Heartbleed bug ã«ã‚ˆã‚‹ç§˜å¯†éµæ¼æ´©ã®ç¾å®Ÿæ€§ã«ã¤ã„㦠– IIJ Security Diary本稿ã§ã¯ HeartBleed bug ã«ã‚ˆã‚‹ç§˜å¯†éµæ¼æ´©ã®å¯èƒ½æ€§ã‚’考察ã—ã¾ã™ã€‚ OpenSSL ã§åˆ©ç”¨ã•ã‚Œã‚‹ RSA 秘密éµã®ãƒ•ã‚©ãƒ¼ãƒžãƒƒãƒˆã¯ PKCS#1[1]Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1 http://tools.ietf.org/html/rfc3447#section-3.2 ã§å®šã‚られã¦ã„ã¾ã™ã€‚æš—å·åŒ–ã•ã‚ŒãŸæš—å·æ–‡ã®å¾©å·ã€ã‚‚ã—ãã¯ãƒ‡ã‚¸ã‚¿ãƒ«ç½²åã‚’è¡Œã†éš›ã« RSA ã®ç§˜å¯†éµã«ã‚ˆã‚‹æ“作ãŒè¡Œã‚ã‚Œã¾ã™ã€‚SSL/TLS サーãƒã« https ã§ã‚¢ã‚¯ã‚»ã‚¹ã—ãŸå ´åˆã«ã¯ã€ãã®ä¸¡æ–¹ã®ç”¨é€”ã§ç§˜å¯†éµãŒç”¨ã„られã¾ã™ã€‚ãã®ãŸã‚ HSM ãªã©ã®ä»•çµ„ã¿ãŒç„¡ã„å ´åˆã«ã¯ç§˜å¯†éµãŒãƒ¡ãƒ¢ãƒªä¸Šã«å±•é–‹ã•ã‚Œã¦ã„ã‚‹å¯èƒ½æ€§ãŒé«˜ã„ã¨è¨€ãˆã¾ã™ã€‚実際 Cloudflare Challenge[2
{{#tags}}- {{label}}
{{/tags}}