[B! SHA-2] TsuSUZUKIã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

TsuSUZUKI id:TsuSUZUKI

SHA-2ã«é–¢ã™ã‚‹TsuSUZUKIã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (24)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ã‚µãƒãƒ¼ãƒˆæƒ…å ± : ãƒˆãƒ¬ãƒ³ãƒ‰ãƒžã‚¤ã‚¯ãƒ - å¼Šç¤¾è£½å“ã®ã‚³ãƒ¼ãƒ‰ã‚µã‚¤ãƒ‹ãƒ³ã‚°è¨¼æ˜Žæ›¸(ã‚³ãƒ¼ãƒ‰ç½²åè¨¼æ˜Žæ›¸)ã«ãŠã‘ã‚‹å¯¾å¿œã«ã¤ã„ã¦
TsuSUZUKI 2019/12/11
" SHA-1 ãŠã‚ˆã³ SHA-2 åŒæ–¹ã§ã®ã‚³ãƒ¼ãƒ‰ã‚µã‚¤ãƒ‹ãƒ³ã‚°è¨¼æ˜Žæ›¸ã‚’åˆ©ç”¨ã—ã¦ç½²åã‚’è¡Œã£ã¦ãŠã‚Šã¾ã—ãŸãŒã€ 2020å¹´1æœˆ1æ—¥ä»¥é™ã«ä½œæˆã™ã‚‹ãƒ¢ã‚¸ãƒ¥ãƒ¼ãƒ«ã‚ˆã‚Šã€SHA-2 ã‚³ãƒ¼ãƒ‰ã‚µã‚¤ãƒ‹ãƒ³ã‚°è¨¼æ˜Žæ›¸ã®ã¿ã‚’åˆ©ç”¨ã—ã¦ç½²åã‚’è¡Œã„ã¾ã™ã€‚"

Trendmicro

ãƒˆãƒ¬ãƒ³ãƒ‰ãƒžã‚¤ã‚¯ãƒ

SHA-2
ãƒªãƒ³ã‚¯
Firefoxã¨Thunderbirdã®ã€Œãƒžã‚¹ã‚¿ãƒ¼ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã€ã¯1åˆ†ã§ç ´ã‚‹ã“ã¨ãŒå¯èƒ½ã¨æŒ‡æ‘˜ã•ã‚Œã‚‹
Mozillaã®ã‚¦ã‚§ãƒ–ãƒ–ãƒ©ã‚¦ã‚¶Firefoxã¨ãƒ¡ãƒ¼ãƒ«ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆThunderbirdã«ã¯ã€ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã‚’å‘ä¸Šã™ã‚‹ã¨ã„ã†ç›®çš„ã§ã€ã€Œãƒžã‚¹ã‚¿ãƒ¼ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã€ã¨ã„ã†æ©Ÿèƒ½ãŒã‚ã‚Šã¾ã™ã€‚ã“ã®æ©Ÿèƒ½ã¯ã€ã‚ã‚‰ã‹ã˜ã‚ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®ã‚¢ã‚«ã‚¦ãƒ³ãƒˆæ¯Žã«è¨å®šã—ã¦ãŠã„ãŸå€‹åˆ¥ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã€Œãƒžã‚¹ã‚¿ãƒ¼ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã€ã‚’å…¥åŠ›ã—ãªã„ã¨ã€ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ã®å‹•ä½œã‚’åˆ¶é™ã™ã‚‹ã¨ã„ã†ã‚‚ã®ã§ã™ã€‚ã—ã‹ã—ã€ã“ã®ãƒžã‚¹ã‚¿ãƒ¼ãƒ‘ã‚¹ãƒ¯ãƒ¼ãƒ‰ã«ã‚ˆã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®å‘ä¸Šã«ç–‘å•ã‚’æŒã£ã¦ã„ã‚‹å°‚é–€å®¶ãŒã„ã‚‹ã¨BleepingComputer.comãŒä¼ãˆã¦ã„ã¾ã™ã€‚ Wladimir Palant's notes: Master password in Firefox or Thunderbird? Do not bother! https://palant.de/2018/03/10/master-password-in-firefox-or-thunderbird-do-not-b
TsuSUZUKI 2018/03/21
cf. http://blog.f-secure.jp/archives/50564743.html

