[B! æš—å·] lackofxxã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

lackofxx id:lackofxx

æš—å·ã«é–¢ã™ã‚‹lackofxxã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

ç¥RFCï¼Transport Layer Security (TLS) 1.3 ç™ºè¡Œã®è»Œè·¡ ï½žç†Ÿæˆã•ã‚ŒãŸ4å¹´é–“ã®å®‰å…¨æ€§è§£æžï½žï½œæ ªå¼ä¼šç¤¾ãƒ¬ãƒ”ãƒ€ãƒ
GMOã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ byã‚¤ã‚¨ãƒ©ã‚¨æ ªå¼ä¼šç¤¾ã¯å›½å†…ãƒˆãƒƒãƒ—ã‚¯ãƒ©ã‚¹ã®ãƒ›ãƒ¯ã‚¤ãƒˆãƒãƒƒã‚«ãƒ¼ãŒå¤šæ•°åœ¨ç±ã™ã‚‹ã‚µã‚¤ãƒãƒ¼ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ã®ä¼šç¤¾ã§ã™ã€‚æ”»æ’ƒæ‰‹æ³•ã«é–¢ã™ã‚‹è±Šå¯ŒãªçŸ¥è˜ã¨æœ€å…ˆç«¯ã®æŠ€è¡“ã‚’æŒã¤ãƒ›ãƒ¯ã‚¤ãƒˆãƒãƒƒã‚«ãƒ¼ãŒä»®æƒ³æ•µã¨ãªã‚Šã€ãŠå®¢æ§˜ã®æŠ±ãˆã‚‹ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ä¸Šã®å•é¡Œã®å¯è¦–åŒ–ã¨èª²é¡Œè§£æ±ºã‚’ã‚µãƒãƒ¼ãƒˆã—ã¾ã™ã€‚ ã€Œèª°ã‚‚ãŒçŠ ç‰²ã«ãªã‚‰ãªã„ç¤¾ä¼šã‚’å‰µã‚‹ã€ã‚’ãƒŸãƒƒã‚·ãƒ§ãƒ³ã¨ã—ã¦æŽ²ã’ã€ãƒ‡ã‚¸ã‚¿ãƒ«ãƒã‚¤ãƒ†ã‚£ãƒ–ã®æ™‚ä»£ã‚’ç”Ÿãã‚‹ã™ã¹ã¦ã®äººãŒå®‰å…¨ã«æš®ã‚‰ã›ã‚‹ã‚¤ãƒ³ã‚¿ãƒ¼ãƒãƒƒãƒˆç¤¾ä¼šå‰µã‚Šã«è²¢çŒ®ã—ã¾ã™ã€‚
lackofxx 2018/10/02
TLS

