{"id":111833,"date":"2023-11-29T15:10:14","date_gmt":"2023-11-29T13:10:15","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/bluffs-uyazvimosti-v-bluetooth-pozvolyayushhie-provesti-mitm-ataku"},"modified":"2023-11-29T15:10:14","modified_gmt":"2023-11-29T13:10:15","slug":"bluffs-uyazvimosti-v-bluetooth-pozvolyayushhie-provesti-mitm-ataku","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/bluffs-uyazvimosti-v-bluetooth-pozvolyayushhie-provesti-mitm-ataku","title":{"rendered":"BLUFFS \u2014 zranitelnosti v Bluetooth, umo\u017e\u0148uj\u00edc\u00ed prov\u00e9st MITM \u00fatok","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Daniele Antonioli, bezpe\u010dnostn\u00ed v\u00fdzkumn\u00edk Bluetooth, kter\u00fd d\u0159\u00edve vyvinul techniky \u00fatok\u016f BIAS, BLUR a KNOB, objevil dv\u011b nov\u00e9 zranitelnosti (CVE-2023-24023) v mechanismu p\u00e1rov\u00e1n\u00ed Bluetooth, kter\u00e9 se t\u00fdkaj\u00ed v\u0161ech implementac\u00ed Bluetooth podporuj\u00edc\u00edch re\u017eimy zabezpe\u010den\u00e9ho p\u00e1rov\u00e1n\u00ed \u201eSecure Connections\u201c a \u201eSecure Simple Pairing\u201c, odpov\u00eddaj\u00edc\u00ed specifikac\u00edm Bluetooth Core 4.2-5.4. Jako uk\u00e1zku praktick\u00e9ho uplatn\u011bn\u00ed nalezen\u00fdch zranitelnost\u00ed bylo vyvinuto 6 variant \u00fatok\u016f, kter\u00e9 umo\u017e\u0148uj\u00ed vniknout do spojen\u00ed mezi d\u0159\u00edve sp\u00e1rovan\u00fdmi za\u0159\u00edzen\u00edmi Bluetooth. K\u00f3d s implementac\u00ed metod \u00fatoku a n\u00e1stroj pro kontrolu p\u0159\u00edtomnosti zranitelnost\u00ed byl zve\u0159ejn\u011bn na GitHubu. <\/p>\n

The vulnerabilities were identified during the analysis of mechanisms described in the standard for achieving forward and future secrecy, which counteract the compromise of session keys in the event of a permanent key being identified (the compromise of one of the permanent keys should not lead to the decryption of previously intercepted or future sessions) and the reuse of session keys (the key from one session should not be applicable to another session). The identified vulnerabilities allow bypassing the stated protection and reusing an insecure session key across different sessions. These vulnerabilities arise from shortcomings in the underlying standard, are not specific to individual Bluetooth stacks, and manifest in chips from various manufacturers.

\"BLUFFS<\/center> <\/p>\n

The proposed attack methods implement different variants of spoofing classical (LSC, Legacy Secure Connections based on outdated cryptographic primitives) and secure (SC, Secure Connections based on ECDH and AES-CCM) Bluetooth connections between a system and a peripheral device, as well as MITM attack organization for connections in both LSC and SC modes. It is assumed that all Bluetooth implementations compliant with the standard are susceptible to various BLUFFS attack variants. The method's efficacy has been demonstrated on 18 devices from companies such as Intel, Broadcom, Apple, Google, Microsoft, CSR, Logitech, Infineon, Bose, Dell, and Xiaomi.

\"BLUFFS<\/center> <\/p>\n

Podstata zranitelnost\u00ed spo\u010d\u00edv\u00e1 v mo\u017enosti bez poru\u0161en\u00ed standardu n\u00e1siln\u011b vr\u00e1tit spojen\u00ed k pou\u017eit\u00ed star\u00e9ho re\u017eimu LSC a nespolehliv\u00e9ho kr\u00e1tk\u00e9ho session key (SK) t\u00edm, \u017ee se p\u0159i p\u00e1rov\u00e1n\u00ed spojen\u00ed ur\u010d\u00ed minim\u00e1ln\u00ed mo\u017en\u00e1 entropie a ignoruj\u00ed se odpov\u011bdi s autentifika\u010dn\u00edmi parametry (CR), co\u017e vede k vygenerov\u00e1n\u00ed session key na z\u00e1klad\u011b st\u00e1l\u00fdch vstupn\u00edch parametr\u016f (session key SK se po\u010d\u00edt\u00e1 jako KDF z trval\u00e9ho kl\u00ed\u010de (PK) a parametr\u016f dohodnut\u00fdch b\u011bhem sezen\u00ed). Nap\u0159\u00edklad \u00fato\u010dn\u00edk b\u011bhem MITM \u00fatoku m\u016f\u017ee v pr\u016fb\u011bhu p\u00e1rov\u00e1n\u00ed sezen\u00ed nahradit parametry 𝐴𝐶 a 𝑆𝐷 na nulov\u00e9 hodnoty, a nastavit entropii 𝑆𝐸 na hodnotu 1, co\u017e povede k vytvo\u0159en\u00ed session key 𝑆𝐾 s skute\u010dnou entropi\u00ed 1 byte (standardn\u00ed minim\u00e1ln\u00ed velikost entropie je 7 byte (56 bit\u016f), co\u017e z hlediska spolehlivosti odpov\u00edd\u00e1 brute force \u00fatok\u016fm na kl\u00ed\u010de DES). <\/p>\n