Firefox

Mozilla

SHA-1

SHA-2

PBKDF2

Bcrypt

HMAC
ãƒªãƒ³ã‚¯
CRYPTREC SHA-1ã®å®‰å…¨æ€§ä½Žä¸‹ã«ã¤ã„ã¦
ãƒˆãƒ”ãƒƒã‚¯ã‚¹ SHA-1ã®å®‰å…¨æ€§ä½Žä¸‹ã«ã¤ã„ã¦ å¹³æˆ29å¹´3æœˆ1æ—¥ CRYPTRECæš—å·æŠ€è¡“è©•ä¾¡å§”å“¡ä¼š 2017å¹´2æœˆ23æ—¥ã«ã€CWI Amsterdamã¨Google Researchã®å…±åŒç ”ç©¶ãƒãƒ¼ãƒ ãŒã€ãƒãƒƒã‚·ãƒ¥é–¢æ•°SHA-1ã®è¡çªç™ºè¦‹ã«åˆã‚ã¦æˆåŠŸã—ãŸã¨ç™ºè¡¨ã—ã¾ã—ãŸ[1]ã€‚ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã¨ã¯ã€å…¥åŠ›ãƒ‡ãƒ¼ã‚¿ã«å¯¾ã—ã¦å›ºå®šé•·ã®ãƒãƒƒã‚·ãƒ¥å€¤ã‚’å‡ºåŠ›ã™ã‚‹ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã§ã€é›»åç½²åç‰å¤šãã®ç”¨é€”ã§åˆ©ç”¨ã•ã‚Œã¦ã„ã¾ã™ã€‚ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã®è¡çªã‚’ç™ºè¦‹ã™ã‚‹ã¨ã„ã†ã“ã¨ã¯ã€åŒã˜ãƒãƒƒã‚·ãƒ¥å€¤ã‚’å‡ºåŠ›ã™ã‚‹è¤‡æ•°ã®ç•°ãªã‚‹å…¥åŠ›ãƒ‡ãƒ¼ã‚¿ã‚’è¦‹ã¤ã‘ã‚‹ã¨ã„ã†ã“ã¨ã§ã€å®‰å…¨ãªãƒãƒƒã‚·ãƒ¥é–¢æ•°ã«å¯¾ã—ã¦ã¯ç¾å®Ÿçš„ãªè¨ˆç®—é‡ã§ã¯è¡çªãŒè¦‹ã¤ã‘ã‚‰ã‚Œãªã„ã‚ˆã†ã«ãªã£ã¦ã„ã¾ã™ã€‚ä»Šå›žã®ç™ºè¡¨ã§ã¯ã€å…¨æ•°æŽ¢ç´¢ã®è¨ˆç®—é‡(280)ã‚ˆã‚Šã‚‚10ä¸‡å€é€Ÿã„263.1å›žã®SHA-1ã®è¨ˆç®—é‡ã§è¡çªã‚’ç™ºè¦‹ã—ãŸã¨å ±å‘Šã•ã‚Œã¦ã„ã¾ã™ã€‚ã“ã‚Œã¯CPU 6500å¹´åˆ†ã¨GPU 100å¹´åˆ†ã‚’åˆã‚ã›ãŸè¨ˆç®—é‡ã«ç›¸å½“ã™ã‚‹ã¨ã®ã“ã¨ã§
TsuSUZUKI 2017/03/12
cf. http://www.jnsa.org/notice/2017/170302.html , https://www.antiphishing.jp/news/info/sha1shatterd20170307.html , https://www.antiphishing.jp/news/info/sha1shatterd20170307.html

SHAttered

SHA-1

å±æ®†åŒ–

Google

hashtabshlex

HashTab

Fasthash

SHA-2
ãƒªãƒ³ã‚¯
GoogleãŒãƒãƒƒã‚·ãƒ¥é–¢æ•°ã€ŒSHA-1ã€ã‚’ç ´ã‚‹ã“ã¨ã«æˆåŠŸã€90æ—¥å¾Œã«æ‰‹æ³•ã‚’å…¬é–‹äºˆå®š
TLS/SSLã‚„OpenPGPãªã©ã§ä½¿ã‚ã‚Œã‚‹æš—å·çš„ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã€ŒSHA-1ã€ã‚’ç ´ã‚‹ã“ã¨ã«ã€Googleã¨ã‚ªãƒ©ãƒ³ãƒ€ã®CWIç ”ç©¶ãŒæˆåŠŸã—ã¾ã—ãŸã€‚ã“ã‚Œã¾ã§ã€Œç†è«–ä¸Šã¯ç ´ã‚‰ã‚Œã‚‹å¯èƒ½æ€§ãŒã‚ã‚‹ã€ã¨æŒ‡æ‘˜ã•ã‚Œã¦ã„ãŸSHA-1ãŒç¾å®Ÿã«ç ´ã‚‰ã‚Œã‚‹ã“ã¨ã«ãªã£ãŸãŸã‚ã€ã‚ˆã‚Šå®‰å…¨ãªãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¸ã®ç§»è¡ŒãŒå¿…é ˆã«ãªã£ãŸã‚ˆã†ã§ã™ã€‚ Google Online Security Blog: Announcing the first SHA1 collision https://security.google blog.com/2017/02/announcing-first-sha1-collision.html SHAttered http://shattered.io/ ã€ŒSHA-1ã€ç ´ã‚Šã«æˆåŠŸã—ãŸã®ã¯CWIã¨Googleã€‚2å¹´ã®ç ”ç©¶ã®æœ«ã«æˆåŠŸã—ãŸã¨ã®ã“ã¨ã€‚ ç´„20å¹´å‰ã«å®Ÿç”¨åŒ–ã•ã‚ŒãŸSHA-1ã®æŠ€è¡“çš„ãªã‚¢ã‚¤ãƒ‡ã‚¢ã¯ã€ãƒ‡ã‚¸
TsuSUZUKI 2017/02/25
cf. http://jp.wsj.com/articles/SB11107114851997343508104582640500898320654 , https://sect.iij.ad.jp/d/2017/02/271993.html ,http://www.st.ryukoku.ac.jp/~kjm/security/memo/2017/02.html#20170228__sha1 ("6,500 å€‹ã® CPU ã‚’ 1 å¹´é–“""GPU 1å€‹ Ã— 110 å¹´" "GPU 4 å€‹å…¥ã‚Šç®± Ã— 110 å°ãªã‚‰ 3 ã‹æœˆ")

