒGnuPGï¼ˆGNU Privacy Guardï¼‰ã€ã®Windowsç‰ˆã¨ï¼ŒGnuPGã‚’Windowsä¸Šã§åˆ©ç”¨ã™ã‚‹ã¨ãã«ä¾¿åˆ©ãªãƒ¦ãƒ¼ãƒ†ã‚£ãƒªãƒ†ã‚£ã‚’1ãƒ‘ãƒƒã‚±ãƒ¼ã‚¸ã«ã¾ã¨ã‚ãŸã‚½ãƒ•ãƒˆã‚¦ã‚¨ã‚¢ã§ã™ã€‚ãƒ•ãƒªãƒ¼ã®å…¬é–‹éµæš—å·ã‚½ãƒ•ãƒˆã¨ã—ã¦ã¯Philip R. Zimmermannæ°ãŒé–‹ç™ºï¼Œå…¬é–‹ã—ãŸã€ŒPGPï¼ˆPretty Good Privacyï¼‰ã€ãŒæœ‰åã§ã™ã€‚GnuPGã¯ï¼ŒPGPã‚’ãƒ™ãƒ¼ã‚¹ã¨ã—ãŸæ¨™æº–ä»•æ§˜ã€ŒOpenPGPï¼ˆRFC2440ï¼‰ã€ã‚’å®Ÿè£…ã—ãŸã‚½ãƒ•ãƒˆã‚¦ã‚¨ã‚¢ã§ã™ã€‚ä¸€éƒ¨ãŒç‰¹è¨±ã§ä¿è·ã•ã‚Œã¦ã„ã‚‹PGPã¨ç•°ãªã‚Šï¼ŒGnuPGã¯ãƒ•ãƒªãƒ¼ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã ã‘ã‚’ä½¿ç”¨ã—ã¦ãŠã‚Šï¼Œå€‹äººåˆ©ç”¨ï¼Œå•†æ¥åˆ©ç”¨ã®åŒºåˆ¥ãªãç„¡å„Ÿã§åˆ©ç”¨ã§ãã¾ã™ã€‚ GnuPGæœ¬ä½“ã¯ã‚³ãƒžãƒ³ãƒ‰ãƒ©ã‚¤ãƒ³ã®ãƒ„ãƒ¼ãƒ«ã§ã™ãŒï¼ŒGpg4winã«ã¯ï¼ŒGUIã§GnuPGã‚’æ“ä½œã™ã‚‹ãƒ•ãƒãƒ³ãƒˆã‚¨ãƒ³ãƒ‰ãƒ»ã‚½ãƒ•ãƒˆã¨ã—ã¦ã€ŒGPAï¼ˆGnu P
RMS-099 2013/08/17
GNU

Cryptography
ãƒªãƒ³ã‚¯
ActiveState Tool Corp. - ActivePerl
Check out our step-by-step guide to effortless open source management. Learn more
RMS-099 2013/05/19
Cryptography

Perl

Windows

Linux

Mac
ãƒªãƒ³ã‚¯
Repair-bde.exe Parameter Reference
RMS-099 2012/12/31
Windows

Recovery

Command

Cryptography
ãƒªãƒ³ã‚¯
Scenario 16: Using the BitLocker Repair Tool to Recover a Drive
Applies To: Windows 7 The BitLocker Repair Tool (Repair-bde) is a command-line tool included with WindowsÂ 7 and Windows ServerÂ 2008Â R2. This tool can be used to access encrypted data on a severely damaged hard disk if the drive was encrypted by using BitLocker Drive Encryption. Repair-bde can reconstruct critical parts of the drive and salvage recoverable data as long as a valid recovery password
RMS-099 2012/12/31
Windows

Recovery

Command

Cryptography
ãƒªãƒ³ã‚¯
OpenSSLæ—¥æœ¬èªžã‚µã‚¤ãƒˆ The Open Source toolkit for SSL-TLS
ã“ã®ã‚µã‚¤ãƒˆã¯ OpenSSL ã‚µã‚¤ãƒˆã®æ—¥æœ¬èªžè¨³ã§ã™ã€‚ã‚ªãƒªã‚¸ãƒŠãƒ«ã‚µã‚¤ãƒˆã®ãƒ‰ã‚ãƒ¥ãƒ¡ãƒ³ãƒˆã¯æ›´æ–°ã•ã‚Œã¦ã„ã¾ã™ã®ã§ã€æœ€æ–°ã®æƒ…å ±ã«ã¤ã„ã¦ã¯http://www.openssl.org/ ã‚’å‚ç…§ã—ã¦ä¸‹ã•ã„ã€‚ æ—¥æœ¬èªžè¨³ã«é–¢ã™ã‚‹è²¬ä»»ã¯ã‚¤ãƒ³ãƒ•ã‚©ã‚µã‚¤ã‚¨ãƒ³ã‚¹(æ ª)ã«ã‚ã‚Šã¾ã™ã€‚æ—¥æœ¬èªžè¨³ã«é–¢ã™ã‚‹è³ªå•ã€èª¤è¨³ã®æŒ‡æ‘˜ãªã©ã¯ [email protected] ã¾ã§å¾¡é€£çµ¡ä¸‹ã•ã„ã€‚ ç¿»è¨³ã®åŽŸæ–‡ã¯ã“ã“(ãƒŸãƒ©ãƒ¼ã‚µã‚¤ãƒˆ)ã§ã™ã€‚ Welcome to the OpenSSL Project OpenSSL Project ã¨ã¯ã€Secure Sockets Layer (SSL v2/v3) ã¨ã€ä¸–ç•Œæ¨™æº–ã®æš—å·ãƒ—ãƒãƒˆã‚³ãƒ«ã§ã‚ã‚‹ Transport Layer Security (TLS v1) ã‚’å®Ÿè£…ã—ãŸã€å¼·å›ºã§å•†ç”¨ã«è€ãˆã†ã‚‹ã€é«˜æ©Ÿèƒ½ãª Open Source ã®ãƒ„ãƒ¼ãƒ«ã‚ãƒƒãƒˆã‚’å…±åŒé–‹ç™ºã™ã‚‹ã‚‚ã®ã§ã™ã€‚ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã¯ Ope
RMS-099 2012/11/08
Cryptography

SSL

OSS

OpenSSL
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