{"id":52697,"date":"2019-11-14T00:00:00","date_gmt":"2019-11-13T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah"},"modified":"2020-02-18T14:00:29","modified_gmt":"2020-02-18T11:00:29","slug":"uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","title":{"rendered":"TPM-Fail s\u00e5rbarhed, der g\u00f8r det muligt at gendanne n\u00f8gler, der opbevares i TPM-moduler","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En gruppe forskere fra Worcester Polytechnic Institute, Universitetet i L\u00fcbeck og Universitetet i Californien i San Diego har udviklet<\/a><\/noindex> en angrebsmetode gennem sidekanaler, der g\u00f8r det muligt at genoprette v\u00e6rdien af lukkede n\u00f8gler, der opbevares i TPM (Trusted Platform Module). Angrebet har kodeordet TPM-Fail<\/a><\/noindex> og p\u00e5virker fTPM (softwareimplementering<\/a><\/noindex> baseret p\u00e5 firmware, der k\u00f8rer p\u00e5 en separat mikroprocessor inden for CPU'en) fra Intel (CVE-2019-11090) og hardware TPM'er p\u00e5 chips fra STMicroelectronics ST33<\/a><\/noindex> (CVE-2019-16863).<\/p>\n

Forskerne har offentliggjort<\/a><\/noindex> prototypev\u00e6rkt\u00f8jer til at udf\u00f8re angrebet og demonstrerede muligheden for at genoprette en 256-bit lukket n\u00f8gle, der anvendes til at generere digitale signaturer ved hj\u00e6lp af algoritmer baseret p\u00e5 elliptiske kurver ECDSA og EC-Schnorr. Afh\u00e6ngig af adgangsrettighederne varierer den samlede tid til angreb p\u00e5 Intel fTPM-systemer fra 4-20 minutter og kr\u00e6ver analyse af 1-15 tusinde operationer. For angreb p\u00e5 systemer med ST33-chippen kr\u00e6ves der cirka 80 minutter og analyse af omkring 40 tusinde operationer til generering af digitale signaturer. <\/p>\n

Forskerne demonstrerede ogs\u00e5 muligheden for at udf\u00f8re en fjernangreb i h\u00f8jhastighedsnetv\u00e6rk, hvilket gjorde det muligt at genoprette den lukkede n\u00f8gle i et lokalt netv\u00e6rk med en b\u00e5ndbredde p\u00e5 1GB under laboratoriebetingelser efter fem timer, ved at m\u00e5le svartiden for 45 tusinde autentificeringssessioner med en VPN-server baseret p\u00e5 strongSwan-software, som opbevarer sine n\u00f8gler i det s\u00e5rbare TPM.<\/p>\n

Angrebsmetoden er baseret p\u00e5 at analysere forskelle i udf\u00f8relsestid for operationer under genereringen af digitale signaturer. Vurderingen af forsinkelsen under udf\u00f8relsen af beregningerne g\u00f8r det muligt at bestemme information om enkelte bits under udf\u00f8relsen af multiplikation med skalar ved operationer p\u00e5 elliptiske kurver. For ECDSA er det tilstr\u00e6kkeligt at bestemme blot et par bits med information om initialiseringsvektoren (nonce) for at udf\u00f8re et angreb ved sekventiel genopretning af hele den lukkede n\u00f8gle. For at angrebet skal lykkes, kr\u00e6ves der analyse af genereringstiden for flere tusinde digitale signaturer, der er oprettet over data, som er kendt for angriberen.<\/p>\n

S\u00e5rbarhed er blevet l\u00f8st<\/a><\/noindex> firmaen STMicroelectronics i den nye version af chips, hvor implementeringen af algoritmen ECDSA er blevet frigjort fra tidsrelaterede korrelationer i udf\u00f8relsen af operationer. Det er interessant, at de ber\u00f8rte chips fra STMicroelectronics ogs\u00e5 anvendes i udstyr, der opfylder sikkerhedsniveauet CommonCriteria (CC) EAL 4+. Forskere har ogs\u00e5 unders\u00f8gt TPM-chips fra virksomhederne Infineon og Nuvoton, men der findes ikke l\u00e6kager baseret p\u00e5 tidsberegninger i dem.<\/p>\n

I Intel-processorer viser problemet sig fra familien Haswell, der blev udgivet i 2013. Det er bem\u00e6rket, at et bredt udvalg af b\u00e6rbare computere, PC'er og servere fra forskellige producenter, herunder Dell, Lenovo og HP, er s\u00e5rbare over for problemet.<\/p>\n

Intel har inkluderet en rettelse i novemberopdateringen af firmware, hvorudover det omhandlede problem<\/a><\/noindex> yderligere 24 s\u00e5rbarheder, hvoraf ni er vurderet til h\u00f8j risiko, og \u00e9n til kritisk. Der gives kun generel information om de n\u00e6vnte problemer, for eksempel n\u00e6vnes det, at den kritiske s\u00e5rbarhed (CVE-2019-0169) skyldes muligheden for at for\u00e5rsage et heap-overl\u00f8b i Intel CSME (Converged Security and Management Engine) og Intel TXE (Trusted Execution Engine), hvilket giver en angriber mulighed for at h\u00e6ve sine privilegier og f\u00e5 adgang til fortrolige data. rettet<\/a><\/noindex> resultaterne af revisionen af forskellige SDK'er til udvikling af applikationer, der interagerer med koden, der k\u00f8rer p\u00e5 isolerede enclaves. Med det form\u00e5l at identificere problematiske funktioner, der kan anvendes til angreb, er otte SDK'er blevet unders\u00f8gt:<\/p>\n

It is also worth noting offentligg\u00f8relse<\/a><\/noindex> Intel SGX-SDK SGX-LKL<\/a><\/noindex>, Microsoft OpenEnclave<\/a><\/noindex>, Graphene<\/a><\/noindex>, Rust-EDP<\/a><\/noindex>,
\nGoogle Asylo<\/a><\/noindex> og til Intel SGX,<\/a><\/noindex> til RISC-V og Keystone<\/a><\/noindex> Sancus til Sancus TEE. Under revisionen blev der<\/a><\/noindex> 35 s\u00e5rbarheder, der danner grundlag for flere angrebsscenarier, der muligg\u00f8r udtr\u00e6kning af AES-n\u00f8gler fra enclaven eller organiseret udf\u00f8relse af egen kode ved at skabe betingelser for at beskadige indholdet i hukommelsen. opdaget<\/a><\/noindex> \ud83e\udd47S\u00e5rbarhed TPM-Fail, der muligg\u00f8r genoprettelse af n\u00f8gler, der opbevares i TPM-moduler | ProHoster<\/p>\n

\"TPM-Fail<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0412\u0443\u0441\u0442\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u0438\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0445 \u0432 TPM (Trusted Platform Module). \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f TPM-Fail \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 fTPM (\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u043c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 CPU) \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Intel (CVE-2019-11090) \u0438 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":52698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-52697","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47S\u00e5rbarhed TPM-Fail, der muligg\u00f8r genoprettelse af n\u00f8gler, der opbevares i TPM-moduler | ProHoster","description":"En gruppe forskere fra Worcester Polytechnic Institute, Universitetet i L\u00fcbeck og Universitetet i Californien i San Diego","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c TPM-Fail, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043b\u044e\u0447\u0438, \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0435 \u0432 TPM-\u043c\u043e\u0434\u0443\u043b\u044f\u0445 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0412\u0443\u0441\u0442\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u0438\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-13T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52697","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:30:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:38:25","updated":"2026-01-24 04:30:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/52697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=52697"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/52697\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/52698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=52697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=52697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=52697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}