SHAttered

SHA-1

å±æ®†åŒ–

Google

hashtabshlex

HashTab

Fasthash

SHA-2
ãƒªãƒ³ã‚¯
çŸ¥ã‚‰ã‚Œã–ã‚‹æš—å·ã®â€œ2017å¹´å•é¡Œâ€ã€å®‰å…¨ã‚µã‚¤ãƒˆãŒçªå¦‚è¦å‘Šã‚µã‚¤ãƒˆã«
ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°å¯¾ç–ã®æ¥ç•Œå›£ä½“ã§ã‚ã‚‹ãƒ•ã‚£ãƒƒã‚·ãƒ³ã‚°å¯¾ç–å”è°ä¼šã¯2017å¹´1æœˆã€TLS/SSLã‚’ä½¿ã£ã¦ã„ã‚‹Webã‚µã‚¤ãƒˆã«ã‚¢ã‚¯ã‚»ã‚¹ã™ã‚‹ã¨ã€æ£è¦ã®ã‚µã‚¤ãƒˆã§ã‚ã£ã¦ã‚‚ã€Œä¿¡é ¼ã§ããªã„ã‚µã‚¤ãƒˆã§ã™ã€ã¨ã„ã£ãŸè¦å‘ŠãŒè¡¨ç¤ºã•ã‚Œã‚‹å ´åˆãŒã‚ã‚‹ã¨ã—ã¦æ³¨æ„ã‚’å‘¼ã³ã‹ã‘ãŸã€‚ã€ŒSHA-1ã€ã¨å‘¼ã°ã‚Œã‚‹æš—å·æŠ€è¡“ã‚’ä½¿ã£ã¦ã„ã‚‹ã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ãŒã€Œå®‰å…¨ã§ã¯ãªã„ã‚µã‚¤ãƒˆã®è¨¼æ˜Žæ›¸ã€ã¨è¦‹ãªã•ã‚Œã‚‹ã‚ˆã†ã«ãªã£ãŸãŸã‚ã ã€‚ å®‰å…¨ã§ãªã„ã‚µã‚¤ãƒˆã¨è¦‹ãªã•ã‚Œã‚‹ã¨ã€Webãƒ–ãƒ©ã‚¦ã‚¶ãƒ¼ã«ã‚ˆã£ã¦ã¯è¦å‘Šã®è¡¨ç¤ºã©ã“ã‚ã‹ã€ã‚¢ã‚¯ã‚»ã‚¹ã®ç¶šè¡Œã™ã‚‰ã§ããªã„ã€‚å›½å†…ã«ã‚‚ãã‚“ãªWebã‚µã‚¤ãƒˆãŒæ•°ï¼…æ®‹ã£ã¦ã„ã‚‹ã®ã ã€‚ ã€ŒSHA-1ã€ã¯å®‰å…¨ã§ã¯ãªã„ SHA-1ã¨ã¯ã€ä»»æ„ã®ãƒ‡ãƒ¼ã‚¿ã‚’å›ºå®šé•·ã®ãƒ‡ãƒ¼ã‚¿ã«å¤‰æ›ã™ã‚‹æš—å·å¦çš„ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã®ä¸€ç¨®ã€‚ã‚µãƒ¼ãƒãƒ¼è¨¼æ˜Žæ›¸ã®ç½²åï¼ˆãƒ‡ã‚¸ã‚¿ãƒ«ç½²åï¼‰ã‚’ä½œæˆã™ã‚‹éš›ãªã©ã«ä½¿ã‚ã‚Œã¦ã„ã‚‹ã€‚ç±³å›½å®¶å®‰å…¨ä¿éšœå±€ï¼ˆNSAï¼‰ãŒè¨è¨ˆã—ã€ç±³å›½ç«‹æ¨™æº–æŠ€è¡“ç ”ç©¶æ‰€ï¼ˆNISTï¼‰ã«ã‚ˆã£ã¦1995å¹´ã«ã€ŒFIPS PUB
TsuSUZUKI 2017/02/17
SHA-1

