Mechie mgbasa ozi

Ụbọchị ole na ole gara aga, Apple wepụtara narị otu narị iOS 7.0.6 nwelite, banyere ntọhapụ nke anyị gwara gị. O nwere ike iju ọtụtụ ndị anya na ewepụtara mmelite ahụ maka iOS 6 (ụdị 6.1.6) na Apple TV (ụdị 6.0.2). Nke a bụ nchekwa nchekwa, yabụ Apple enweghị ike imelite naanị akụkụ nke ngwaọrụ ya. Kedu ihe ọzọ, okwu a na-emetụta OS X. Dị ka ọnụ na-ekwuchitere Apple Trudy Muller si kwuo, a ga-ewepụta mmelite OS X ozugbo enwere ike.

Kedu ihe kpatara enwere nnukwu mkpọtụ gbasara mmelite a? Mmejọ dị na koodu sistemụ na-enye ohere ka agafee nkwenye nkesa na nnyefe echekwara na akwa mmekọrịta nke ụdị ntụaka ISO/OSI. Kpọmkwem, mmejọ ahụ bụ mmejuputa SSL ọjọọ na akụkụ ebe nkwenye asambodo sava na-ewere ọnọdụ. Tupu m abanye n'ime nkọwa ọzọ, ọ masịrị m ịkọwapụta echiche ndị bụ isi.

SSL (Secure Socket Layer) bụ ụkpụrụ ejiri maka nzikọrịta ozi echekwara. Ọ na-enweta nchekwa site na izo ya ezo na nyocha nke ndị otu na-ekwurịta okwu. Nyocha bụ nkwenye nke njirimara ewepụtara. Na ndụ n'ezie, dịka ọmụmaatụ, ị na-ekwu aha gị ( njirimara) wee gosi ID gị ka onye nke ọzọ wee nwee ike nyochaa ya (kwenye). A na-ekewa nyocha ka ọ bụrụ nkwenye, nke bụ naanị ihe atụ nwere kaadị njirimara mba, ma ọ bụ njirimara, mgbe onye a na-ekwu okwu nwere ike ikpebi njirimara gị n'ebughị ụzọ kpughee ya n'ihu ya.

Ugbu a, m ga-esi nwa oge gaa na asambodo nkesa. Na ndụ n'ezie, asambodo gị nwere ike ịbụ, ọmụmaatụ, kaadị ID. Ihe niile dabere na asymmetric cryptography, ebe isiokwu ọ bụla nwere igodo abụọ - nzuzo na ọha. Ihe niile mara mma dabere na eziokwu ahụ bụ na enwere ike iji igodo ọha ezoro ezo ozi ahụ wee jiri igodo nzuzo mebie ya. Nke a pụtara na ọ bụ naanị onye nwe igodo nzuzo nwere ike mebie ozi ahụ. N'otu oge ahụ, ọ dịghị mkpa ichegbu onwe gị maka ịnyefe igodo nzuzo na ndị ọzọ na-ekwurịta okwu. Asambodo ahụ bụ igodo ọha nke isiokwu a na-agbakwunye na ozi ya wee binye aka n'aka ikike asambodo. Na Czech Republic, otu n'ime ndị nwe asambodo bụ, dịka ọmụmaatụ, Česká Pošta. Ekele maka akwụkwọ ahụ, iPhone nwere ike ịchọpụta na ọ na-ekwurịta okwu na ihe nkesa nyere.

