{"id":31273,"date":"2019-10-31T21:40:23","date_gmt":"2019-10-31T18:40:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vzlom-wpa3-dragonblood\/"},"modified":"2019-10-31T21:40:23","modified_gmt":"2019-10-31T18:40:23","slug":"vzlom-wpa3-dragonblood","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","title":{"rendered":"Zranitelnost WPA3: DragonBlood","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Zranitelnost
\n
\nI kdy\u017e byl nov\u00fd standard WPA3 je\u0161t\u011b po\u0159\u00e1dn\u011b nezaveden do provozu, bezpe\u010dnostn\u00ed nedostatky v tomto protokolu umo\u017e\u0148uj\u00ed \u00fato\u010dn\u00edk\u016fm prolomit heslo Wi-Fi.
\n<\/a><\/noindex>
\nProtokol Wi-Fi Protected Access III (WPA3) byl spu\u0161t\u011bn ve snaze odstranit technick\u00e9 nedostatky protokolu WPA2, kter\u00fd byl dlouhou dobu pova\u017eov\u00e1n za nebezpe\u010dn\u00fd a zraniteln\u00fd v\u016f\u010di \u00fatoku KRACK (Key Reinstallation Attack). A\u010dkoli WPA3 spol\u00e9h\u00e1 na bezpe\u010dn\u011bj\u0161\u00ed handshake zn\u00e1m\u00fd jako Dragonfly, jen\u017e je zam\u011b\u0159en na ochranu Wi-Fi s\u00edt\u00ed p\u0159ed offline \u00fatoky hrubou silou, bezpe\u010dnostn\u00ed v\u00fdzkumn\u00edci Mathy Vanhoef a Eyal Ronen objevili slabiny v ran\u00e9 implementaci WPA3-Personal, kter\u00e9 by mohly \u00fato\u010dn\u00edkovi umo\u017enit obnovit Wi-Fi hesla vyu\u017eit\u00edm \u010dasov\u00e1n\u00ed nebo vedlej\u0161\u00edho ke\u0161e.<\/p>\n

\u201e\u00dato\u010dn\u00edci mohou p\u0159e\u010d\u00edst informace, kter\u00e9 m\u011bly b\u00fdt \u0161ifrov\u00e1ny bezpe\u010dn\u011b protokolem WPA3. To m\u016f\u017ee b\u00fdt vyu\u017eito k kr\u00e1de\u017ei citliv\u00fdch informac\u00ed, jako jsou \u010d\u00edsla kreditn\u00edch karet, hesla, chatov\u00e9 zpr\u00e1vy, e-maily atd.\u201c<\/p><\/blockquote>\n

V dnes zve\u0159ejn\u011bn\u00e9m v\u00fdzkumn\u00e9m dokumentu<\/a><\/noindex>, nazvan\u00e9m DragonBlood, v\u011bdci podrobn\u011b prozkoumali dva typy designov\u00fdch nedostatk\u016f v WPA3: prvn\u00ed vede k \u00fatok\u016fm s degradac\u00ed, druh\u00fd pak k \u00fanik\u016fm vedlej\u0161\u00edho ke\u0161e.<\/p>\n

\u00datok na z\u00e1klad\u011b vedlej\u0161\u00edho kan\u00e1lu<\/h3>\n

\nAlgoritmus k\u00f3dov\u00e1n\u00ed hesla v Dragonfly, tak\u00e9 zn\u00e1m\u00fd jako algoritmus \u201elovu a klov\u00e1n\u00ed\u201c (hunting and pecking), obsahuje podm\u00edn\u011bn\u00e9 v\u011btven\u00ed. Pokud \u00fato\u010dn\u00edk m\u016f\u017ee ur\u010dit, kter\u00e1 v\u011btev if-then-else byla pou\u017eita, m\u016f\u017ee zjistit, zda byl nalezen prvek hesla v konkr\u00e9tn\u00ed iteraci tohoto algoritmu. V praxi bylo zji\u0161t\u011bno, \u017ee pokud \u00fato\u010dn\u00edk m\u016f\u017ee spustit neprivilegovan\u00fd k\u00f3d na po\u010d\u00edta\u010di ob\u011bti, je mo\u017en\u00e9 pou\u017e\u00edt \u00fatoky na z\u00e1klad\u011b ke\u0161e k ur\u010den\u00ed, kter\u00e1 v\u011btev byla pou\u017eita v prvn\u00ed iteraci algoritmu pro generov\u00e1n\u00ed hesla. Tyto informace mohou b\u00fdt vyu\u017eity k proveden\u00ed \u00fatoku na rozd\u011blen\u00ed hesla (co\u017e p\u0159ipom\u00edn\u00e1 offline \u00fatok hrubou silou).<\/p>\n

