{"id":31424,"date":"2019-10-31T21:41:11","date_gmt":"2019-10-31T18:41:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd\/"},"modified":"2019-10-31T21:41:11","modified_gmt":"2019-10-31T18:41:11","slug":"uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","title":{"rendered":"Zranitelnosti v technologii ochrany bezdr\u00e1tov\u00fdch s\u00edt\u00ed WPA3 a v EAP-pwd","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Mathy Vanhoef, autor \u00fatoku KRACK na bezdr\u00e1tov\u00e9 s\u00edt\u011b s WPA2, a Eyal Ronen, spoluatortor n\u011bkter\u00fdch \u00fatok\u016f na TLS, odhalili informace o \u0161esti zranitelnostech (CVE-2019-9494 \u2013 CVE-2019-9499) v technologii ochrany bezdr\u00e1tov\u00fdch s\u00edt\u00ed WPA3, kter\u00e9 umo\u017e\u0148uj\u00ed zrekonstruovat heslo pro p\u0159ipojen\u00ed a z\u00edskat p\u0159\u00edstup k bezdr\u00e1tov\u00e9 s\u00edti bez znalosti hesla. Zranitelnosti jsou spojeny pod k\u00f3dov\u00fdm jm\u00e9nem Dragonblood a umo\u017e\u0148uj\u00ed kompromitaci metody sjedn\u00e1v\u00e1n\u00ed spojen\u00ed Dragonfly, kter\u00e1 poskytuje ochranu p\u0159ed hrubou silou v offline re\u017eimu. Krom\u011b WPA3 se metoda Dragonfly tak\u00e9 pou\u017e\u00edv\u00e1 k ochran\u011b p\u0159ed slovn\u00edkov\u00fdmi \u00fatoky v protokolu EAP-pwd, kter\u00fd se pou\u017e\u00edv\u00e1 v Androidu, RADIUS serverech a v hostapd\/wpa_supplicant.<\/p>\n<p>Ve v\u00fdzkumu byly identifikov\u00e1ny dva hlavn\u00ed typy architektonick\u00fdch probl\u00e9m\u016f v WPA3. Oba typy probl\u00e9m\u016f mohou b\u00fdt nakonec vyu\u017eity k obnov\u011b p\u0159\u00edstupov\u00e9ho hesla. Prvn\u00ed typ umo\u017e\u0148uje prov\u00e9st downgrade na nespolehliv\u00e9 kryptografick\u00e9 metody (downgrade attack): prost\u0159edky pro zaji\u0161t\u011bn\u00ed kompatibility s WPA2 (transitn\u00ed re\u017eim, kter\u00fd umo\u017e\u0148uje pou\u017eit\u00ed WPA2 a WPA3) umo\u017e\u0148uj\u00ed \u00fato\u010dn\u00edkovi donutit klienta prov\u00e9st \u010dty\u0159f\u00e1zov\u00e9 vyjedn\u00e1v\u00e1n\u00ed p\u0159ipojen\u00ed pou\u017e\u00edvan\u00e9 WPA2, co\u017e n\u00e1sledn\u011b umo\u017e\u0148uje pou\u017e\u00edt klasick\u00e9 \u00fatoky na hesla, kter\u00e9 jsou aplikovateln\u00e9 na WPA2. Krom\u011b toho byla odhalena tak\u00e9 mo\u017enost proveden\u00ed downgrade \u00fatoku p\u0159\u00edmo na metodu vyjedn\u00e1v\u00e1n\u00ed p\u0159ipojen\u00ed Dragonfly, kter\u00e1 umo\u017e\u0148uje n\u00e1vrat k m\u00e9n\u011b chr\u00e1n\u011bn\u00fdm typ\u016fm eliptick\u00fdch k\u0159ivek.