Анализ надежности PGP
"A security analysis of Pretty Good Privacy",
© 2001 Sieuwert van Otterloo[link1].
Черновой перевод глав 1-3 © 2006 Wizzard[link2]
Перевод, корректура, редактура © 2006-2007 SATtva[link3]
Предисловие[link4]
- От редактора перевода[link5]
- Предисловие автора[link6]
- Анализ[link7]
Вступление[link8]
- Что такое PGP?[link9]
- Как работает PGP[link10]
- Математика[link11]
- Длина ключа[link12]
- Сеть доверия[link13]
- Уязвимости вне PGP[link14]
- Ненадежные парольные фразы[link15]
- Не полностью удаленные файлы[link16]
- Вирусы и троянские кони[link17]
- Нарушение физической безопасности[link18]
- Поддельные метки времени[link19]
- Анализ трафика[link20]
- TEMPEST[link21]
История PGP[link22]
- Перед 1.0[link23]
- Партизанщина[link24]
- PGP 1.0[link25]
- PGP 2.0 – 2.3a[link26]
- PGP 2.4.x[link27]
- PGP 2.5[link28]
- PGP 2.6[link29]
- PGP 2.6.x[link30]
- Что насчет PGP 3.0?[link31]
- PGP 4.0 и 4.5[link32]
- PGPfone[link33]
- PGP как нормальная программа[link34]
- Будущее PGP[link43]
- GNU Privacy Guard[link44]
- Защищённая почта Hushmail[link45]
- Обзор версий PGP[link46]
Алгоритмы PGP[link47]
- Виды алгоритмов[link48]
- Симметричные блочные шифры[link49]
- Bass-o-Matic[link50]
- IDEA[link51]
- CAST[link52]
- 3DES[link53]
- Rijndael/AES[link54]
- Режимы шифрования[link55]
- Алгоритмы с открытым ключом[link56]
- RSA[link57]
- ElGamal/Diffie-Hellman[link58]
- DSA[link59]
- Дополнение[link60]
- Хэш-функции[link61]
- MD5[link62]
- SHA[link63]
- RIPEMD-160[link64]
- Безопасность[link65]
- Алгоритмы разделения секрета[link66]
- Проблемы[link67]
Формат файлов PGP[link68]
- Основы[link69]
- Пакеты[link70]
- Заголовок пакета[link71]
- Пакеты ключей[link72]
- Пакеты открытых ключей[link73]
- Version 3[link74]
- Version 4[link75]
- Пакеты закрытых ключей[link76]
- Подключи[link77]
- Пакеты подписей[link78]
- Version 3[link79]
- Version 4[link80]
- Субпакеты v4[link81]
- Прочие пакеты[link82]
- ID ключа и отпечаток[link83]
- Проблемы ID ключа[link84]
- Режимы String-to-Key[link85]
- Проблемы[link86]
- Как объединять пакеты[link87]
- ASCII-кодировка[link90]
- Константы[link91]
Баги и атаки[link92]
- О багах и атаках[link93]
- Баг со случайными числами в Linux[link94]
- Ключевое расписание PGPdisk[link95]
- Баг в ADK[link96]
- Чешская атака на закрытый ключ[link97]
- Баг ASCII-кодировки[link98]
- Атака на множественные UserID[link99]
Анализ исходного кода[link100]
- Как мы исследовали исходные тексты[link101]
- Управление памятью[link102]
- Парсинг файлов[link103]
- Сеть доверия[link104]
- Ууу, двоичное сообщение PGP[link105]
- Код асимметричного крипто[link106]
- Случайные числа[link109]
- Применение случайных чисел[link110]
- Вывод буфера случайности[link111]
- Ввод буфера случайности[link112]
- Ложный пул[link113]
- Исторический экскурс: PGP 1.0[link114]
- Комментарии XXX[link115]
- Итоги[link116]
Заключение[link117]
- PGP взломан?[link118]
- PGP содержит потайной ход?[link119]
- Какая версия PGP лучше?[link120]
- Как сделать PGP безопасней?[link121]
Библиография[link122]
Дальше[link4]
[link2] http://www.pgpru.com/proekt/poljzovateli?profile=wizzard
[link3] http://www.pgpru.com/proekt/poljzovateli?profile=sattva
[link4] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/predislovie
[link5] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/predislovie#p1
[link6] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/predislovie#p2
[link7] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/predislovie#p3
[link8] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/vstuplenie
[link9] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/vstuplenie/chtotakoepgp
[link10] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/vstuplenie/kakrabotaetpgp
[link11] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/vstuplenie/matematika
[link12] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/vstuplenie/dlinakljucha
[link13] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/vstuplenie/setjdoverija
[link14] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/vstuplenie/ujazvimosti
[link15] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/vstuplenie/ujazvimosti#p1
[link16] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/vstuplenie/ujazvimosti#p2
[link17] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/vstuplenie/ujazvimosti#p3
[link18] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/vstuplenie/ujazvimosti#p4
[link19] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/vstuplenie/ujazvimosti#p5
[link20] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/vstuplenie/ujazvimosti#p6
[link21] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/vstuplenie/ujazvimosti#p7
[link22] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija
[link23] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/predystorija
[link24] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/partizanschina
[link25] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/partizanschina#p1
[link26] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/partizanschina#p2
[link27] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/partizanschina#p3
[link28] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/partizanschina#p4
[link29] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/partizanschina#p5
[link30] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/partizanschina#p6
[link31] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/partizanschina#p7
[link32] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/partizanschina#p8
[link33] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/partizanschina#p9
[link34] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/normaljnajaprogramma
[link35] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/normaljnajaprogramma#p1
[link36] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/normaljnajaprogramma#p2
[link37] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/normaljnajaprogramma#p3
[link38] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/normaljnajaprogramma#p4
[link39] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/normaljnajaprogramma#p5
[link40] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/normaljnajaprogramma#p6
[link41] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/normaljnajaprogramma#p7
[link42] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/normaljnajaprogramma#p8
[link43] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/buduschee