æš—å·

security

IT

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£
ãƒªãƒ³ã‚¯
é‡åè¨ˆç®—æ©Ÿã§ã‚‚è§£èªå›°é›£ã€€åŒ—æµ·é“æ•™è‚²å¤§å¦ã‚‰ãŒæ–°æ–¹å¼ã®å…¬é–‹éµæš—å·é–‹ç™º
é‡åè¨ˆç®—æ©Ÿã§ã‚‚è§£èªãŒå›°é›£ãªæ–°ã—ã„åŽŸç†ã«åŸºã¥ãå…¬é–‹éµæš—å·ãŒã€åŒ—æµ·é“æ•™è‚²å¤§å¦ã€ä¹å·žå¤§å¦ã€ç”£æ¥æŠ€è¡“ç·åˆç ”ç©¶æ‰€ã¨æ ªå¼ä¼šç¤¾æ±èŠã®å…±åŒç ”ç©¶ã«ã‚ˆã‚Šé–‹ç™ºã•ã‚ŒãŸã€‚é‡åè¨ˆç®—æ©Ÿã§ã‚‚è¨ˆç®—ãŒå›°é›£ã¨æœŸå¾…ã•ã‚Œã‚‹éžç·šå½¢ä¸å®šæ–¹ç¨‹å¼ã®æœ€å°è§£å•é¡Œã«åŸºã¥ã„ãŸæ§‹æˆã§ã€ã“ã®é ˜åŸŸã§æœ‰åŠ›ã¨ã•ã‚Œã¦ããŸæ ¼åæš—å·ã¨åŒç‰ã¾ãŸã¯ãã‚Œä»¥ä¸Šã®å®‰å…¨æ€§ã¨è¨ˆç®—åŠ¹çŽ‡æ€§ãŒæœŸå¾…ã§ãã‚‹ã¨ã—ã¦ã„ã‚‹ã€‚ ç¾åœ¨ã€å¤§æ‰‹ITä¼æ¥ã‚„æ”¿åºœã®å¤§è¦æ¨¡ãªæŠ•è³‡ã«ã‚ˆã‚Šé‡åè¨ˆç®—æ©Ÿã®é–‹ç™ºãŒæ€¥ãƒ”ãƒƒãƒã§é€²ã‚“ã§ã„ã‚‹ã€‚é‡åè¨ˆç®—æ©ŸãŒé–‹ç™ºã•ã‚Œã‚‹ã¨ã€ç¾è¡Œã®å…¬é–‹éµæš—å·ãŒå®‰å…¨æ€§ã®æ ¹æ‹ ã¨ã—ã¦ã„ã‚‹ç´ å› æ•°åˆ†è§£ã‚„é›¢æ•£å¯¾æ•°å•é¡ŒãŒçŸæ™‚é–“ã§è§£ã‹ã‚Œã€æš—å·ãŒè§£èªã•ã‚Œã¦ã—ã¾ã†ã“ã¨ã‹ã‚‰ã€é‡åè¨ˆç®—æ©Ÿã§ã‚‚è§£èªãŒå›°é›£ãªå¯¾é‡åå…¬é–‹éµæš—å·ã®ç ”ç©¶é–‹ç™ºãŒè¿‘å¹´æ´»ç™ºã«è¡Œã‚ã‚Œã¦ããŸã€‚ã—ã‹ã—ã€å¯¾é‡åå…¬é–‹éµæš—å·ã¯å…¬é–‹éµã‚µã‚¤ã‚ºãŒå¤§ãã„ã¨ã„ã†æ¬ ç‚¹ãŒã‚ã‚Šã€ã“ã‚Œã¾ã§å®Ÿç”¨åŒ–ã«è‡³ã£ã¦ã„ãªã‹ã£ãŸã€‚ ä»Šå›žé–‹ç™ºã•ã‚ŒãŸã®ã¯ã€å¾“æ¥ã®å¯¾é‡åå…¬é–‹éµæš—å·ãŒå®‰å…¨æ€§ã®æ ¹æ‹ ã¨ã—ã¦ããŸç·šåž‹æ–¹
lackofxx 2017/08/18
IT

ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

æš—å·
ãƒªãƒ³ã‚¯
ç†è§£ã—ã¦ã‚‹ã¤ã‚‚ã‚Šã® SSL/TLS ã§ã‚‚ã€ã‚‚ã£ã¨ç†è§£ã—ãŸã‚‰é¢ç™½ã‹ã£ãŸè©± Â· ã‘ã‚“ã”ã®ãŠå±‹æ•·
apache ã‚„ nginx ã®è¨å®šã‚’ã—ãŸã“ã¨ãŒã‚ã‚Œã°ä»¥ä¸‹ã®æ§˜ãªè¡Œã‚’è¦‹ãŸã“ã¨ãŒã‚ã‚‹äººã‚‚å¤šã„ã®ã§ã¯ãªã„ã§ã—ã‚‡ã†ã‹ã€‚(â€» ä¸‹è¨˜ã¯ nginx ã®è¨å®šã€‚apache ã®å ´åˆã¯ SSLCipherSuite ã§ã™ã€‚) ssl_ciphers AES128-SHA:AES256-SHA:RC4-SHA:DES-CBC3-SHA:RC4-MD5; ã“ã‚ŒãŒæš—å·ã‚¹ã‚¤ãƒ¼ãƒˆã‚’æŒ‡å®šã—ã¦ã„ã‚‹ç®‡æ‰€ã§ã™ã€‚ãã—ã¦ã“ã®éƒ¨åˆ†ã€ã‚ã‘ã®ã‚ã‹ã‚‰ãªã„æ–‡å—åˆ—ã®ç¾…åˆ—ãªã®ã§ã™ã”ãå–ã£ã¤ãã«ããã¦ä½•ã‚’æŒ‡å®šã—ãŸã‚‰ã„ã„ã‹ã‚ã‹ã‚‰ãªã„ã®ã§ã€ã‚³ãƒ”ãƒšã—ã¦ã—ã¾ã†äººã‚‚å¤šã„ã‚“ã˜ã‚ƒãªã„ã§ã—ã‚‡ã†ã‹ã€‚ã‹ãã„ã†ç§ã‚‚æ•°å¹´å‰ã«è¶£å‘³ã§ TLS å¯¾å¿œã® Web ã‚µãƒ¼ãƒ“ã‚¹ã‚’ä½œã£ãŸæ™‚ã¯ã‚³ãƒ”ãƒšã§æ¸ˆã¾ã›ã¦ã„ã¾ã—ãŸã€‚ã“ã®æš—å·ã‚¹ã‚¤ãƒ¼ãƒˆã¯ã€ä»¥ä¸‹ã®ã‚ˆã†ãª OpenSSL ã®ã‚³ãƒžãƒ³ãƒ‰ã‚’ä½¿ã£ã¦å¯¾å¿œã—ã¦ã„ã‚‹ä¸€è¦§ã‚’è¦‹ã‚‹ã“ã¨ãŒã§ãã¾ã™ã€‚ $ openssl ciphers -v AES128-SH
lackofxx 2015/12/05
security

æš—å·

ssl

web
ãƒªãƒ³ã‚¯
Bitcoinã‚’æŠ€è¡“çš„ã«ç†è§£ã™ã‚‹
æ—¥æœ¬ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£å”ä¼š PKIç›¸äº’é‹ç”¨WGãƒ»é›»åç½²åWGã®å…±å‚¬ã§2014å¹´6æœˆ2æ—¥ã«è¡Œã‚ã‚ŒãŸBitcoinå‹‰å¼·ä¼šã®è³‡æ–™ã‚’å…¬é–‹ç”¨ã«æ‰‹ç›´ã—ã—ãŸã‚‚ã®ã§ã™ã€‚é•·ã„äº‹ã€é›»åç½²åã‚’å°‚é–€ã«ã—ã¦ãŠã‚Šã€ãã®ã‚ˆã†ãªè¦³ç‚¹ã§ãƒ“ãƒƒãƒˆã‚³ã‚¤ãƒ³ã®ãƒ‡ãƒ¼ã‚¿ã‚„ç½²åã€ãƒãƒƒã‚·ãƒ¥ã«ã¤ã„ã¦è§£èª¬ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã€‚Read less
lackofxx 2014/06/27
è³‡æ–™