Pokud se \u00fato\u010dn\u00edkovi b\u011bhem vyjedn\u00e1v\u00e1n\u00ed p\u0159ipojen\u00ed poda\u0159\u00ed dos\u00e1hnout pou\u017eit\u00ed krat\u0161\u00edho kl\u00ed\u010de, m\u016f\u017ee d\u00e1le pomoc\u00ed hrub\u00e9 s\u00edly (brute force) ur\u010dit pevn\u00fd kl\u00ed\u010d (PK), kter\u00fd se pou\u017e\u00edv\u00e1 k \u0161ifrov\u00e1n\u00ed, a dos\u00e1hnout de\u0161ifrov\u00e1n\u00ed provozu mezi za\u0159\u00edzen\u00edmi. Vzhledem k tomu, \u017ee b\u011bhem MITM \u00fatoku lze iniciovat pou\u017eit\u00ed stejn\u00e9ho \u0161ifrovac\u00edho kl\u00ed\u010de, pokud bude tento kl\u00ed\u010d z\u00edsk\u00e1n, lze ho vyu\u017e\u00edt i k de\u0161ifrov\u00e1n\u00ed v\u0161ech minul\u00fdch a budouc\u00edch sezen\u00ed, kter\u00e1 byla \u00fato\u010dn\u00edkem zachycena.

\"BLUFFS<\/center> <\/p>\n

Pro blokov\u00e1n\u00ed zranitelnost\u00ed navrhl v\u00fdzkumn\u00edk prov\u00e9st v norm\u011b zm\u011bny, kter\u00e9 roz\u0161i\u0159uj\u00ed protokol LMP a m\u011bn\u00ed logiku pou\u017e\u00edv\u00e1n\u00ed KDF (Key Derivation Function) p\u0159i tvorb\u011b kl\u00ed\u010d\u016f v re\u017eimu LSC. Zm\u011bna nenaru\u0161uje zp\u011btnou kompatibilitu, ale vede k zapracov\u00e1n\u00ed roz\u0161\u00ed\u0159en\u00e9 LMP p\u0159\u00edkazu a nutnosti odeslat dal\u0161\u00edch 48 bajt\u016f. Organizace Bluetooth SIG, odpov\u011bdn\u00e1 za v\u00fdvoj Bluetooth standard\u016f, jako ochrann\u00e9 opat\u0159en\u00ed navrhla odm\u00edtat p\u0159ipojen\u00ed p\u0159es \u0161ifrovan\u00fd komunika\u010dn\u00ed kan\u00e1l s kl\u00ed\u010di o velikosti do 7 bajt\u016f. Implementac\u00edm, kter\u00e9 v\u017edy pou\u017e\u00edvaj\u00ed \u00farove\u0148 Security Mode 4 Level 4, se doporu\u010duje odm\u00edtat p\u0159ipojen\u00ed s kl\u00ed\u010di o velikosti do 16 bajt\u016f.
\n
Zdroj: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0414\u0430\u043d\u0438\u044d\u043b\u0435 \u0410\u043d\u0442\u043e\u043d\u0438\u043e\u043b\u0438 (Daniele Antonioli), \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Bluetooth, \u0440\u0430\u043d\u0435\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u0432\u0448\u0438\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u0430\u0442\u0430\u043a BIAS, BLUR \u0438 KNOB, \u0432\u044b\u044f\u0432\u0438\u043b \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-24023) \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0430\u043d\u0441\u043e\u0432 Bluetooth, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0432\u0441\u0435 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 Bluetooth, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0435 \u0440\u0435\u0436\u0438\u043c\u044b \u0437\u0430\u0449\u0438\u0449\u0451\u043d\u043d\u043e\u0433\u043e \u0441\u043e\u043f\u0440\u044f\u0436\u0435\u043d\u0438\u044f «Secure Connections» \u0438 «Secure Simple Pairing», \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0441\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f\u043c Bluetooth Core 4.2-5.4. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d\u043e 6 \u0432\u0430\u0440\u0438\u0430\u043d\u0442\u043e\u0432 \u0430\u0442\u0430\u043a, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":111834,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-111833","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47BLUFFS \u2014 zranitelnosti v Bluetooth, kter\u00e9 umo\u017e\u0148uj\u00ed prov\u00e9st MITM \u00fatok | ProHoster","description":"Daniele Antonioli, v\u00fdzkumn\u00edk bezpe\u010dnosti Bluetooth, kter\u00fd d\u0159\u00edve vyvinul techniky \u00fatok\u016f BIAS, BLUR a KNOB, odhalil dv\u011b nov\u00e9 zranitelnosti (CVE-2023-24023) v mechanizmu vyjedn\u00e1v\u00e1n\u00ed sezen\u00ed.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/bluffs-uyazvimosti-v-bluetooth-pozvolyayushhie-provesti-mitm-ataku","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47BLUFFS \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Bluetooth, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0432\u0435\u0441\u0442\u0438 MITM-\u0430\u0442\u0430\u043a\u0443 | ProHoster","og:description":"\u0414\u0430\u043d\u0438\u044d\u043b\u0435 \u0410\u043d\u0442\u043e\u043d\u0438\u043e\u043b\u0438 (Daniele Antonioli), \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 Bluetooth, \u0440\u0430\u043d\u0435\u0435 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u0432\u0448\u0438\u0439 \u0442\u0435\u0445\u043d\u0438\u043a\u0438 \u0430\u0442\u0430\u043a BIAS, BLUR \u0438 KNOB, \u0432\u044b\u044f\u0432\u0438\u043b \u0434\u0432\u0435 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-24023) \u0432 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u0435\u0430\u043d\u0441\u043e\u0432.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/bluffs-uyazvimosti-v-bluetooth-pozvolyayushhie-provesti-mitm-ataku","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-11-29T13:10:15+00:00","article:modified_time":"2023-11-29T13:10:15+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/111833","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=111833"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/111833\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/111834"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=111833"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=111833"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=111833"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}