SHA-2

SHA-256

SSL

TLS

é›»åè¨¼æ˜Žæ›¸

ãƒ‡ã‚¸ã‚¿ãƒ«ç½²å

ã¾ãã¾ã
ãƒªãƒ³ã‚¯
/blog/2016/11/sha1countdown/
TsuSUZUKI 2016/11/26
SHA-1

Microsoft

IE11

IE

Edge

Windows

SHA1

SHA-2

SHA2

SHA-256
ãƒªãƒ³ã‚¯
SHA-1 deprecation countdown
The SHA-1 hash algorithm is no longer secure. Weaknesses in SHA-1 could allow an attacker to spoof content, execute phishing attacks, or perform man-in-the-middle attacks when browsing the web. Microsoft, in collaboration with other members of the industry, is working to phase out SHA-1. We have outlined our timeline for SHA-1 deprecation in earlier posts, most recently in April. This post is to c
TsuSUZUKI 2016/11/21
"February 14th, 2017" cf. http://internet.watch.impress.co.jp/docs/news/1031081.html / 2017å¹´ã®ãƒãƒ¬ãƒ³ã‚¿ã‚¤ãƒ³ã‚ºãƒ‡ã‚¤ã¯ Microsoft Update ã®æ—¥ã§ã™ã‹ãƒ»ãƒ»ãƒ»ã€‚

SHA-1

Microsoft

IE11

IE

Edge

Windows

SHA1

SHA-2

SHA2

SHA-256
ãƒªãƒ³ã‚¯
SHA-1 Certificates in Chrome
The latest news and insights from Google on security and safety on the Internet
TsuSUZUKI 2016/11/18
SHA-1

Chrome

SHA-2

SHA-256
ãƒªãƒ³ã‚¯
2016å¹´ã«æä¾›ã‚’çµ‚äº†ã™ã‚‹æºå¸¯é›»è©±ç‰ˆã‚µãƒ¼ãƒ“ã‚¹ã«ã¤ã„ã¦ - ãƒ‹ãƒ¥ãƒ¼ã‚¹ - ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾
ãƒ¤ãƒ•ãƒ¼æ ªå¼ä¼šç¤¾ã¯ã€2016å¹´12æœˆã¾ã§ã«ã€ä»¥ä¸‹ã«è¨˜è¼‰ã—ãŸæºå¸¯é›»è©±ï¼ˆiãƒ¢ãƒ¼ãƒ‰ã€EZwebã€Yahoo!ã‚±ãƒ¼ã‚¿ã‚¤ï¼‰ç‰ˆã‚µãƒ¼ãƒ“ã‚¹ã®æä¾›çµ‚äº†ã‚’äºˆå®šã—ã¦ã„ã¾ã™ã€‚ãªãŠã€è¨˜è¼‰ã—ãŸä»¥å¤–ã®æºå¸¯é›»è©±ï¼ˆiãƒ¢ãƒ¼ãƒ‰ã€EZwebã€Yahoo!ã‚±ãƒ¼ã‚¿ã‚¤ï¼‰ç‰ˆã‚µãƒ¼ãƒ“ã‚¹ã¯ã€å¼•ãç¶šãæä¾›ã„ãŸã—ã¾ã™ã€‚ ã€æºå¸¯é›»è©±ï¼ˆiãƒ¢ãƒ¼ãƒ‰ã€EZwebã€Yahoo!ã‚±ãƒ¼ã‚¿ã‚¤ï¼‰ç‰ˆã‚µãƒ¼ãƒ“ã‚¹ã€‘ â€»1ã€€ãƒ†ã‚ã‚¹ãƒˆã§ã®ã€ŒYahoo!æ¤œç´¢ã€ã¯ã€å¼•ãç¶šãã”åˆ©ç”¨ã„ãŸã ã‘ã¾ã™ã€‚ â€»2ã€€ãƒ¦ãƒ¼ã‚¶ãƒ¼ãŒä¿æœ‰ã—ã¦ã„ã‚‹ï¼´ãƒã‚¤ãƒ³ãƒˆã‚„ã‚ãƒ£ãƒ³ãƒšãƒ¼ãƒ³ãŒä¸€è¦§ã§ãã‚‹ã‚µãƒ¼ãƒ“ã‚¹ã§ã™ã€‚ â€»è©³ç´°ã¯é †æ¬¡ã€ã‚µãƒ¼ãƒ“ã‚¹ãƒšãƒ¼ã‚¸ã§ãŠçŸ¥ã‚‰ã›ã„ãŸã—ã¾ã™ã€‚ â€»ä¸Šè¨˜ã®æä¾›å½¢æ…‹ä»¥å¤–ã§ã¯ã€å¼•ãç¶šãã‚µãƒ¼ãƒ“ã‚¹ã‚’æä¾›ã—ã¾ã™ã€‚ â€»çµ‚äº†æ—¥æ™‚ã¯äºˆå‘Šãªãå¤‰æ›´ã¨ãªã‚‹å ´åˆãŒã‚ã‚Šã¾ã™ã€‚
TsuSUZUKI 2016/09/01
cf. http://internet.watch.impress.co.jp/docs/news/1017783.html , "ãŸã ã—ã€50ä»£ã§ã¯45ï¼…ã€60ä»£ä»¥ä¸Šã§ã¯60ï¼…ãŒä¾ç„¶ã¨ã—ã¦ãƒ•ã‚£ãƒ¼ãƒãƒ£ãƒ¼ãƒ•ã‚©ãƒ³ã‚’åˆ©ç”¨ã—ã¦ã„ã‚‹ã“ã¨ã«ãªã‚‹ã€‚â€

