Ko te tātaritanga huna te kaupapa o te tātari i ngā raraunga kua whakamunahia (ngā tuhinga huna), ngā pūnaha huna, ngā kawa huna rānei hei kimi i ō rātou ngoikoretanga, hei whakahoki mai i ngā kī ngaro, i ngā tuhinga mārama rānei, hei whakakore rānei i ngā parenga muna, i ngā parenga pono rānei. (E whakamārama ana te NIST i te tātaritanga huna hei "ngā mahi e mahia ana hei whakakore i te parenga huna me te kore he mōhiotanga tuatahi ki te kī," NIST CSRC.)
Arā, he aha te tātaritanga huna? Ko te tukanga hangarau tēnei e whakamātautau ai ngā kaiwhakaeke, ngā kaihanga haumarutanga rānei i te kaha o tētahi pūnaha tātuhi mā te rapu i ngā hapa, ngā whirihoranga hē, ngā ngoikoretanga rānei o te pūnaha. Mena ko te tātuhi he mea mō te tiaki raraunga, ko te tātaritanga huna he mea mō te wawahi i aua parepare. Ina pātai koe he aha te whakaeke tātaritanga huna, kei te kōrero koe mō ngā tikanga motuhake e whakamahia ana e ngā kaiwhakaeke hei whakakore i te whakamunatanga. Ehara ēnei i te mahi ariā noa iho.cises; he ara whakaeke tūturu ēnei e tika ana kia whakaarohia e ngā tīma DevSecOps i roto i ngā tauira mōrearea, ngā aromatawai ngoikoretanga, me ngā mahere urupare aituā. Ka whakamāramahia e tēnei papakupu ngā momo matua o ngā whakaeke tātaritanga huna, ō rātou pānga mahi, me te hononga tika o te tātaritanga huna ki te whakahaere mōrearea i roto i te haumarutanga tukutuku.
#
He aha te Hiranga o te Tātaritanga Kuputuhi mō DevSecOps me AppSes #
He wāhanga nui te tātaritanga kupu huna o te hangarau haumarutanga o ēnei rā. Ehara i te mea he mea mātauranga anake: me mārama ngā tīma DevSecOps ki te korenga o te whakamunatanga i raro i ngā āhuatanga whakaeke o te ao tūturu. Mā te mōhio ki te whakaeke tātaritanga kupu huna ka āwhina i ngā tīma hangarau ki te whakamana i tā rātou whakamahinga o ngā taputapu whakamunatanga. Ka whakarite kia tūpato te hoahoa pūnaha ki ngā tikanga hoariri o te ao tūturu, inā koa ka whakauruhia te whakamunatanga ki roto i ngā API, ngā tohu, ngā whakawhitiwhitinga haumaru rānei.
Mai i te tirohanga whakahaere mōrearea i roto i te tirohanga haumarutanga ipurangi, ka whakamōhio te tātaritanga whakamunatanga me pēhea te whakarōpū i ngā tūmomo riri whakamunatanga, me pēhea te whakamārama i ngā kōwhiringa raupaparorohiko, me te wā me huri ngā kī, ngā whare pukapuka papaki rānei.
Ka taea e ngā putanga hou o te tātaritanga huna te whakarerekē tere i te āhua o te riri. Ka taea e ngā momo whakaeke tātaritanga huna hou te whakaraerae ohorere i ngā rauropi "haumaru" i mua. Ina tupu tēnā, me tere te urupare a ngā tīma, i raro i te pēhanga, me ngā huringa hoahoa, ngā whakahoutanga matua, me ngā rautaki huna kua whakahoutia.
At Xygeni, Ko tā mātou arotahi ki te tiaki i te mekameka tuku pūmanawa ko te aroturuki i ngā mōrearea whakamuna me te tautoko i ngā tīma ki te tautuhi i ngā mata whakaeke whakamuna pea i mua i te pānga ki te whakaputa. Te whakauru i te mōhiotanga whakamuna ki roto CI/CD Mā ngā rerengamahi me te whakatauira i ngā tūmomo mōrearea ka āwhina i ngā tīma kia noho matatau, kia pakari hoki.
Koia te take me whai wāhi te tātaritanga whakamuna ki te huringa ora o te haumarutanga, kaua e waiho hei whakaaro noa iho. Ki te hiahia koe kia tiakina ō pūnaha e te whakamuna, me mārama koe ki te āhua o te whakaekenga.
Ngā Ariā Matua (Ngā Kupu Whakamārama) #
Kaitātari Kuputuhi #
Ko te kaitātari kupu huna he tangata e mahi ana i te tātari kupu huna, i ngā kaiwhakaeke, i ngā kairangahau, i ngā tīma haumarutanga ā-roto rānei. Ka whakamahia e rātou ngā tikanga hangarau hei kimi me te whakamahi i ngā ngoikoretanga o te hoahoa, te whakatinanatanga rānei o ngā pūnaha kupu huna.
