{"id":91429,"date":"2020-08-13T13:42:00","date_gmt":"2020-08-13T11:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte"},"modified":"2020-08-13T13:42:00","modified_gmt":"2020-08-13T11:42:00","slug":"ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","title":{"rendered":"ReVoLTE \u00fatok umo\u017e\u0148uj\u00edc\u00ed odchyt\u00e1v\u00e1n\u00ed \u0161ifrovan\u00fdch hovor\u016f v LTE","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Skupina v\u00fdzkumn\u00edk\u016f z Ruhr-Univerzity v Bochumi (N\u011bmecko) p\u0159edstavila techniku \u00fatoku ReVoLTE<\/a><\/noindex> (PDF<\/a><\/noindex>), kter\u00e1 umo\u017e\u0148uje odchyt\u00e1vat \u0161ifrovan\u00e9 hlasov\u00e9 hovory v s\u00edt\u00edch mobiln\u00edch telefon\u016f 4G\/LTE, kter\u00e9 pou\u017e\u00edvaj\u00ed pro p\u0159enos hlasov\u00e9ho provozu technologii VoLTE (Voice over LTE<\/a><\/noindex>).
\n.<\/p>\n

Pro ochranu telefonn\u00edch hovor\u016f p\u0159ed odposlechem v VoLTE je mezi klientem a oper\u00e1torem aplikov\u00e1no \u0161ifrov\u00e1n\u00ed zalo\u017een\u00e9 na proudov\u00e9m \u0161ifrov\u00e1n\u00ed<\/a><\/noindex>. Specifikace p\u0159ikazuje generovat pro ka\u017edou relaci unik\u00e1tn\u00ed kl\u00ed\u010dov\u00fd proud, ale jak zjistili v\u00fdzkumn\u00edci, 12 ze 15 testovan\u00fdch z\u00e1kladnov\u00fdch stanic toto podm\u00ednku nedodr\u017euje a opakovan\u011b pou\u017e\u00edv\u00e1 stejn\u00fd kl\u00ed\u010dov\u00fd proud pro dva po sob\u011b jdouc\u00ed hovory p\u0159es jeden r\u00e1diov\u00fd kan\u00e1l, nebo pou\u017e\u00edv\u00e1 p\u0159edv\u00eddateln\u00e9 metody generov\u00e1n\u00ed nov\u00e9 sekvence.<\/p>\n

Opakovan\u00e9 pou\u017e\u00edv\u00e1n\u00ed kl\u00ed\u010dov\u00e9ho proudu umo\u017e\u0148uje \u00fato\u010dn\u00edkovi de\u0161ifrovat zaznamenan\u00fd \u0161ifrovan\u00fd provoz s hovorem. Aby \u00fato\u010dn\u00edk mohl de\u0161ifrovat obsah hlasov\u00e9ho hovoru, nejprve zachyt\u00ed a ulo\u017e\u00ed \u0161ifrovan\u00fd r\u00e1diov\u00fd provoz mezi ob\u011bt\u00ed a zranitelnou z\u00e1kladnovou stanic\u00ed. Po skon\u010den\u00ed hovoru \u00fato\u010dn\u00edk znovu vol\u00e1 ob\u011bti a sna\u017e\u00ed se co nejd\u00e9le udr\u017eet hovor, ani\u017e by ob\u011b\u0165 polo\u017eila sluch\u00e1tko. B\u011bhem tohoto hovoru krom\u011b nahr\u00e1v\u00e1n\u00ed \u0161ifrovan\u00e9ho r\u00e1diov\u00e9ho provozu tak\u00e9 uchov\u00e1v\u00e1 nez\u0161ifrovan\u00fd p\u016fvodn\u00ed zvukov\u00fd sign\u00e1l.<\/p>\n