Yahoo

ã‚¬ãƒ©ã‚±ãƒ¼

æºå¸¯é›»è©±

SHA-1

SHA-2

SHA-256

TLS
ãƒªãƒ³ã‚¯
TLSã®å®‰å…¨æ€§ã¯ä½•ã§æ±ºã¾ã‚‹ï¼Ÿ
ç”ãˆï¼šæš—å·ã®çµ„ã¿åˆã‚ã›ã§å¤‰ã‚ã‚Šã¾ã™ TLSã§ã¯3ç¨®é¡žã®æš—å·æŠ€è¡“ã‚’æ©Ÿèƒ½åˆ¥ã«4ã¤ã«åˆ†ã‘ã€ãã‚Œãžã‚Œã‚’åˆ‡ã‚Šæ›¿ãˆã¦ä½¿ãˆã‚‹ã‚ˆã†ã«ãªã£ã¦ã„ã‚‹ã€‚4ã¤ã®åˆ†é¡žã¯ã€Œéµäº¤æ›ï¼ˆéµæƒ…å ±ã®å…±æœ‰ï¼‰ã«ä½¿ç”¨ã™ã‚‹å…¬é–‹éµæš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã€ã€Œç½²åã®ä½œæˆã«ä½¿ç”¨ã™ã‚‹å…¬é–‹éµæš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã€ã€Œé€šä¿¡ãƒ‡ãƒ¼ã‚¿ã‚’æš—å·åŒ–ã™ã‚‹å…±é€šéµæš—å·ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã€ã€Œç½²åã®ä½œæˆã«ä½¿ç”¨ã™ã‚‹ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã€â”€â”€ã§ã‚ã‚‹ï¼ˆå›³5-1ï¼‰ã€‚
TsuSUZUKI 2016/08/22
å›³ã‚ã‚Šã€‚