Tato zranitelnost je sledov\u00e1na pod identifik\u00e1torem CVE-2019-9494.<\/p>\n

Ochrana spo\u010d\u00edv\u00e1 v nahrazen\u00ed podm\u00edn\u011bn\u00fdch v\u011btv\u00ed, kter\u00e9 z\u00e1vis\u00ed na tajn\u00fdch hodnot\u00e1ch, pomoc\u00ed utilit pro v\u00fdb\u011br s konstantn\u00edm \u010dasem. Implementace by tak\u00e9 m\u011bly pou\u017e\u00edvat v\u00fdpo\u010det Legendreho symbolu<\/a><\/noindex> s konstantn\u00edm \u010dasem.<\/p>\n

\u00datok na z\u00e1klad\u011b synchronizace pomoc\u00ed bo\u010dn\u00edch kan\u00e1l\u016f<\/h3>\n

\nKdy\u017e handshake Dragonfly pou\u017e\u00edv\u00e1 ur\u010dit\u00e9 multiplikativn\u00ed skupiny, algoritmus k\u00f3dov\u00e1n\u00ed hesla vyu\u017e\u00edv\u00e1 prom\u011bnliv\u00fd po\u010det iterac\u00ed pro k\u00f3dov\u00e1n\u00ed hesla. P\u0159esn\u00fd po\u010det iterac\u00ed z\u00e1vis\u00ed na pou\u017e\u00edvan\u00e9m hesle a MAC adrese p\u0159\u00edstupov\u00e9ho bodu a klienta. \u00dato\u010dn\u00edk m\u016f\u017ee prov\u00e9st vzd\u00e1len\u00fd \u010dasov\u00fd \u00fatok na algoritmus k\u00f3dov\u00e1n\u00ed hesla, aby zjistil, kolik iterac\u00ed bylo pou\u017eito k\u00f3dov\u00e1n\u00ed hesla. Obnoven\u00e9 informace lze pou\u017e\u00edt k proveden\u00ed \u00fatoku na heslo, kter\u00fd je podobn\u00fd offline slovn\u00edkov\u00e9mu \u00fatoku.<\/p>\n

Aby se p\u0159ede\u0161lo \u00fatok\u016fm na z\u00e1klad\u011b synchronizace, implementace by m\u011bly deaktivovat zraniteln\u00e9 multiplikativn\u00ed skupiny. Z technick\u00e9ho hlediska by m\u011bly b\u00fdt deaktivov\u00e1ny skupiny MODP 22, 23 a 24. Doporu\u010duje se tak\u00e9 deaktivovat skupiny MODP 1, 2 a 5.<\/p>\n

Tato zranitelnost je tak\u00e9 sledov\u00e1na pomoc\u00ed ID CVE-2019-9494 vzhledem k podobnosti implementace \u00fatoku.<\/p>\n

WPA3 downgrade<\/h3>\n

\nVzhledem k tomu, \u017ee 15let\u00fd protokol WPA2 byl \u0161iroce pou\u017e\u00edv\u00e1n miliardami za\u0159\u00edzen\u00ed, \u0161irok\u00e9 p\u0159ijet\u00ed WPA3 nenastane p\u0159es noc. Aby byla zaji\u0161t\u011bna podpora star\u0161\u00edch za\u0159\u00edzen\u00ed, certifikovan\u00e1 za\u0159\u00edzen\u00ed WPA3 nab\u00edzej\u00ed \u201ezp\u011btn\u00fd re\u017eim\u201c, kter\u00fd lze nastavit pro p\u0159\u00edjem p\u0159ipojen\u00ed pomoc\u00ed WPA3-SAE i WPA2.<\/p>\n

V\u00fdzkumn\u00edci se domn\u00edvaj\u00ed, \u017ee zp\u011btn\u00fd re\u017eim je zraniteln\u00fd v\u016f\u010di downgrade \u00fatok\u016fm, kter\u00e9 mohou \u00fato\u010dn\u00edci vyu\u017e\u00edt k vytvo\u0159en\u00ed podvodn\u00e9ho p\u0159\u00edstupov\u00e9ho bodu podporuj\u00edc\u00edho pouze WPA2, co\u017e nut\u00ed za\u0159\u00edzen\u00ed podporuj\u00edc\u00ed WPA3, aby se p\u0159ipojila pomoc\u00ed nezabezpe\u010den\u00e9ho \u010dty\u0159istup\u0148ov\u00e9ho handshake WPA2.<\/p>\n