Pro de\u0161ifrov\u00e1n\u00ed prvn\u00edho hovoru ob\u011bti m\u016f\u017ee \u00fato\u010dn\u00edk na z\u00e1klad\u011b zachycen\u00e9ho \u0161ifrovan\u00e9ho provozu z druh\u00e9ho hovoru a p\u016fvodn\u00edch hlasov\u00fdch \u00fadaj\u016f nahran\u00fdch v \u00fato\u010dn\u00edkov\u011b telefonu vypo\u010d\u00edtat hodnotu kl\u00ed\u010dov\u00e9ho proudu, kter\u00e1 se ur\u010duje pomoc\u00ed operace XOR mezi otev\u0159en\u00fdmi a \u0161ifrovan\u00fdmi daty. Vzhledem k tomu, \u017ee kl\u00ed\u010dov\u00fd proud je opakovan\u011b pou\u017e\u00edv\u00e1n, aplikov\u00e1n\u00edm vypo\u010d\u00edtan\u00e9ho kl\u00ed\u010dov\u00e9ho proudu z druh\u00e9ho hovoru na \u0161ifrovan\u00e1 data prvn\u00edho hovoru m\u016f\u017ee \u00fato\u010dn\u00edk z\u00edskat p\u0159\u00edstup k jeho p\u016fvodn\u00edmu obsahu. \u010c\u00edm d\u00e9le trval druh\u00fd hovor \u00fato\u010dn\u00edka s ob\u011bt\u00ed, t\u00edm v\u00edce informac\u00ed m\u016f\u017ee b\u00fdt de\u0161ifrov\u00e1no z prvn\u00edho hovoru. Nap\u0159\u00edklad pokud se \u00fato\u010dn\u00edkovi poda\u0159ilo prodlou\u017eit hovor na 5 minut, pak bude moci de\u0161ifrovat 5 minut.<\/p>\n

Pro zachycen\u00ed \u0161ifrovan\u00e9ho provozu v \u00e9teru LTE s\u00edt\u00ed v\u00fdzkumn\u00edci pou\u017eili analyz\u00e1tor sign\u00e1lu AirScope<\/a><\/noindex>, and for obtaining the original voice stream during the attacker\u2019s call, Android smartphones controlled via ADB were used, SCAT<\/a><\/noindex>. The cost of the equipment needed to carry out the attack is estimated at 7000 dollars. <\/p>\n


\n
\r\n \"P\u0159ehr\u00e1t\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Base station manufacturers were notified about the issue last December, and most have already published patches to eliminate the vulnerability. However, some operators may have ignored the updates. To check the susceptibility of LTE and 5G networks p\u0159ipraveno<\/a><\/noindex> a special mobile application for the Android 9 platform (requires root access and Qualcomm-based smartphones, such as Xiaomi Mi A3, One Plus 6T, and Xiaomi Mix 3 5G). In addition to determining the presence of vulnerabilities, the application can also be used to capture traffic and view service messages. Captured traffic is saved in PCAP format and can be sent to a user-specified HTTP server for further analysis with standard tools. <\/p>\n

\"ReVoLTE<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Zdroj: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Re­VoL­TE (PDF), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 \u0441\u0435\u0442\u044f\u0445 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 4G\/LTE, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e VoLTE (Voice over LTE). . \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0445 \u0437\u0432\u043e\u043d\u043a\u043e\u0432 \u043e\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0432 VoLTE \u0434\u043b\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u0430. \u0421\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91430,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91429","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ReVoLTE attack that allows intercepting encrypted calls in LTE | ProHoster","description":"A group of researchers from Ruhr University Bochum (Germany) presented a ReVoLTE attack technique (","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 ReVoLTE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 LTE | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Re\u00adVoL\u00adTE (","og:url":"https:\/\/prohoster.info\/cs\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-13T11:42:00+00:00","article:modified_time":"2020-08-13T11:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91429","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:28:26","updated":"2022-09-30 10:24:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/91429","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=91429"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/91429\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/91430"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=91429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=91429"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=91429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}