æš—å·
ãƒªãƒ³ã‚¯
â€œæ—¥æœ¬ã®æ¨™æº–æš—å·â€ãŒ10å¹´ã¶ã‚Šå¤§æ”¹å®šã€å›½ç”£æš—å·å‰Šæ¸›ã‚ˆã‚Šã‚‚RC4ã¨SHA-1ã®ç›£ç†ãƒã‚¹ãƒˆå…¥ã‚ŠãŒå½±éŸ¿å¤§ï¼šITpro
å›³â—æ”¹å®šã§ç‰¹ã«å¤‰åŒ–ãŒå¤§ãã‹ã£ãŸç®‡æ‰€ å…±é€šéµæš—å·ï¼ˆ64ãƒ“ãƒƒãƒˆãƒ»ãƒ–ãƒãƒƒã‚¯æš—å·ã€128ãƒ“ãƒƒãƒˆãƒ»ãƒ–ãƒãƒƒã‚¯æš—å·ã€ã‚¹ãƒˆãƒªãƒ¼ãƒ æš—å·ï¼‰ã®ã‚«ãƒ†ã‚´ãƒªã¯ã€æ”¹å®šå‰ã«ã¯å¤šãã®å›½ç”£æš—å·ãŒãƒªã‚¹ãƒˆã«æŽ²è¼‰ã•ã‚Œã¦ã„ãŸãŒã€ãã‚Œã‚‰ã®å¤šããŒæ”¹å®šã§è½ã¨ã•ã‚ŒãŸã€‚ãƒãƒƒã‚·ãƒ¥é–¢æ•°ã¯ã€å®‰å…¨æ€§ã«å•é¡ŒãŒã‚ã‚‹äºŒã¤ã®æ–¹å¼ãŒå‰Šã‚‰ã‚Œã¦ã„ã‚‹ã€‚ï¼ˆæ—¥çµŒã‚¨ãƒ¬ã‚¯ãƒˆãƒãƒ‹ã‚¯ã‚¹2013å¹´4æœˆ15æ—¥å·p.11ã‹ã‚‰æŠœç²‹ï¼‰ é›»åæ”¿åºœã§ç”¨ã„ã‚‹æš—å·æ–¹å¼ã‚’è©•ä¾¡ãƒ»èª¿æŸ»ã™ã‚‹ãƒ—ãƒã‚¸ã‚§ã‚¯ãƒˆã§ã‚ã‚‹CRYPTRECãŒå…¬é–‹ã—ã¦ã„ã‚‹ã€Œé›»åæ”¿åºœæŽ¨å¥¨æš—å·ãƒªã‚¹ãƒˆã€ãŒ10å¹´ã¶ã‚Šã«æ”¹å®šã•ã‚ŒãŸï¼ˆTech-On!ã®é–¢é€£è¨˜äº‹ï¼‰ã€‚åŒãƒªã‚¹ãƒˆã¯ã€æ—¥æœ¬æ”¿åºœãŒé›»åã‚·ã‚¹ãƒ†ãƒ ã‚’èª¿é”ã™ã‚‹éš›ã«ä½¿ç”¨ã‚’æŽ¨å¥¨ã™ã‚‹æš—å·æ–¹å¼ã‚’ç¤ºã™ã‚‚ã®ã€‚æŠ€è¡“çš„ã«å®‰å…¨æ€§ãŒç¢ºèªã•ã‚ŒãŸæš—å·æ–¹å¼ã‚’æ”¿åºœãŒç¤ºã™å½¹å‰²ã‚‚æ‹…ã£ã¦ã„ã‚‹ã€‚ã„ã‚ã°â€œæ—¥æœ¬ã®æ¨™æº–æš—å·â€ã‚’ç¤ºã™ãƒªã‚¹ãƒˆã ã€‚ ä»Šå›žã®æ”¹å®šã§ã¯ã€2012å¹´æ˜¥ã«äºˆå‘Šã•ã‚ŒãŸé€šã‚Šã€ãƒªã‚¹ãƒˆã‹ã‚‰å¤šãã®å›½ç”£æš—å·ãŒæ¶ˆãˆãŸï¼ˆTech-On!ã®é–¢é€£
lackofxx 2013/05/08
æš—å·