<\/p>\n<p>Druh\u00fd typ probl\u00e9m\u016f vede k \u00faniku informac\u00ed o charakteristik\u00e1ch hesla prost\u0159ednictv\u00edm bo\u010dn\u00edch kan\u00e1l\u016f a je zalo\u017een na nedostatc\u00edch metody k\u00f3dov\u00e1n\u00ed hesla v Dragonfly, kter\u00e9 umo\u017e\u0148uj\u00ed na z\u00e1klad\u011b nep\u0159\u00edm\u00fdch \u00fadaj\u016f, jako je zm\u011bna latenc\u00ed p\u0159i prov\u00e1d\u011bn\u00ed operac\u00ed, obnovit p\u016fvodn\u00ed heslo. Algoritmus pou\u017eit\u00e9ho v Dragonfly pro transformaci hashe do eliptick\u00e9 k\u0159ivky (hash-to-curve) byl n\u00e1chyln\u00fd k \u00fatok\u016fm prost\u0159ednictv\u00edm sledov\u00e1n\u00ed informac\u00ed v procesorov\u00e9 cache (cache attack) a algoritmus transformace hashe do skupiny (hash-to-group) je n\u00e1chyln\u00fd k \u00fatok\u016fm pomoc\u00ed m\u011b\u0159en\u00ed doby prov\u00e1d\u011bn\u00ed operac\u00ed (timing attack).<\/p>\n<p> K proveden\u00ed \u00fatok\u016f prost\u0159ednictv\u00edm anal\u00fdzy cache mus\u00ed \u00fato\u010dn\u00edk m\u00edt mo\u017enost vykon\u00e1vat neprivilegovan\u00fd k\u00f3d na syst\u00e9mu u\u017eivatele p\u0159ipojuj\u00edc\u00edho se k bezdr\u00e1tov\u00e9 s\u00edti. Ob\u011b metody umo\u017e\u0148uj\u00ed z\u00edsk\u00e1n\u00ed informac\u00ed pot\u0159ebn\u00fdch pro up\u0159esn\u011bn\u00ed spr\u00e1vn\u00e9ho v\u00fdb\u011bru \u010d\u00e1st\u00ed hesla p\u0159i jeho odhadu. \u00da\u010dinnost \u00fatoku je dostate\u010dn\u011b vysok\u00e1 a umo\u017e\u0148uje uh\u00e1dnout 8-znakov\u00e9 heslo obsahuj\u00edc\u00ed mal\u00e9 p\u00edsmena, p\u0159i\u010dem\u017e sta\u010d\u00ed zachytit pouze 40 handshake relac\u00ed a vynalo\u017eit prost\u0159edky odpov\u00eddaj\u00edc\u00ed pron\u00e1jmu v\u00fdpo\u010detn\u00edch schopnost\u00ed Amazon EC2 za 125 dolar\u016f. <\/p>\n<p>Na z\u00e1klad\u011b odhalen\u00fdch zranitelnost\u00ed bylo navr\u017eeno n\u011bkolik sc\u00e9n\u00e1\u0159\u016f \u00fatok\u016f:<\/p>\n<ul>\n<li class=\"l\"> \u00datok na downgrade na WPA2 s mo\u017enost\u00ed prov\u00e1d\u011bn\u00ed slovn\u00edho odhadu. V podm\u00ednk\u00e1ch, kdy klient a p\u0159\u00edstupov\u00fd bod podporuj\u00ed jak WPA3, tak WPA2, m\u016f\u017ee \u00fato\u010dn\u00edk nasadit svou vlastn\u00ed podvodnou p\u0159\u00edstupovou s\u00ed\u0165 se stejn\u00fdm n\u00e1zvem s\u00edt\u011b, kter\u00e1 podporuje pouze WPA2. V takov\u00e9 situaci klient pou\u017eije pro WPA2 charakteristickou metodu sjedn\u00e1v\u00e1n\u00ed p\u0159ipojen\u00ed, b\u011bhem kter\u00e9 bude ur\u010dena nep\u0159ijatelnost takov\u00e9ho downgrade, av\u0161ak dojde k tomu ve f\u00e1zi, kdy zpr\u00e1vy o sjedn\u00e1v\u00e1n\u00ed kan\u00e1lu byly odesl\u00e1ny a v\u0161echny pot\u0159ebn\u00e9 informace pro slovn\u00ed \u00fatok u\u017e unikly. Podobn\u00e1 metoda je pou\u017eiteln\u00e1 i pro downgrade na problematick\u00e9 verze eliptick\u00fdch k\u0159ivek v SAE.\n<p>D\u00e1le bylo zji\u0161t\u011bno, \u017ee d\u00e9mon iwd, vyv\u00edjen\u00fd spole\u010dnost\u00ed Intel jako alternativa k wpa_supplicant, a bezdr\u00e1tov\u00fd stack Samsung Galaxy S10 jsou n\u00e1chyln\u00e9 k downgrade \u00fatok\u016fm i v s\u00edt\u00edch, kter\u00e9 pou\u017e\u00edvaj\u00ed pouze WPA3 \u2014 pokud se tato za\u0159\u00edzen\u00ed p\u0159edt\u00edm p\u0159ipojila k s\u00edti WPA3, pokus\u00ed se p\u0159ipojit k fale\u0161n\u00e9 s\u00edti WPA2 se stejn\u00fdm n\u00e1zvem.