n PSMT(Perfectly Secure Message Transmission) PSMT

Size: px

Start display at page:

Download "n PSMT(Perfectly Secure Message Transmission) PSMT"

ひでたつちゃわんや
5 years ago
Views:

1 23 n jail

2 n PSMT(Perfectly Secure Message Transmission) PSMT PSMT ASMT(Almost Secure Message Transmission) ASMT ASMT Basic Basic FreeBSD FreeBSD jail Vimage ( )

3 FreeBSD Vimage

4 3 1.1 n jail n round 2-round jail vimage jail vimage vimage vimage

5 4 2.1 PSMT

6 n n n n n FreeBSD OS jail Vimage

7 1.1 6 jail jail Vimage n 1.1 n 1.2 jail

8 2 n 7 2 n n n n n n n PSMT ASMT 2.1 n

9 2.1 PSMT(Perfectly Secure Message Transmission) PSMT(Perfectly Secure Message Transmission) PSMT n 2 PSMT 1. ( ) ( ) 1 1-round r r-round ( 4.2) n t PSMT 1-round n 3t round n 2t round 2-round

10 2.1 PSMT(Perfectly Secure Message Transmission) PSMT PSMT 1993 Dolev [13] n t PSMT 1-round n 3t round n 2t + 1 O(n) O(2 n ) 2-round 1996 Sayeed [24] O(n 3 ) 2006 Agarwal [25] O(n) 2008 Kurosawa [26] O(n) O(n 3 ) 2-round 1-round O(n) Dolve n 3t + 1 PSMT n 3t+1 1-round n 2t+1 2-round 1-round n 2t + 1 ASMT PSMT 2-round Dolev n 2t O(2 n ) Sayeed 1996 O(n 3 ) O(n) Agarwal 2006 Kurosawa 2008 O(n) O(n 3 ) 1-round n 3t + 1 O(n) 2.1 PSMT

11 2.2 ASMT(Almost Secure Message Transmission) ASMT(Almost Secure Message Transmission) ASMT ASMT 1. ( ) 2. 1 δ ( ) 3. δ failure ( ) 4. t ( ) PSMT 2 1 δ ASMT ASMT 2004 Srinathan [14] 2007 Kurosawa [15] n = 2t + 1 X i ( S 1)/δ + 1 (2.1) X i channel(i) S δ

12 2.2 ASMT(Almost Secure Message Transmission) 11 Kurosawa ϵ X i = S 1 δ + 1 > S 1 ϵ + 1 ϵ = n t + 1 n t t + 1 δ Basic Kurosawa Basic Basic Basic H Second Preimage Attack t Second Preimage Attack ϵ ϵ [ H SecondP reimageattack ] t (2.2) H h 2 h H ( ) H Second Preimage Attack 1/2 h (4.2) ϵ t 2 h (2.3)

13 2.2 ASMT(Almost Secure Message Transmission) 12 s q S S = 2 q (2.4) ( (4.1)) (4.3) (4.4) X i S 1 ϵ + 1 2q 1 t/2 + 1 = 2h (2 q 1) + 1 (2.5) h t Basic X i (4.5) log 2 log 2 X i log 2 { 2 h (2 q 1) t + 1 } { 2 h (2 q } 1) log 2 t = log 2 2 h + log 2 (2 q 1) log 2 t h + q log 2 t (2.6) X i ch-i f(i) H(f(1)) H(f(n)) s q f(i) q h X i q + hn (5.5) q + hn = log 2 X i h + q log 2 t hn h Basic Basic [6]

14 3 FreeBSD 13 3 FreeBSD 3.1 FreeBSD FreeBSD UNIX OS FreeBSD 4.3BSD Net/2 OS 4.4BSD-Lite FreeBSD FreeBSD BSD FreeBSD 9.0-RELEASE FreeBSD9.0-RELEASE [1] [2] [3]

15 3.2 jail jail jail FreeBSD jail OS jail FreeBSD jail jail jail 1. : jail FreeBSD jail jail 2. jail jail 3. : jail [4] 3.1 jail FreeBSD FreeBSD 3.1 jail

16 3.3 Vimage Vimage Vimage FreeBSD Vimage FreeBSD8.0-RELEASE FreeBSD FreeBSD IP 1 FreeBSD FreeBSD [5] 3.2 vimage

17 ( )

18 ( ) IP TCP/IP IP IP IP IP IP IP 1. 2.

19 TCP/IP TCP/IP (strict source routing) (loose source routing)

21 IP v e r s hdr l e n TOS t o t a l l e n g t h / fragment l e n g t h i d number R DF MF fragment o f f s e t t t l p r o t o c o l header checksum s r c IP dst IP o p t i o n s f i e l d ( var. l e n g t h max. 40b 0 padding to 4b mult. ) + DATA ( z e r o padding to 4 byte m u l t i p l e ) + + IP Source D e s t i n a t i o n Port Port Length Checksum data + + UDP IP UDP 6.2 [6]

22 FreeBSD n FreeBSD jail Vimage n jail Vimage jail FreeBSD jail jail Vimage jail 5.1 jail

23 5.1 FreeBSD vimage 5.1 jail Vimage 5.2 jail Vimage n FreeBSD9.0-RELEASE Vimage FreeBSD jail Vimage 5.3 usr/src/sys/amd64/conf/generic 5.4 GENERIC, make KERNCONF=GENERIC buildkernel make KERNCONF=GENERIC installkernel Vimage [5]