IT
ãƒªãƒ³ã‚¯
b-casã‚«ãƒ¼ãƒ‰ä¸æ£æ”¹é€ å•é¡Œã®æœ¬è³ªã¯ã‚«ãƒ¼ãƒ‰ã®äº¤æ›ã‚’ä¸å¯èƒ½ã«ã—ãŸã“ã¨ - ã‚¢ãƒ³ã‚«ãƒ†
b-casã‚«ãƒ¼ãƒ‰ã®ä¸æ£æ”¹é€ å•é¡ŒãŒé¨’ãŒã‚Œã¦ã„ã‚‹ãŒã€ã€Œã‚«ãƒ¼ãƒ‰ãŒã‚¯ãƒ©ãƒƒã‚¯ã•ã‚ŒãŸã€ã¨ã„ã†ã“ã¨ã§ã¯ãªãã€Œã‚«ãƒ¼ãƒ‰ãŒäº¤æ›ã§ããªã„ã€ã¨ã„ã†ã“ã¨ãŒå•é¡Œã®æœ¬è³ªã§ã€ã“ã®ç‚¹ãŒã‚¯ãƒãƒ¼ã‚ºã‚¢ãƒƒãƒ—ã•ã‚Œã‚‹ã¹ãã ã¨æ€ã†ã€‚ éµã‚’ç›—ã¾ã‚ŒãŸã®ã‹ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã«æ¬ é™¥ãŒã‚ã£ãŸã®ã‹ï¼Ÿ 2ã¡ã‚ƒã‚“ãã‚‹ã§ã¯ã€Œb-casã‚«ãƒ¼ãƒ‰å®Œå…¨è§£æžã€ã¨ã‹ã€Œb-casã‚«ãƒ¼ãƒ‰çµ‚äº†ã€ã¨ã‹è¨€ã‚ã‚Œã¦ã„ã‚‹ãŒã€æš—å·åŒ–ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒç ´ã‚‰ã‚ŒãŸã‚ã‘ã§ã¯ãªã„ã€‚ ã€Œæš—å·åŒ–ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒç ´ã‚‰ã‚ŒãŸã€ã¨ã„ã†è¨€è‘‰ã¯ã€éµç„¡ã—ã§æš—å·æ–‡ã‚’å¾©å·ã™ã‚‹æ–¹æ³•ãŒç™ºè¦‹ã•ã‚ŒãŸæ™‚ã«ä½¿ã†ã¹ãã ã€‚æš—å·åŒ–ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ãŒçŸ¥ã‚‰ã‚Œã¦ã‚‚ã€éµãŒç„¡ã‘ã‚Œã°ç ´ã‚Œãªã„æš—å·ã¯ãŸãã•ã‚“ã‚ã‚‹ã€‚ã¨ã„ã†ã‹ã€æœ¬æ¥ã¯ã€æš—å·åŒ–ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã¯å…¬é–‹ã•ã‚Œ(ã¦ãƒ¬ãƒ“ãƒ¥ãƒ¼ã‚’å—ã‘)ã‚‹ã¹ãã‚‚ã®ã§ã€ä¸èº«ã‚’çŸ¥ã‚‰ã‚Œã¦ã‹ã‚‰æš—å·æ–‡ã‚’ã©ã‚Œã ã‘ãŸãã•ã‚“é›†ã‚ã¦ç ”ç©¶ã•ã‚Œã¦ã‚‚ã€éµç„¡ã—ã§ã¯çµ¶å¯¾ã«(ç¾å®Ÿçš„ãªè¨ˆç®—æ™‚é–“ã§ã¯)å¾©å·ã•ã‚Œãªã„ã¨ã„ã†ã“ã¨ãŒã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®å½¹å‰²ã§ã‚ã‚‹ã€‚ ä»Šå›žã®ã‚¯ãƒ©ãƒƒã‚ãƒ³ã‚°ã¯
lackofxx 2012/05/23
ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£