TLS

SSL

RSA

SHA-2

ç‰ä¾¡å®‰å…¨æ€§

CRYPTREC

ãƒ“ãƒƒãƒˆå®‰å…¨æ€§

æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆ
ãƒªãƒ³ã‚¯
æº–å‚™OKï¼Ÿã€€EVã‚³ãƒ¼ãƒ‰ã‚µã‚¤ãƒ‹ãƒ³ã‚°è¨¼æ˜Žæ›¸ã®ç¾çŠ¶ã¨ãã®å®Ÿéš› | OSDN Magazine
Microsoftç¤¾ãŒè¡¨æ˜Žã—ãŸã‚³ãƒ¼ãƒ‰ã‚µã‚¤ãƒ‹ãƒ³ã‚°è¨¼æ˜Žæ›¸ã«ãŠã‘ã‚‹SHA-1ã®ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®åˆ©ç”¨æœŸé™ãŒè¿«ã‚Šã€ã¾ãŸWindows 10ã«ãŠã„ã¦è¨¼æ˜Žæ›¸ã®è¦ä»¶ãŒå¤‰æ›´ã•ã‚Œã‚‹ãªã©ã€è¨¼æ˜Žæ›¸ã«é–¢é€£ã™ã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å¼·åŒ–ã«å¤‰åŒ–ãŒèµ·ã“ã£ã¦ã„ã‚‹ã€‚æœ¬ç¨¿ã§ã¯ã€æ”¹ã‚ã¦è¨¼æ˜Žæ›¸ã‚’å–ã‚Šå·»ãç’°å¢ƒã‚’æ•´ç†ã™ã‚‹ã¨ã¨ã‚‚ã«ã€å¿…é ˆã¨ãªã‚Šã¤ã¤ã‚ã‚‹EVã‚³ãƒ¼ãƒ‰ã‚µã‚¤ãƒ‹ãƒ³ã‚°è¨¼æ˜Žæ›¸ã‚’å®Ÿéš›ã«ã‚°ãƒãƒ¼ãƒãƒ«ã‚µã‚¤ãƒ³ã‹ã‚‰å–å¾—ã—ãªãŒã‚‰è¨¼æ˜Žæ›¸ã®åˆ©ç”¨æ–¹æ³•ã‚’ã¾ã¨ã‚ã¦ã„ã“ã†ã€‚ SHA-1ã‹ã‚‰SHA-2ã¸ã®æœ¬æ ¼ç§»è¡Œé–‹å§‹ SSLè¨¼æ˜Žæ›¸ã‚„ã‚³ãƒ¼ãƒ‰ã‚µã‚¤ãƒ‹ãƒ³ã‚°è¨¼æ˜Žæ›¸ã«ãŠã‘ã‚‹ãƒãƒƒã‚·ãƒ¥ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¨ã—ã¦ã€ã“ã‚Œã¾ã§ã¯SHA-1ãŒãƒ‡ãƒ•ã‚¡ã‚¯ãƒˆã‚¹ã‚¿ãƒ³ãƒ€ãƒ¼ãƒ‰ã¨ã—ã¦åˆ©ç”¨ã•ã‚Œã¦ããŸã€‚ã—ã‹ã—ã€SHA-1ã«å¯¾ã™ã‚‹æ”»æ’ƒæ³•ã¯10å¹´ã»ã©å‰ã«ç™ºè¦‹ã•ã‚Œã¦ãŠã‚Šã€ã‚³ãƒ³ãƒ”ãƒ¥ãƒ¼ã‚¿ã®æ¼”ç®—å‡¦ç†èƒ½åŠ›ã‚‚å‘ä¸Šã—ã¦ãã¦ã„ã‚‹ã“ã¨ã‹ã‚‰ã€SHA-1ã®å¼·åº¦ã¯ååˆ†ã§ã¯ãªã„çŠ¶æ³ã«ã‚ã‚‹ã€‚ã‚ˆã‚Šå¼·åŠ›ãªSHA-2ã¸ã®ç§»è¡Œã¯ã“ã‚Œã¾ã§ã‚‚æŽ¨å¥¨ã•ã‚Œã¦ããŸãŒã€æœ€è¿‘ã«ãª
TsuSUZUKI 2015/11/18
SHA-1

SHA-2

EVè¨¼æ˜Žæ›¸

TLS

SSL
ãƒªãƒ³ã‚¯
Updates to Chrome platform support
Earlier this year, we announced that Google Chrome would continue support for Windows XP through the rem ainder of 2015. Â At that time, we s...
TsuSUZUKI 2015/11/16
cf. http://www.forest.impress.co.jp/docs/news/20151111_730024.html

Google

Chrome

XP

Vista

SHA-2
ãƒªãƒ³ã‚¯
ã€ŒYahoo!æ¤œç´¢ã€ãŒ8æœˆ18æ—¥ã‚ˆã‚Šæ®µéšŽçš„ã«SSLåŒ–ã€ã™ã§ã«SSLåŒ–ã—ã¦ã„ã‚‹ãƒ¤ãƒ•ãƒ¼ã®å„ç¨®ã‚µãƒ¼ãƒ“ã‚¹ã¯10æœˆä»¥é™ã«SHA-2ã‚’é©ç”¨ã€€
TsuSUZUKI 2015/08/18
Yahoo