<\/p>\n<li class=\"l\"> \u00datoky p\u0159es bo\u010dn\u00ed kan\u00e1ly s extrakc\u00ed informac\u00ed z procesorov\u00e9 cache. Algoritmus k\u00f3dov\u00e1n\u00ed hesel v Dragonfly obsahuje podm\u00edn\u011bn\u00e9 v\u011btven\u00ed a \u00fato\u010dn\u00edk, kter\u00fd m\u016f\u017ee na bezdr\u00e1tov\u00e9m syst\u00e9mu u\u017eivatele vykon\u00e1vat k\u00f3d, m\u016f\u017ee na z\u00e1klad\u011b anal\u00fdzy chov\u00e1n\u00ed cache ur\u010dit, kter\u00fd blok v\u00fdraz\u016f if-then-else byl vybr\u00e1n. Z\u00edskan\u00e9 informace mohou b\u00fdt pou\u017eity k proveden\u00ed postupn\u00e9ho odhadu hesla, p\u0159i\u010dem\u017e se pou\u017e\u00edvaj\u00ed metody podobn\u00e9 offline \u00fatok\u016fm na slovn\u00edky p\u0159i odhadu hesel WPA2. Pro ochranu se doporu\u010duje p\u0159ej\u00edt na operace s konstantn\u00ed dobou prov\u00e1d\u011bn\u00ed, nez\u00e1visle na charakteru zpracov\u00e1van\u00fdch dat;\n<li class=\"l\"> \u00datoky p\u0159es bo\u010dn\u00ed kan\u00e1ly s hodnocen\u00edm doby vykon\u00e1v\u00e1n\u00ed operac\u00ed. V k\u00f3du Dragonfly p\u0159i k\u00f3dov\u00e1n\u00ed hesel se pou\u017e\u00edv\u00e1 n\u011bkolik multiplikativn\u00edch skupin (MODP) a prom\u011bnliv\u00fd po\u010det iterac\u00ed, jejich\u017e po\u010det z\u00e1vis\u00ed na pou\u017eit\u00fdch heslech a MAC adrese p\u0159\u00edstupov\u00e9ho bodu nebo klienta. \u00dato\u010dn\u00edk na d\u00e1lku m\u016f\u017ee ur\u010dit, kolik iterac\u00ed bylo vykon\u00e1no b\u011bhem k\u00f3dov\u00e1n\u00ed hesla a pou\u017e\u00edt je jako indik\u00e1tor p\u0159i postupn\u00e9m odhadu hesla.\n<li class=\"l\"> \u00datok na odm\u00edtnut\u00ed slu\u017eby. \u00dato\u010dn\u00edk m\u016f\u017ee zablokovat ur\u010dit\u00e9 funkce p\u0159\u00edstupov\u00e9ho bodu vy\u010derp\u00e1n\u00edm dostupn\u00fdch zdroj\u016f prost\u0159ednictv\u00edm odes\u00edl\u00e1n\u00ed velk\u00e9ho mno\u017estv\u00ed po\u017eadavk\u016f na zprovozn\u011bn\u00ed kan\u00e1lu. K obejit\u00ed ochrany proti floodu, kter\u00e1 je zaji\u0161t\u011bna v WPA3, sta\u010d\u00ed odes\u00edlat po\u017eadavky z fale\u0161n\u00fdch, jedine\u010dn\u00fdch MAC adres.\n<li class=\"l\">  P\u0159echod na m\u00e9n\u011b chr\u00e1n\u011bn\u00e9 kryptografick\u00e9 skupiny, kter\u00e9 se pou\u017e\u00edvaj\u00ed p\u0159i vyjedn\u00e1v\u00e1n\u00ed spojen\u00ed v WPA3. Nap\u0159\u00edklad pokud klient podporuje eliptick\u00e9 k\u0159ivky P-521 a P-256 a pou\u017e\u00edv\u00e1 P-521 jako preferovanou mo\u017enost, pak \u00fato\u010dn\u00edk, bez ohledu na podporu<br \/>\nP-521 na stran\u011b p\u0159\u00edstupov\u00e9ho bodu, m\u016f\u017ee klienta donutit k pou\u017eit\u00ed P-256. \u00datok se prov\u00e1d\u00ed zalo\u017een\u00edm n\u011bkter\u00fdch zpr\u00e1v b\u011bhem vyjedn\u00e1v\u00e1n\u00ed spojen\u00ed a odes\u00edl\u00e1n\u00edm fale\u0161n\u00fdch zpr\u00e1v informuj\u00edc\u00edch o absenci podpory ur\u010dit\u00fdch typ\u016f eliptick\u00fdch k\u0159ivek.