SSL na-eji ezoro ezo asymmetric mgbe ị na-emepụta njikọ, nke a na-akpọ SSL aka. N'oge a, iPhone gị na-achọpụta na ọ na-ekwurịta okwu na ihe nkesa nyere, ma n'otu oge ahụ, site n'enyemaka nke asymmetric izo ya ezo, a symmetric igodo guzosie ike, nke a ga-eji maka niile na-esote nkwurịta okwu. Ihe nzuzo Symmetric na-agba ọsọ ọsọ. Dịka edewororịrị, njehie emelarị n'oge nkwenye nkesa. Ka anyị leba anya na koodu na-akpata adịghị ike nke sistemu a.

static OSStatus
SSLVerifySignedServerKeyExchange(SSLContext *ctx, bool isRsa,
SSLBuffer signedParams, uint8_t *signature, UInt16 signatureLen)

{
   OSStatus err;
   …

   if ((err = SSLHashSHA1.update(&hashCtx, &serverRandom)) != 0)
       goto fail;
   if ((err = SSLHashSHA1.update(&hashCtx, &signedParams)) != 0)
       goto fail;
       goto fail;
   if ((err = SSLHashSHA1.final(&hashCtx, &hashOut)) != 0)
       goto fail;
   …

fail:
   SSLFreeBuffer(&signedHashes);
   SSLFreeBuffer(&hashCtx);
   return err;
}

N'ọnọdụ nke abụọ if ị nwere ike ịhụ iwu abụọ n'okpuru ga-ada;. Ma nke ahụ bụ ihe ịsụ ngọngọ. Nke a koodu na-eme ka nke abụọ iwu na-egbu na ogbo mgbe akwụkwọ kwesịrị nkwenye ga-ada;. Nke a na-ebute ọnọdụ nke atọ ka ahapụ ya if na a gaghị enwe nkwenye nke ihe nkesa ma ọlị.

Ihe pụtara bụ na onye ọ bụla maara nke a adịghị ike nwere ike inye gị iPhone akwụkwọ adịgboroja. Ị ma ọ bụ iPhone gị, ị ga-eche na ị na-ekwurịta okwu ezoro ezo, ebe enwere onye na-awakpo n'etiti gị na ihe nkesa ahụ. A na-akpọ ọgụ dị otú ahụ nwoke-na-n'etiti agha, nke na-asụgharị n'ụzọ siri ike na Czech dị ka nwoke-na-n'etiti agha ma ọ bụ nwoke n'etiti. Enwere ike igbu mwakpo site na iji ntụpọ a na OS X na iOS ma ọ bụrụ na onye mwakpo ahụ na onye ahụ metụtara nọ n'otu netwọkụ ahụ. Ya mere, ọ ka mma izere netwọk Wi-Fi ọha ma ọ bụrụ na imelitebeghị iOS gị. Ndị ọrụ Mac ka kwesịrị ịkpachara anya maka netwọkụ ha jikọtara yana saịtị ha gara na netwọkụ ndị ahụ.

Ọ bụ ihe karịrị nkwenye ka njehie dị otú ahụ na-egbu egbu nwere ike isi mee ka ọ bụrụ nsụgharị ikpeazụ nke OS X na iOS. Ọ nwere ike ịbụ nnwale na-ekwekọghị ekwekọ nke koodu edeghị nke ọma. Nke a ga-apụta na ma onye mmemme na ndị nyocha ga-emehie ihe. Nke a nwere ike iyi ihe agaghị ekwe omume maka Apple, yabụ ntule na-apụta na ahụhụ a bụ n'ezie ọnụ ụzọ azụ, nke a na-akpọ. ụzọ azụ. Ọ bụghị n'efu ka ha na-ekwu na azụ azụ kacha mma dị ka mmejọ aghụghọ. Otú ọ dị, ndị a bụ nanị echiche ndị a na-akwadoghị, n'ihi ya, anyị ga-eche na mmadụ mehiere nanị.

Ọ bụrụ na ịmaghị n'aka ma sistemụ gị ma ọ bụ ihe nchọgharị gị enweghị ahụhụ a, gaa na ibe ahụ gotofail.com. Dị ka ị pụrụ ịhụ na oyiyi n'okpuru, Safari 7.0.1 na OS X Mavericks 10.9.1 nwere ahụhụ, mgbe Safari na iOS 7.0.6 ihe niile dị mma.

Akụrụngwa: iMore, Reuters
.