SSL

TLS

SHA-2
ãƒªãƒ³ã‚¯
SSLè¨¼æ˜Žæ›¸ã‚’SHAâ€“1ã‹ã‚‰SHAâ€“2ã«æ›´æ–°ã™ã‚‹éš›ã«ã¯ã”æ³¨æ„ã‚’ï¼ | ã•ãã‚‰ã®ãƒŠãƒ¬ãƒƒã‚¸
ç¾åœ¨SSLè¨¼æ˜Žæ›¸ã®ç½²åã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒSHAâ€“1ã‹ã‚‰SHAâ€“2ã¸ã¨å¤‰æ›´ã«ãªã‚‹éŽæ¸¡æœŸã¨ãªã£ã¦ã„ã¾ã™ã€‚ä»Šå¾Œã¯SSLè¨¼æ˜Žæ›¸ã®æ–°è¦å–å¾—ã‚„æ›´æ–°ã‚’è¡Œã†éš›ã«ã¯SHAâ€“2ã®è¨¼æ˜Žæ›¸ã‚’å–å¾—ã™ã‚‹ã“ã¨ã«ãªã‚‹ã¨æ€ã„ã¾ã™ãŒã€ã„ã¤ã‚‚é€šã‚Šã®æ…£ã‚ŒãŸä½œæ¥ã¨æ€ã£ã¦ã„ã‚‹ã¨ã€æ€ã‚ã¬ã¨ã“ã‚ã§ãƒãƒžã‚‹ã‹ã‚‚çŸ¥ã‚Œã¾ã›ã‚“ã€‚ ä»Šå›žã¯å®Ÿéš›ã«æ›´æ–°ä½œæ¥ã‚’ã—ãŸçµŒé¨“ã‚’è¸ã¾ãˆã¦å–å¾—/æ›´æ–°ä½œæ¥ã®æ³¨æ„ç‚¹ã«ã¤ã„ã¦ç°¡å˜ã«ã¾ã¨ã‚ã¦ã¿ã¾ã—ãŸã€‚ ãã‚‚ãã‚‚ãªãœSHAâ€“2ã«ç§»è¡Œã™ã‚‹å¿…è¦ãŒã‚ã‚‹ã®ã‹ï¼Ÿ ç½²åã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒSHAâ€“1ã®è¨¼æ˜Žæ›¸ã¯éžæŽ¨å¥¨ã¨ãªã‚Šã€ã‚†ãã‚†ãã¯å»ƒæ¢ã¨ãªã‚‹æµã‚Œã¨ãªã£ã¦ã„ã¾ã™ã€‚åŸºæœ¬çš„ã«SHAâ€“1ã®è¨¼æ˜Žæ›¸ã¯2017å¹´1æœˆ1æ—¥ä»¥é™ä½¿ãˆãªããªã‚‹ã¨è€ƒãˆã¦ã‚ˆã„ã§ã—ã‚‡ã†ã€‚ãã—ã¦2016å¹´12æœˆ31æ—¥ã¾ã§ã«SHAâ€“2ã«ç§»è¡Œã™ã‚‹å¿…è¦ãŒã‚ã‚Šã¾ã™ã€‚ è©³ç´°ã¯ã“ã“ã§èª¬æ˜Žã™ã‚‹ã¨é•·ããªã‚Šã¾ã™ã®ã§ã€æ¬¡ã®ã‚ˆã†ãªSSLè¨¼æ˜Žæ›¸ã®ç™ºè¡Œå…ƒã®ã‚µã‚¤ãƒˆã®è§£èª¬ã‚’å‚ç…§ã—ã¦ãã ã•ã„ã€‚ SHAâ€“1è¨¼æ˜Žæ›¸ã®å—ä»˜çµ‚äº†ã¨S
TsuSUZUKI 2015/02/06
"openssl req -new -sha256 -key www.example.com.key -out www.example.com.sha-2.csr"

OpenSSL

SHA-2
ãƒªãƒ³ã‚¯
COMODO RSA/SHA-256 Test Site
TsuSUZUKI 2014/09/04
cf. http://itpro.nikkeibp.co.jp/atcl/column/14/346926/083100041

SHA-2

SSL

TLS

CoMoDo
ãƒªãƒ³ã‚¯
CTJ Mobile Test
ã‚µã‚¤ãƒãƒ¼ãƒˆãƒ©ã‚¹ãƒˆæ ªå¼ä¼šç¤¾ SureServer EV[SHA-2] ã“ã®ãƒšãƒ¼ã‚¸ã¯SSLæŽ¥ç¶šã—ã¦ã„ã¾ã™ã€‚
TsuSUZUKI 2014/09/04
cf. http://itpro.nikkeibp.co.jp/atcl/column/14/346926/083100041

SHA-2

SSL

TLS
ãƒªãƒ³ã‚¯
SSL SHA-2
This page is for TEST SHA256 SSL Certificate. ã“ã®ã‚µã‚¤ãƒˆã¯SHA-2ã®SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®ãƒ†ã‚¹ãƒˆã‚µã‚¤ãƒˆã§ã™ã€‚ [SHA2ã®ãƒ†ã‚¹ãƒˆã‚µã‚¤ãƒˆã«æ£ã—ãã‚¢ã‚¯ã‚»ã‚¹ã§ããŸå ´åˆ] ã‚¨ãƒ©ãƒ¼ã‚„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¦å‘ŠãŒè¡¨ç¤ºã•ã‚Œãšã«ã€[This page is for TEST SHA256 SSL Certificate.]ã¨è¡¨ç¤ºã•ã‚Œã¾ã™ã€‚ [æŽ¥ç¶šã‚¨ãƒ©ãƒ¼ã«ãªã‚‹å ´åˆ] SHA-2ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã«å¯¾å¿œã—ã¦ã„ãªã„ãƒ–ãƒ©ã‚¦ã‚¶ã®å ´åˆã€ã‚¨ãƒ©ãƒ¼ã‚„ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£è¦å‘ŠãŒè¡¨ç¤ºã•ã‚Œã¾ã™ã€‚ (å†…å®¹ã¯ãŠä½¿ã„ã®ãƒ–ãƒ©ã‚¦ã‚¶ã«ã‚ˆã£ã¦ç•°ãªã‚Šã¾ã™) Copyright(c) Symantec Website Security G.K. All rights reserved.
TsuSUZUKI 2014/09/04
cf. http://itpro.nikkeibp.co.jp/atcl/column/14/346926/083100041

SHA-2

SSL

TLS

Symantec
ãƒªãƒ³ã‚¯
SHA-2 takes off, thanks to Heartbleed
TsuSUZUKI 2014/05/09
Sha-2