Kuputuhi Tūmataiti #
- Kuputuhi Māmā: Ngā raraunga mata, kāore i whakamunatia.
- Kuputuhi Whakamuna: Ko te hua o te whakamuna i te tuhinga māmā mā te whakamahi i tētahi pūnaha whakamuna me tētahi kī.
- Kī: Ko te uara ngaro e whakamahia ana hei raka me te wetewete i te tuhinga huna. Ki te kore te kī, kāore e taea te wetewete i te raraunga mā te rorohiko.
Pūnaha Matatini / Arorau Matatini #
Kei roto i te pūnaha huna ngā mea katoa e pā ana ki te whakamunatanga: te raupaparorohiko, te hanga o ngā kī, te whakahaere, me te whakamahinga o te whakamunatanga me te wetewete. Kāore te tātaritanga huna e aro noa ki te pāngarau; engari e aro ana ki te whakamahinga o te ao tūturu, koinei te wāhi e puta ai ngā hapa.
Pakaru / Whakaeke / Pakaru Wāhanga #
Whakaekenga tātaritanga huna: He tikanga motuhake e whakamahia ana hei whakaiti, hei karo rānei i te whakamunatanga. Ina pātai tātou he aha te whakaeke tātaritanga huna, koinei te mea e kōrerohia ana e tātou: te momo whakaeke tuturu.
Pakarutanga katoa: Ka whakahokia mai e te kaiwhakaeke te kī, ka taea rānei e ia te wetewete i ngā karere me te kore e hiahiatia.
Wehenga wāhanga: Ka whiwhi te kaiwhakaeke i ētahi mōhiohio whai hua (hei tauira, ētahi wahi o te tuhinga māmā, ngā tauira karere).
Te Whakarōpūtanga o ngā Momo Whakaekenga Tātaritanga Kuputuhi #
Hei mārama pūnaha ki te mahi a te hoariri, ka whakarōpūtia ngā whakaekenga tātaritanga huna e te nui me te āhua o ngā mōhiohio e whakahaerehia ana, e mōhiotia ana rānei e te kaiwhakaeke. Kei raro nei he whakarōpūtanga kua whakatikatikaina o ngā momo whakaeke tātaritanga huna:
| Tauira Whakaeke | Whakaahuatanga | Te Whakamahinga Noa / Te Wero |
|---|---|---|
| Whakaeke Kuputuhi-Anake (COA) | Ko ngā tuhinga huna anake tā te kaiwhakaeke, kāore he tuhinga mārama, he kupu whakamuna rānei. | Ko tētahi o ngā tauira kaiwhakaeke ngoikore rawa atu; he maha ngā wā ka hinga ngā tohu huna tawhito. |
| Whakaeke Kuputuhi-Mōhiotia (KPA) | E mōhio ana te kaiwhakaeke ki ētahi takirua tuhinga māori-tuhituhi huna, ā, e whakamahia ana e ia hei kimi i te kī. | He maha ngā turuturu o te ao tūturu (hei tauira, ngā pane o ngā kawa) e whakaatu ana i ngā tuhinga māmā e mōhiotia ana. |
| Whakaeke Kuputuhi-Marama kua Kōwhiria (CPA) | Ka taea e te kaiwhakaeke te whiriwhiri i ngā tuhinga māmā me te tirotiro i ngā putanga o ā rātou tuhinga huna. | He mea noa i roto i ngā API whakamunatanga, ngā oracle, ngā pūnaha rānei e whakaatu ana i ngā pito mutunga "whakamunatia tēnei". |
| Whakaeke Kuputuhi-Maamaa Kōwhiria Urutau | He momo rerekē o te CPA e kōwhiri ai te kaiwhakaeke i ngā tuhinga mārama e whai ake nei i runga i ngā hua o mua. | He kaha ake i te CPA taketake i roto i te mahi. |
| Whakaeke Kuputuhi-Kuputuhi-Kua Kōwhiria (CCA) | Ka taea e te kaiwhakaeke te uiui i ngā kupu whakamunatanga: te kōwhiri i ngā tuhinga huna me te tiro i ā rātou tuhinga mārama kua whakamunatia (haunga ētahi uiui kua tiakina). | Ko te tauira mahi tino kaha; he maha ngā kaupapa hou e whai ana kia ātete ki te CCA. |
| Whakaekenga Kī-E Pā Ana | Ka kite te kaiwhakaeke i ngā tuhinga huna i raro i ngā kī e pā ana ki te kī ngaro (hei tauira, he rerekētanga kotahi te moka). | Ka whakamahi kino i ngā wātaka kī ngoikore; he morearea i roto i ngā tuhinga huna ōrite. |