æš—å·
ãƒªãƒ³ã‚¯
ã€Œè§£èªä¸èƒ½ã¯æ•°å¦çš„ã«è¨¼æ˜Žæ¸ˆã¿ã€ã€RSAã‚’è¶…ãˆã‚‹æ–°æš—å·æ–¹å¼ã¨ã¯ â€• ï¼ IT
2008/04/11 ã™ã¹ã¦ã®æš—å·ã¯ã„ãšã‚Œç ´ã‚‰ã‚Œã‚‹ã€‚2000å¹´å‰ã®ã‚·ãƒ¼ã‚¶ãƒ¼æš—å·ã®æ™‚ä»£ã‹ã‚‰é«˜åº¦ãªæš—å·æŠ€è¡“ãŒä¸€èˆ¬åŒ–ã—ãŸãƒ‡ã‚¸ã‚¿ãƒ«é€šä¿¡ã®ç¾ä»£ã«è‡³ã‚‹ã¾ã§ã€ãã‚ŒãŒæš—å·é€šä¿¡ã®æ´å²ãŒè¨¼æ˜Žã—ç¶šã‘ãŸäº‹å®Ÿã§ã‚ã‚‹ã¨åŒæ™‚ã«ã€ã‚‚ã£ã¨ã‚‚äººå£ã«è†¾ç‚™ã—ãŸã‚¯ãƒªã‚·ã‚§ã§ã‚‚ã‚ã£ãŸã€‚ä¾‹ãˆã°ã€é³´ã‚Šç‰©å…¥ã‚Šã§ãƒªãƒªãƒ¼ã‚¹ã•ã‚ŒãŸDVDã®ã‚³ãƒ³ãƒ†ãƒ³ãƒ„æš—å·æŠ€è¡“ã€ŒCSSã€ï¼ˆContent Scramble Systemï¼‰ãŒã€ãƒªãƒªãƒ¼ã‚¹ã‹ã‚‰ã‚ãšã‹æ•°å¹´ã§10ä»£ã®ãƒŽãƒ«ã‚¦ã‚§ãƒ¼äººãƒãƒƒã‚«ãƒ¼ã«ç ´ã‚‰ã‚ŒãŸã“ã¨ã¯è¨˜æ†¶ã«æ–°ã—ã„ã€‚ ã€è¿½è¨˜ã€‘ï¼ˆ2008å¹´4æœˆ15æ—¥ï¼‰ ã“ã®è¨˜äº‹ã¯å–æã«åŸºã¥ã„ã¦åŸ·ç†ã—ãŸã‚‚ã®ã§ã™ãŒã€ä¸€éƒ¨å°‚é–€å®¶ã‚‰ã‹ã‚‰ã€ŒCABæ–¹å¼æš—å·ã¯è§£èªä¸èƒ½ã€ã¨ã„ã†ã®ã¯èª‡å¤§è¡¨ç¾ã§ã¯ãªã„ã‹ã¨ã®ç–‘ç¾©ãŒå‘ˆã•ã‚Œã¦ã„ã¾ã™ã€‚ã‚¢ãƒ«ã‚´ãƒªã‚ºãƒ ã®å…¬é–‹ã‚„ç¬¬ä¸‰è€…ã«ã‚ˆã‚‹æ¤œè¨¼ãŒãªã„ç¾åœ¨ã€ã“ã®è¨˜äº‹ã«ç™»å ´ã™ã‚‹CABæ–¹å¼ãŒç™ºæ¡ˆè€…ãƒ»å®Ÿè£…è€…ã®ä¸»å¼µé€šã‚Šç”»æœŸçš„ãªæš—å·æ–¹å¼ã§ã€æœ¬å½“ã«è§£èªãŒä¸å¯èƒ½ã§ã‚ã‚‹ã‹ã©ã†ã‹åˆ†ã‹ã‚Šã¾ã›ã‚“ã€‚ç¾åœ¨ã€å°‚
lackofxx 2008/04/13
security

æš—å·

web
ãƒªãƒ³ã‚¯
1