\u201eTak\u00e9 jsme zjistili \u00fatok s downgrade na samotn\u00e9 handshake SAE (\u201eSou\u010dasn\u00e1 autentizace rovn\u00e9ho s rovn\u00fdm\u201c, b\u011b\u017en\u011b zn\u00e1m\u00e9 jako \u201eDragonfly\u201c), kdy m\u016f\u017eeme p\u0159inutit za\u0159\u00edzen\u00ed pou\u017e\u00edvat slab\u0161\u00ed eliptickou k\u0159ivku, ne\u017e je obvykl\u00e9,\u201c \u0159\u00edkaj\u00ed v\u00fdzkumn\u00edci.<\/p><\/blockquote>\n

\nNav\u00edc pro proveden\u00ed \u00fatoku s downgrade nen\u00ed pot\u0159eba pozice \u201e\u010dlov\u011bk uprost\u0159ed\u201c. \u00dato\u010dn\u00edk\u016fm sta\u010d\u00ed zn\u00e1t pouze SSID s\u00edt\u011b WPA3-SAE.<\/p>\n

V\u011bdci ozn\u00e1mili sv\u00e9 v\u00fdsledky Wi-Fi Alliance, neziskov\u00e9 organizace, kter\u00e1 certifikuje standardy WiFi a produkty Wi-Fi, aby vyhovovaly po\u017eadavk\u016fm, uznali probl\u00e9my a spolupracuj\u00ed s dodavateli na oprav\u011b st\u00e1vaj\u00edc\u00edch za\u0159\u00edzen\u00ed certifikovan\u00fdch WPA3.<\/p>\n

PoC (k datu zve\u0159ejn\u011bn\u00ed - 404)<\/h3>\n

\nJako d\u016fkaz konceptu v\u011bdci brzy uvoln\u00ed n\u00e1sleduj\u00edc\u00ed \u010dty\u0159i samostatn\u00e9 n\u00e1stroje (v repozit\u00e1\u0159\u00edch GitHub s hypertextov\u00fdmi odkazy n\u00ed\u017ee), kter\u00e9 lze pou\u017e\u00edt k testov\u00e1n\u00ed zranitelnost\u00ed.<\/p>\n

Dragondrain<\/noindex> \u2014 n\u00e1stroj, kter\u00fd m\u016f\u017ee zkontrolovat, do jak\u00e9 m\u00edry je p\u0159\u00edstupov\u00fd bod zraniteln\u00fd v\u016f\u010di DoS \u00fatok\u016fm na handshake WPA3 Dragonfly.
\nDragontime<\/noindex> \u2014 experiment\u00e1ln\u00ed n\u00e1stroj pro prov\u00e1d\u011bn\u00ed \u010dasov\u00fdch \u00fatok\u016f proti handshake Dragonfly.
\nDragonforce<\/a><\/noindex> \u2014 experiment\u00e1ln\u00ed n\u00e1stroj, kter\u00fd z\u00edsk\u00e1v\u00e1 informace pro obnovu po \u010dasov\u00fdch \u00fatoc\u00edch a prov\u00e1d\u00ed \u00fatok na heslo.
\nDragonslayer<\/a><\/noindex> \u2014 n\u00e1stroj, kter\u00fd prov\u00e1d\u00ed \u00fatoky na EAP-pwd.<\/p>\n

Dragonblood: Anal\u00fdza zabezpe\u010den\u00ed WPA3’s SAE handshake<\/a><\/noindex>
\nWebov\u00e1 str\u00e1nka projektu \u2014 wpa3.mathyvanhoef.com<\/a><\/noindex>
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 WPA3 \u0435\u0449\u0435 \u0442\u043e\u043b\u043a\u043e\u043c \u043d\u0435 \u0432\u0432\u0435\u0434\u0435\u043d \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c Wi-Fi. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b Wi-Fi Protected Access III (WPA3) \u0431\u044b\u043b \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0432 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WPA2, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0433\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0447\u0438\u0442\u0430\u043b\u0441\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0434\u043b\u044f KRACK-\u0430\u0442\u0430\u043a\u0438 (Key Reinstallation Attack). \u0425\u043e\u0442\u044f WPA3 \u043e\u043f\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23239,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31273","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hacking WPA3: DragonBlood | ProHoster","description":"I kdy\u017e nov\u00fd standard WPA3 je\u0161t\u011b nebyl po\u0159\u00e1dn\u011b zaveden.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c WPA3: DragonBlood | ProHoster","og:description":"\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 WPA3 \u0435\u0449\u0435 \u0442\u043e\u043b\u043a\u043e\u043c \u043d\u0435 \u0432\u0432\u0435\u0434\u0435\u043d \u0432.","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:40:23+00:00","article:modified_time":"2019-10-31T18:40:23+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31273","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 05:21:38","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:12:48","updated":"2026-01-21 05:21:38","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/31273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=31273"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/31273\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/23239"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=31273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=31273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=31273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}