| Ngā Whakaekenga Hongere-Taha / Whakatinanatanga | Engari i te whakaeke i te raupaparorohiko, ka ine te kaiwhakaeke i ngā pānga ā-tinana (te wā, te mana, ngā turuturu hikohiko) hei whakatau i ngā moka matua. | Ka pā ina turuturu ngā mōhiohio i roto i te whakatinanatanga; he maha ngā wā kei waho o te tātaritanga whakamunatanga taupū parakore. |
| Ngā Whakaeke Ranu / Ngā Tikanga Whakakotahi | He huinga o ngā tikanga rerekētanga, ngā tikanga rārangi, ngā tikanga taupū, me ētahi atu tikanga matatau. Hei tauira: ngā whakaekenga rerekētanga-rārangi. | Ka whakamahia ina kore e angitu tētahi tikanga anake; ka whakakotahihia e ngā kaitātari matapōkere matatau ngā tikanga. |
| Whakaeke Kaha-Nui | Rapua rawatia te wāhi kī kia kitea rā anō te kī tika (te kī rānei e tika ana). | Ehara i te mea he "mōhio" i ngā wā katoa, engari he maha ngā wā ka noho hei ara whakamuri mēnā kāore he ara poto. |
Ngā Tauira o ngā Whakaeke Motuhake (i roto i ēnei akomanga) #
Tātaritanga whakamunatanga rārangi (i roto i ngā tauira tuhinga-mārama e mōhiotia ana) e whakamahi ana i ngā whakatau tata rārangi o ngā mahi whakamuna hei whakaputa i ngā moka matua.
Tātaritanga whakamuna rerekētanga Ka aroturuki i ngā rerekētanga tāuru mā roto i ngā panonitanga porowhita hei kimi i ngā tūponotanga e arahi ana ki te tangohanga matua.
Ngā whakaekenga rerekē-rārangi whakakotahi i ngā tikanga e rua hei rautaki ranu.
Tātaritanga whakamunatanga hurihuri he whai hua ki ngā hoahoa ARX (Add-Rotate-XOR), e tiaki ana i ngā hononga i raro i ngā hurihanga.
Ngā whakaeke wā ine i ngā rerekētanga o te wā rorohiko hei turuturu i ngā moka.
Tātaritanga mana ka hopu i ngā tohu o te whakapaunga hiko hei whakatau i te āhua o roto, i te kī rānei.
He momo whakaeke whakamunatanga tūturu ēnei katoa, ā, e whakaatu ana i te whanonga a ngā hoariri tūturu.
Te Tātaritanga Kuputuhi me te Whakahaere Mōrearea i roto i te Haumarutanga Ipurangi #
Hei whakahaere tika i te mōrearea i roto i te haumarutanga ipurangi, me mārama koe ki te korenga o ngā pūnaha whakamuna. Mā te tātaritanga whakamuna koe e āwhina. Ka nekehia te pātai mai i te "He aha te raupaparorohiko e whakamahia ana e tātou?" ki te "Ka taea e tēnei whakaritenga te ora i ngā whakaeke e mōhiotia ana?"
Me pēhea te whakauru i te tātaritanga huna ki roto i te whakahaere mōrearea haumarutanga: #
- Te Whakarāpopototanga o te Tūraru: Maherehia ko tēhea ngā momo whakaekenga tātaritanga huna Tērā pea ka pāngia tō pūnaha e ngā raruraru. Kei te kitea te tuhinga mārama i ētahi wā? Kei te whakahaerehia e ngā kaiwhakamahi ngā tāurunga? Kei te kitea ētahi kupu whakamunatanga mā te API?
- Aromatawai Kaha Tuhituhi: Mō ia rauropi, aromatawaihia mēnā e mōhiotia ana tātaritanga huna kua tino whakaitihia tōna kaha whai hua. Kaua e whakawhirinaki noa ki te roa o te kī, engari kia mārama ki te awhe haumarutanga o te ao tūturu.
- Te Whakamahere Hōhonu mō te Parepare: Me kī ka whakamātau ngā kaiwhakaeke i ngā tikanga taha-awa. Whakamahia te waehere wā-pūmau. Hunaia ngā rauemi kī. Tāpirihia he paparanga ki tua atu i te whakamunatanga anake.
- Ngā Kaupapahere Matua mō te Huringa Ora me te Hurihanga: Kia kore ngā kaupapa tango me te hurihanga kī e whakatuwhera i te kuaha ki ngā whakaeke kī e pā ana. Whakamahia ngā mahi tango kī tika (KDF).
