Amakopi-Paste Bug yamennye PSpice AES-256 Encryption | Mewayz Blog Skip to main content
Hacker News

Amakopi-Paste Bug yamennye PSpice AES-256 Encryption

Ibitekerezo

6 min read Via jtsylve.blog

Mewayz Team

Editorial Team

Hacker News

Amakopi-Paste Bug yamennye PSpice AES-256 Encryption

Mwisi yisi yiterambere rya software, intege nke zikomeye akenshi ntizituruka ku kunanirwa kwa algorithmic, ahubwo bituruka kubintu byoroshye, kugenzura abantu. Kwibutsa neza uku kuri kwamenyekanye binyuze ku nenge ikomeye yavumbuwe muri PSpice, porogaramu isanzwe y’inganda ziva muri Cadence. Agakoko, kari mu ishyirwa mu bikorwa rya algorithm ya AES-256 ikomeye, yari ifite inkomoko ya mundane idafite intwaro: ikosa rya kopi-paste. Ibi byabaye bishimangira imbogamizi ku isi yose mu buhanga bwa software kandi ikagaragaza impamvu uburyo bwa modular, bugenzurwa nka Mewayz bigenda biba ngombwa mu kubaka sisitemu y’ubucuruzi idahwitse. Amateka yaya makosa ni inkuru yo kuburira kubyerekeye ibiciro byihishe byo kwigana kode hamwe no gucika intege kwa software ya monolithic.

Anatomy ya Cryptographic Catastrophe

Ikosa ryabonetse muri `cryptlib` cryptography Library yakoreshejwe na PSpice kubiranga ibanga. Muri rusange, Advanced Encryption Standard (AES) ikora mubice byinshi byo gutunganya. Kuri AES-256, hari 14 bazenguruka. Buri ruziga rusaba "urufunguzo ruzengurutse" rwihariye, rukomoka ku rufunguzo rwambere rwibanga binyuze mu nzira yitwa kwagura urufunguzo. Igikorwa cyuwitezimbere kwari ukwandika loop kugirango ukoreshe ibi byiciro 14. Ariko, aho kugirango habeho isuku, itera, kode yubatswe hamwe nibice bibiri bisa: kimwe kumirongo icyenda yambere naho ikindi cya gatanu cyanyuma. Mugihe cyo gukoporora-na-paste, umurongo wingenzi wa code ukora intambwe yo gusimbuza wasibye kubwimpanuka kuva kumurongo wa kabiri. Ibi bivuze ko kubice bitanu byanyuma byo gushishoza, igice cyingenzi cya algorithm ya AES cyasibwe gusa, bikabije bigabanya ibanga.

Impamvu Codebite ya Monolithic Yororoka Ibibabi

Iri kosa ryakomeje kutamenyekana imyaka myinshi kuko ryashyinguwe muri codebase nini, monolithic. Mubidukikije nkibi, module imwe nka `cryptlib` irabohowe cyane mumyenda ya porogaramu, bituma igeragezwa ryihariye no kugenzura bigoye. Ubwenge bwibanga ryibanga ntabwo bwari buke, bworoshye kugeragezwa ahubwo ni agace ka puzzle nini cyane. Uku kubura modularite nikintu cyibanze gishobora guteza software software. Irema ahantu hatabona aho ikosa ryoroshye mumikorere imwe rishobora guhungabanya umutekano wa sisitemu yose, kimwe nikintu kimwe gifite inenge gishobora guhagarika umurongo utoroshye. Aha niho filozofiya iri inyuma ya ubucuruzi bwubucuruzi bwa OS nka Mewayz butanga ubundi buryo bukomeye. Mugushushanya sisitemu ifite modules zidasanzwe, zishobora gusimburwa, ubucuruzi bushobora gutandukanya imikorere, bigatuma ibice byihariye byoroha kugenzura, kugerageza, no kuvugurura nta mpanuka zo gusenyuka.

Amasomo yo Gutezimbere Porogaramu Zigezweho

Ikosa rya PSpice ryigisha amasomo menshi yingirakamaro arenze kure software yigana:

Ready to put this into practice?

Join 6,208+ businesses using Mewayz. Free forever plan — no credit card required.

Start Free Trial →

Ready to take action?

Start your free Mewayz trial today

All-in-one business platform. No credit card required.

Start Free →

14-day free trial · No credit card · Cancel anytime