SSL

TLS

Heartbleed

ãƒ‡ã‚¸ã‚¿ãƒ«ç½²å

é›»åè¨¼æ˜Žæ›¸

OpenSSL

CVE-2014-0160
ãƒªãƒ³ã‚¯
SHA-2é›»åè¨¼æ˜Žæ›¸ã¸ã®ç§»è¡Œã«ã¤ã„ã¦â”‚SSLãƒ»é›»åè¨¼æ˜Žæ›¸ãªã‚‰ã‚°ãƒãƒ¼ãƒãƒ«ã‚µã‚¤ãƒ³
å¹³ç´ ã¯ã€ã‚°ãƒãƒ¼ãƒãƒ«ã‚µã‚¤ãƒ³ã‚’ã”æ„›é¡§ã„ãŸã ãèª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ ç¾åœ¨ã€å¼Šç¤¾SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ãŠã‚ˆã³ã‚³ãƒ¼ãƒ‰ã‚µã‚¤ãƒ‹ãƒ³ã‚°è¨¼æ˜Žæ›¸ã‚’ã”åˆ©ç”¨ã®ãŠå®¢æ§˜ã«ãŠçŸ¥ã‚‰ã›ã„ãŸã—ã¾ã™ã€‚ 2013å¹´11æœˆ12æ—¥ã€Microsoftç¤¾ã‚ˆã‚Šã€SHA-1ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã®å±æ®†åŒ–ã‚’èƒŒæ™¯ã«ã€SHA-1å»ƒæ¢ãƒãƒªã‚·ãƒ¼ã®ç™ºè¡¨ãŒã‚ã‚Šã¾ã—ãŸã€‚ ã“ã‚Œã«ã‚ˆã‚Šã€SHA-1ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã®å¼Šç¤¾SSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ãŠã‚ˆã³ã‚³ãƒ¼ãƒ‰ã‚µã‚¤ãƒ‹ãƒ³ã‚°è¨¼æ˜Žæ›¸ãŒã€2016å¹´ã‹ã‚‰ç™ºè¡ŒãŒä¸å¯ã«ãªã‚Šã¾ã™ã€‚ã¾ãŸSSLã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¯2017å¹´1æœˆã‹ã‚‰ã€ã‚³ãƒ¼ãƒ‰ã‚µã‚¤ãƒ‹ãƒ³ã‚°è¨¼æ˜Žæ›¸ã¯2016å¹´1æœˆã‹ã‚‰ã”åˆ©ç”¨ä¸å¯ã¨ãªã‚Šã¾ã™ã€‚ ãŠå®¢æ§˜ã«ã¯ã”è¿·æƒ‘ã‚’ãŠã‹ã‘ã—ã¾ã™ãŒã€ã“ã®ãƒšãƒ¼ã‚¸ã«ãŠã„ã¦ä»Šå¾Œéšæ™‚SHA-2é›»åè¨¼æ˜Žæ›¸ã¸ã®ç§»è¡Œã«é–¢ã™ã‚‹æƒ…å ±ã‚’æ›´æ–°ã—ã¦ã¾ã„ã‚Šã¾ã™ã€‚ ç¾åœ¨ã”åˆ©ç”¨ä¸ã®SHA-1è¨¼æ˜Žæ›¸ã¯ç¶™ç¶šåˆ©ç”¨ãŒå¯èƒ½ã§ã™ã€‚ã¾ãŸã€SHA-1è¨¼æ˜Žæ›¸ã‚’æ–°ãŸã«ç™ºè¡Œã™ã‚‹ã“ã¨ã‚‚å¯èƒ½ã§ã™ã€‚SHA-1è¨¼æ˜Žæ›¸ã‹ã‚‰SHA-2è¨¼æ˜Žæ›¸
TsuSUZUKI 2014/02/27
cf. https://www.fortify.net/sslcheck.html

Globalsign

SHA-2

SSL

TLS

é›»åè¨¼æ˜Žæ›¸

ãƒ‡ã‚¸ã‚¿ãƒ«ç½²å
ãƒªãƒ³ã‚¯
ã‚·ãƒžãƒ³ãƒ†ãƒƒã‚¯ã€SHA-1å¯¾å¿œSSLè¨¼æ˜Žæ›¸ã¯2015å¹´æœ«ã«ç™ºè¡Œçµ‚äº†ã€SHA-2ã¸ã®ç§»è¡Œä¿ƒé€²ã€€
TsuSUZUKI 2014/02/06
cf. http://technet.microsoft.com/ja-jp/security/advisory/2880823

SHA-2

Symantec

SSL

TLS

ãƒ‡ã‚¸ã‚¿ãƒ«ç½²å

é›»åè¨¼æ˜Žæ›¸
ãƒªãƒ³ã‚¯
1 2 æ¬¡ã®ãƒšãƒ¼ã‚¸