- Aroturuki me te Arotake: Whāia te rangahau tātaritanga huna. Kia tūpato ki ngā mea taketake pakaru. Whakautu i mua i te mahi a ngā kaiwhakaeke.
- Nga Mahere Whakautu mai i nga aitua: Kia whai rautaki mō ngā aituā whakamuna. Mēnā ka ngoikore te pūnaha e whakamahia ana e koe i tētahi whakaekenga hou, kia rite ki te whakahou i te kī, te whakapai, te whakawhiti rānei.
- Ngā tuhinga me te whakamana: Tuhia te āhua o tāu whakahaere i ngā tūmomo whakaekenga tātaritanga huna. Ka hiahia ngā kaitātari kaute me ngā tīma ture ki te taunakitanga e whakaatu ana i te mana o te cryptocisi whakamāoritia ngā iona.
Ina oti tika, ka hurihia te whakamunatanga mai i te pouaka pango hei wāhanga haumaru, kua whakamatautauria o tō hoahoanga. Mā te tātaritanga matihiko ka taea e koe te whakaatu kei te tū tonu tō matihiko.
Ngā Mahi Pai me ngā Parenga ki te Tātaritanga Kuputuhi #
Mā te mārama ki te tikanga o te tātaritanga huna me ngā momo whakaeke tātaritanga huna ka āwhina i a koe ki te hanga pūnaha pakari ake. Ngā Taunakitanga:
- Whakamahia ngā rauropi kua whakamātauhia. Puritia te AES, te ECC, me ētahi atu rauropi kua roa e tu ana i roto i te tātaritanga whakamuna tūmatanui. Āta karohia ngā whakamuna ngaro, ngā whakamuna motuhake rānei.
- Kōwhiria ngā rahi tika o ngā kī. Kaua e whakawhirinaki ki ngā roanga kī tawhito. Mō te momotuhi matihiko ōrite, ngā kī 256-moka. Mō te RSA, kia 3072 moka te iti rawa. Mō te ECC, P-384, teitei ake rānei.
- Waehere me te ātete taha-hongere. Whakamahia ngā mahi wā-pūmau. Kaua e peka atu ki ngā raraunga ngaro. Hongere-taha tātaritanga huna ka pakaru te waehere, ehara i te pāngarau.
- Kaua e whakaaturia ngā API whakamunatanga mata. Tākaihia te whakamunatanga ki ngā aratau manatoko pēnei i te AES-GCM. Kaua e hoatu he whai wāhitanga ki ngā kaiwhakamahi ki te whakamahi i te ECB, ki te peke rānei i ngā MAC.
- Āta karohia ngā whakaaturanga e pā ana ki ngā kī. Whakamahia ngā KDF kaha, ā, tāpirihia ngā kupu matua katoa. Kaua e huri noa i ngā wāhanga, e huna rānei i ngā mea ngaro kua tohaina me te kore he horopaki.
- Whakakāhia tō tuhinga whakamuna. Tāpirihia te tātaritanga huna ki tō tukanga arotake haumarutanga ā-roto. Ki te kore koe e ngana ki te wawahi, ka mahia e tētahi atu ā tōna wā.
- Te hoahoa mō te agilit crypto. Whakamāmāhia te whakapai ake i ngā rauropi, te whakawhiti kī rānei, me te kore e roa te wā e kore ai e mahi.
Mā te whai i ēnei tikanga ka āwhina i te whakarite kia kaua e whakamunatia noa ō pūnaha, engari kia haumaru hoki mai i ngā whakaeke tātaritanga huna o te ao tūturu, kia rite hoki mō ngā momo whakaeke tātaritanga huna a meake nei. Ka taea te hopu i ngā take i mua i te whakatinanatanga.
Ngā Whakaaro Whakamutunga mō te He aha te Cryptanalysis me te Hiranga o tēnā #
He mea nui te mārama ki te tikanga o te tātaritanga huna, te mōhio ki ngā momo whakaeke tātaritanga huna, me te mōhio ki te urupare ki ia āhuatanga whakaeke tātaritanga huna hei hanga pūnaha haumaru. Ahakoa kei te hoahoa koe i ngā API, kei te whakahaere i ngā whare pukapuka whakamunatanga, kei te ārahi rānei i ngā wā whakatauira riri, ehara te tātaritanga huna i te ariā papamuri noa iho; he pūkenga matua i roto i te Kete taputapu DevSecOps. Mā te whakauru i ēnei mātāpono ki roto i tō hoahoa haumarutanga me te whakahaere mōrearea i roto i te rautaki haumarutanga tukutuku, ka whakaitihia e koe te tūponotanga me te whakapakari i te pono o ō parepare whakamuna.