<\/p>\n<\/ul>\n<p>Bylo p\u0159ipraveno n\u011bkolik skript\u016f pro kontrolu za\u0159\u00edzen\u00ed na p\u0159\u00edtomnost zranitelnost\u00ed s p\u0159\u00edklady proveden\u00ed \u00fatok\u016f:<\/p>\n<ul>\n<li class=\"l\"> Dragonslayer \u2014 implementace \u00fatok\u016f na EAP-pwd;\n<li class=\"l\"> Dragondrain \u2014 n\u00e1stroj pro testov\u00e1n\u00ed n\u00e1chylnosti p\u0159\u00edstupov\u00fdch bod\u016f k zranitelnosti v implementaci metody sjedn\u00e1v\u00e1n\u00ed spojen\u00ed SAE (Simultaneous Authentication of Equals), kter\u00fd lze pou\u017e\u00edt k iniciaci odm\u00edtnut\u00ed slu\u017eby;\n<li class=\"l\"> Dragontime \u2014 skript pro prov\u00e1d\u011bn\u00ed \u00fatoku prost\u0159ednictv\u00edm bo\u010dn\u00edch kan\u00e1l\u016f proti SAE, kter\u00fd zohled\u0148uje rozd\u00edly v dob\u011b zpracov\u00e1n\u00ed operac\u00ed p\u0159i pou\u017eit\u00ed skupin MODP 22, 23 a 24;\n<li class=\"l\"> Dragonforce \u2014 n\u00e1stroj pro obnovu informac\u00ed (zkou\u0161en\u00ed hesla) na z\u00e1klad\u011b informac\u00ed o r\u016fzn\u00fdch dob\u00e1ch zpracov\u00e1n\u00ed operac\u00ed nebo stanoven\u00ed usazov\u00e1n\u00ed dat v cache.\n<\/ul>\n<p>Spojen\u00ed Wi-Fi Alliance, kter\u00e9 vyv\u00edj\u00ed standardy pro bezdr\u00e1tov\u00e9 s\u00edt\u011b, ozn\u00e1milo, \u017ee probl\u00e9m se t\u00fdk\u00e1 omezen\u00e9ho po\u010dtu ran\u00fdch implementac\u00ed WPA3-Personal a m\u016f\u017ee b\u00fdt vy\u0159e\u0161en aktualizac\u00ed firmwaru a software. K dosa\u017een\u00ed zranitelnost\u00ed pro prov\u00e1d\u011bn\u00ed \u0161kodliv\u00fdch \u010dinnost\u00ed dosud nedo\u0161lo. Pro pos\u00edlen\u00ed ochrany Wi-Fi Alliance p\u0159idala do certifika\u010dn\u00edho programu pro bezdr\u00e1tov\u00e1 za\u0159\u00edzen\u00ed dal\u0161\u00ed testy pro ov\u011b\u0159en\u00ed spr\u00e1vnosti implementac\u00ed a tak\u00e9 kontaktovala v\u00fdrobce za\u0159\u00edzen\u00ed pro koordinaci odstran\u011bn\u00ed zji\u0161t\u011bn\u00fdch probl\u00e9m\u016f. Opravy na odstran\u011bn\u00ed probl\u00e9m\u016f ji\u017e byly vyd\u00e1ny pro hostap\/wpa_supplicant. Aktualizace bal\u00ed\u010dk\u016f jsou k dispozici pro Ubuntu. V Debianu, RHEL, SUSE\/openSUSE, Arch, Fedo\u0159e a FreeBSD z\u016fst\u00e1vaj\u00ed probl\u00e9my zat\u00edm neopraven\u00e9.<br \/>\n<br \/>Zdroj: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50493\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef), \u0430\u0432\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 KRACK \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441 WPA2, \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen), \u0441\u043e\u0430\u0432\u0442\u043e\u0440 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 TLS, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2019-9494 &#8212; CVE-2019-9499) \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0437\u043d\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c Dragonblood [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31424","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef), \u0430\u0432\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 KRACK \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441 WPA2, \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen), \u0441\u043e\u0430\u0432\u0442\u043e\u0440 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 TLS, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2019-9494 - CVE-2019-9499) \u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3 \u0438 \u0432 EAP-pwd | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef), \u0430\u0432\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 KRACK \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441 WPA2, \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen), \u0441\u043e\u0430\u0432\u0442\u043e\u0440 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 TLS, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2019-9494 - CVE-2019-9499) \u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:41:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:41:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Zranitelnosti v technologii ochrany bezdr\u00e1tov\u00fdch s\u00edt\u00ed WPA3 a v EAP-pwd | ProHoster","description":"Mathy Vanhoef, autor \u00fatoku KRACK na bezdr\u00e1tov\u00e9 s\u00edt\u011b s WPA2, a Eyal Ronen, spoluatorka n\u011bkter\u00fdch \u00fatok\u016f na TLS, odhalili informace o \u0161esti zranitelnostech (CVE-2019-9494 - CVE-2019-9499) v.","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3 \u0438 \u0432 EAP-pwd | ProHoster","og:description":"\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef), \u0430\u0432\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 KRACK \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441 WPA2, \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen), \u0441\u043e\u0430\u0432\u0442\u043e\u0440 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 TLS, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2019-9494 - CVE-2019-9499) \u0432.","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:41:11+00:00","article:modified_time":"2019-10-31T18:41:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31424","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 06:08:14","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:17:25","updated":"2026-01-21 06:08:14","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/31424","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=31424"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/31424\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=31424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=31424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=31424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}