[link44] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/buduschee#p1
[link45] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/buduschee#p2
[link46] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/istorija/obzorversijj
[link47] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp
[link48] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/vidyalgoritmov
[link49] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/simmetrichnyeblochnyeshifry
[link50] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/simmetrichnyeblochnyeshifry#p1
[link51] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/simmetrichnyeblochnyeshifry#p2
[link52] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/simmetrichnyeblochnyeshifry#p3
[link53] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/simmetrichnyeblochnyeshifry#p4
[link54] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/simmetrichnyeblochnyeshifry#p5
[link55] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/simmetrichnyeblochnyeshifry#p6
[link56] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/asimmetrichnyealgoritmy
[link57] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/asimmetrichnyealgoritmy#p1
[link58] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/asimmetrichnyealgoritmy#p2
[link59] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/asimmetrichnyealgoritmy#p3
[link60] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/asimmetrichnyealgoritmy#p4
[link61] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/heshfunkcii
[link62] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/heshfunkcii#p1
[link63] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/heshfunkcii#p2
[link64] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/heshfunkcii#p3
[link65] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/heshfunkcii#p4
[link66] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/algoritmyrazdelenijasekreta
[link67] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/algoritmypgp/algoritmyrazdelenijasekreta#p1
[link68] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp
[link69] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/osnovy
[link70] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/pakety
[link71] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/pakety#p1
[link72] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/paketykljuchejj
[link73] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/paketykljuchejj#p1
[link74] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/paketykljuchejj#p2
[link75] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/paketykljuchejj#p3
[link76] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/paketykljuchejj#p4
[link77] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/paketykljuchejj#p5
[link78] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/paketypodpisejj
[link79] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/paketypodpisejj#p1
[link80] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/paketypodpisejj#p2
[link81] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/paketypodpisejj#p3
[link82] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/prochiepakety
[link83] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/keyidotpechatok
[link84] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/keyidotpechatok#p1
[link85] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/s2k
[link86] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/s2k#p1
[link87] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/kombinirovanie
[link88] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/kombinirovanie#p1
[link89] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/kombinirovanie#p2
[link90] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/ascii
[link91] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/formatfajjlovpgp/konstanty
[link92] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/bagiataki
[link93] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/bagiataki/obagah
[link94] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/bagiataki/baglinux
[link95] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/bagiataki/kljuchevoeraspisanie
[link96] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/bagiataki/bagadk
[link97] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/bagiataki/cheshskajaataka
[link98] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/bagiataki/bagascii
[link99] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/bagiataki/mnozhestvennyeid
[link100] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda
[link101] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/kakmyissledovali
[link102] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/upravleniepamjatjju
[link103] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/parsingfajjlov
[link104] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/parsingfajjlov#p1
[link105] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/parsingfajjlov#p2
[link106] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/asimmetrichnoekripto
[link107] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/asimmetrichnoekripto#p1
[link108] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/asimmetrichnoekripto#p2
[link109] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/sluchajjnyechisla
[link110] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/sluchajjnyechisla#p1
[link111] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/sluchajjnyechisla#p2
[link112] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/sluchajjnyechisla#p3
[link113] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/sluchajjnyechisla#p4
[link114] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/sluchajjnyechisla#p5
[link115] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/kommentariixxx
[link116] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/analizishodnogokoda/itogi
[link117] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/zakljuchenie
[link118] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/zakljuchenie#p1
[link119] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/zakljuchenie#p2
[link120] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/zakljuchenie#p3
[link121] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/zakljuchenie#p4
[link122] http://www.pgpru.com/biblioteka/statji/analiznadezhnostipgp/bibliografija