Labarin ya bayyana cewa masu bincike daga jami'ar Belgium KU Leuven (Katholieke Jami'ar Leuven) fashe ɗaya daga cikin algorithms na ɓoyewa guda huɗu Cibiyar Ƙididdiga da Fasaha ta Ƙasar Amurka (NIST) ta ba da shawarar ta yin amfani da kwamfuta mai mahimmanci guda ɗaya na na'ura mai sarrafa Intel Xeon, wanda aka saki a cikin 2013.
Algorithm, wanda ake kira SIKE (Supersingular Isogeny Key Encapsulation), ya doke mafi yawan gasar daga NIST don haɓaka algorithms na ɓoye ƙididdiga. Duk da haka, masu bincike sun fashe cikin sauƙi.
A watan da ya gabata, NIST ya sanar da wadanda suka lashe gasar shekara guda don haɓaka sabbin ƙa'idodin ɓoyewa, waɗanda aka ƙera don kariya daga barazanar hasashe (a yanzu) waɗanda har yanzu ba a ƙirƙira su ba: kwamfutoci masu yawa.
Ana hasashen cewa wannan kayan masarufi wata rana zai yi ƙarfi sosai har zai iya fashe ɓoyayyen maɓalli na jama'a cikin sauƙi, gami da ƙa'idodi kamar RSA da Diffie-Hellman. Don kiyaye wannan barazanar nan gaba, gwamnatin Amurka ta saka hannun jari wajen ƙirƙirar sabbin ƙa'idodin ɓoyewa waɗanda za su iya jure hare-haren na'urori na kwanaki masu zuwa.
NIST ta zaɓi algorithms na ɓoyewa guda huɗu waɗanda ta yi imanin suna ba da isassun kariya kuma tana shirin daidaitawa. Gasar ta kasance shekaru da yawa ana yin ta kuma ta ƙunshi ɗimbin masu fafatawa daga ko'ina cikin duniya.
Bayan zaɓen ƴan takara huɗu na ƙarshe, NIST ta kuma sanar da cewa an ɗauki wasu mutane huɗu da aka zaɓa a matsayin waɗanda za su iya daidaitawa. SIKE (Supersingular Isogeny Key Encapsulation) ya kasance daya daga cikin ’yan wasan karshe a gasar NIST, amma wani harin intanet da aka gano kwanan nan ya sami nasarar fasa SIKE cikin sauki.
Amma har yanzu, kwamfutar da ta kaddamar da harin ta yi nisa da kwamfutar kwamfuta: PC ce guda ɗaya (ma'ana ƙasa da ƙarfi fiye da na'urar PC), kuma ta ɗauki sa'a guda kawai don ƙaramin na'ura don yin irin wannan aikin.
Masu bincike daga ƙungiyar Tsaron Kwamfuta da Masana'antu (CSIS) a Jami'ar KU Leuven ne suka gano wannan amfani. SIKE ya haɗa da algorithm na ɓoye maɓalli na jama'a da tsarin naɗa maɓalli, kowane ta atomatik tare da saiti huɗu: SIKEp434, SIKEp503, SIKEp610, da SIKEp751.
“Ana gudu a kan cibiya guda ɗaya, lambar Magma da aka makala tana share matsalolin SIKE na $IKEp182 da $IKEp217 a cikin kusan mintuna 4 da 6, bi da bi. Gudun kan sigogin SIKEp434, wanda a baya ake tunanin ya dace da matakin Tsaro na NIST Quantum Level 1, ya ɗauki kusan mintuna 62, har yanzu yana kan cibiya ɗaya, "in ji masu binciken.
Masu haɓaka SIKE sun ba da kyautar $50,000 ga duk wanda ya iya fasa shi.
“Sabuwar raunin da aka gano a fili karara ce ga SIKE. Hare-haren ba zato ba ne, "in ji David Jao, daya daga cikin masu kirkirar algorithm.
Masu binciken CSIS sun ba da lambar su ga jama'a, tare da cikakkun bayanai game da na'ura mai sarrafawa: Intel Xeon E5-2630v2 CPU mai nauyin 2,60 GHz. An fitar da wannan guntu a Q2013 22, yana amfani da gine-ginen Ivy Bridge na Intel da kuma tsarin masana'antu na XNUMXnm. Guntu ya ba da muryoyi shida, amma biyar daga cikinsu ba su sami cikas ba da wannan ƙalubalen.
A cikin labarin da aka buga a karshen mako, Masu bincike na CSIS sun bayyana cewa sun tunkari matsalar ne daga mahangar lissafi kawai, yana kai hari ga zuciyar ƙirar algorithm maimakon yuwuwar raunin lambar. Sun yi nasarar fashe SIKE ta hanyar kai hari ga tushen boye-boye algorithm, Supersingular Isogeny Diffie-Hellman (SIDH). SIDH zai kasance mai rauni ga ka'idar "manna da rarraba", wanda masanin lissafi Ernst Kani ya haɓaka a cikin 1997, tare da ƙarin kayan aikin lissafi da aka tsara a cikin 2000. Har ila yau harin yana amfani da lanƙwasa na genus 2 don kai hari ga masu lankwasa.
"Harin yana amfani da gaskiyar cewa SIDH yana da maki na taimako kuma an san matakin ɓoyewar isogeny. Makiyoyin taimako a cikin SIDH koyaushe sun kasance abin damuwa da rauni mai yuwuwa, kuma an yi amfani da su don munanan hare-hare, harin GPST mai daidaitawa, harin karkatarwa, da sauransu. ya bayyana Steven Galbraith, farfesa a fannin lissafi a Jami'ar Auckland. Ga sauran mu, wannan duk yana nufin cewa masu bincike sun yi amfani da lissafi don gano makircin ɓoyayyen SIKE kuma sun sami damar yin tsinkaya, sannan su dawo, maɓallan ɓoyewa.
Don kokarin da suke yi da labarinsu mai taken "An Inganci Maɓallin Farfaɗowa akan SIDH (Preview)", masu bincike za su sami kyautar $50,000 da Microsoft da takwarorinta ke bayarwa.
A ƙarshe, idan kun kasance sha'awar ƙarin sani game da shi, zaka iya duba bayanan A cikin mahaɗin mai zuwa.