24 5.1 FreeBSD vimage vimage 2

25 5.1 FreeBSD 24 jail /usr/src mkdir /usr/local/jails make buildworld make installworld DESTDIR=/usr/local/jails/test1 make distribution DESTDIR=/usr/local/jails/test1 make installworld DESTDIR=/usr/local/jails/test2 make distribution DESTDIR=/usr/local/jails/test2 make installworld DESTDIR=/usr/local/jails/test3 make distribution DESTDIR=/usr/local/jails/test3 make installworld DESTDIR=/usr/local/jails/test4 make distribution DESTDIR=/usr/local/jails/test4 [12] test1 4 jail jail test #!/bin/bash sysctl -w security.jail.socket unixiproute only=0 sysctl -w security.jail.allow raw sockets=1 for i in ; do jail -c vnet host.hostname=test$i name=vm$i path=/usr/jails/test$i persist mount -t devfs devfs /usr/local/jails/test$i/dev mount -t procfs proc /usr/local/jails/test$i/proc jexec test$i sysctl -w net.inet.ip.forwarding=1 jexec test$i ifconfig lo /24 up jexec test$i /etc/rc.d/sshd onestart jexec test$i routed -s -m done [5] chmod +x jail

26 5.1 FreeBSD 25 jail ifconfig epair create ifconfig epair0a vnet test1 ifconfig epair0b vnet test2 jexec test1 ifconfig epair0a /24 up jecec test2 ifconfig epair0b /24 up ifconfig epair create ifconfig epair1a vnet test1 ifconfig epair1b vnet test3 jexec test1 ifconfig epair1a /24 up jecec test3 ifconfig epair1b /24 up ifconfig epair create ifconfig epair2a vnet test2 ifconfig epair2b vnet test4 jexec test2 ifconfig epair2a /24 up jecec test4 ifconfig epair2b /24 up ifconfig epair create ifconfig epair3a vnet test3 ifconfig epair3b vnet test4 jexec test3 ifconfig epair3a /24 up jecec test4 ifconfig epair3b /24 up # jail [5]

5.1 FreeBSD 26 jexec test1 ping -c 3 10.

27 5.1 FreeBSD 26 jexec test1 ping -c # test1-test2 jexec test1 ping -c # test1-test3 jexec test2 ping -c # test2-test4 5.5

28 5.1 FreeBSD jail 5.5 test1,test2,test3,test4 4

29 jail jail n jail 1000

31 30 [1] The FreeBSD Project [2] FreeBSD [3] FreeBBSD wikipedia [4] FreeBSD jail wikipedia jail [5] hasegaw blog [6] n [7] FreeBSD jail [8] FreeBSD [9] massi s easy laboratory easy laboratory/2009/10/jail.h [10] jail manual [11] wikipedia [12] jail vimage ishimoto/study/ /jail vimage.pdf

32 31 [13] DANNY DOLEV CYNTHIA DWORK ORLI WAARTS MOTI YUNG Perfectly Secure Message Transmission Journal of the Association for Computing Machinery Vol.40,No.1 pp.17-47(1993) [14] K. Srinathan Arvind Narayanan C. Pandu Rangan Optimal Perfectly Secure Message Transmission CRYPTO 2004 LNCS 3152 pp (2004) [15] Kaoru KUROSAWA Kazuhiro SUZUKI Members Almost Secure (1- Round,n-Channel) Message Transmission Scheme IEICE TRANS. FUNDAMENTALS VOL.E92-A,NO.1(2009) [16] (2004) [17] (1997) [18] takeuchi/tbasic/background/- Cong.html [19] (2007) [20] (2004) [21] (2004) [22] Douglas R. Stinson (1996) [23] DOUGLAS R. STINSON CRYPTOGRAPHY THEORY AND PRACTICE THIRD EDITION Chapman & Hall/CRC(2006) [24] HASAN MD. SAYEED HOSAME ABU-AMARA Efficient Perfectly Secure Message Transmission in Synchronous Networks

33 32 INFORMATION AND COMPUTATION 126 pp.53-61(1996) ARTICLE NO.0033 [25] Saurabh Agarwal Ronald Cramer Robbert de Haan Asymptotically Optimal Two-Round Perfectly Secure Message Transmission CRYPTO 2006 LNCS 4117 pp (2006) [26] Kaoru Kurosawa Kazuhiro Suzuki Truly Efficient 2-Round Perfectly Secure Message Transmission Scheme Advances in Cryptology EUROCRYPT 2008 LNCS 4965 pp (2008) [27] as3crypto [28] W. UNIX 2 Vol.1 API: XTI 1999 [29]. [ ] TCP/IP Vol [30]. [ ] TCP/IP Vol [31] Linux 2010 [32] ichael J.Donahoo Kenneth L. Calvert TCO/IP C 2003

34 33 [33] TCP/IP [34]

35 34 jail

sato-FBSDW key

sato-FBSDW key 4 FreeBSD (18:30 / FreeBSD Project 2015/1/30 2015/01/30 (c) Hiroki Sato 1 / 45 2015/01/30 (c) Hiroki Sato 2 / 45 2015/01/30 (c) Hiroki Sato 3 / 45 2015/01/30 (c) Hiroki Sato 4 / 45 2015/01/30