{"id":91429,"date":"2020-08-13T13:42:00","date_gmt":"2020-08-13T11:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte"},"modified":"2020-08-13T13:42:00","modified_gmt":"2020-08-13T11:42:00","slug":"ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","status":"publish","type":"post","link":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","title":{"rendered":"ReVoLTE-angreb, der muligg\u00f8r opsnapning af krypterede opkald i LTE.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En gruppe forskere fra Ruhr-Universit\u00e4t Bochum (Tyskland) har pr\u00e6senteret en angrebsteknik ReVoLTE<\/a><\/noindex> (PDF<\/a><\/noindex>), der g\u00f8r det muligt at opfange krypterede stemmesamtaler i 4G\/LTE mobilnet, som bruger VoLTE-teknologi til at transmittere stemmetrafik (Voice over LTE<\/a><\/noindex>).
\n.<\/p>\n

For at beskytte telefonopkald mod aflytning i VoLTE anvendes der kryptering baseret p\u00e5 en str\u00f8m-kryptering<\/a><\/noindex>. Specifikationen foreskriver at generere en unik n\u00f8glestr\u00f8m for hver session, men som forskerne har afsl\u00f8ret, overholder 12 ud af 15 testede basestationer ikke denne betingelse og genbruger den samme n\u00f8glestr\u00f8m til to p\u00e5 hinanden f\u00f8lgende opkald over \u00e9n radiokanaal eller bruger forudsigelige metoder til at generere en ny sekvens.<\/p>\n

Genbrug af n\u00f8glestr\u00f8mmen g\u00f8r det muligt for en angriber at dekryptere den optagne krypterede trafik fra samtalen. For at udf\u00f8re dekrypteringen af indholdet af stemmeopkaldet opfanger angriberen f\u00f8rst og gemmer den krypterede radiotrafik mellem offeret og den s\u00e5rbare basestation. Efter opkaldet ringer angriberen tilbage til offeret og fors\u00f8ger at forts\u00e6tte samtalen s\u00e5 l\u00e6nge som muligt, uden at offeret kan l\u00e6gge r\u00f8ret p\u00e5. Under denne samtale bliver den krypterede radiotrafik optaget, ligesom det ukrypterede originale lydsignal ogs\u00e5 gemmes.<\/p>\n

For at dekryptere offerets f\u00f8rste opkald kan angriberen p\u00e5 baggrund af den krypterede trafik optaget ved det andet opkald og de originale stemmedata, der er optaget p\u00e5 angriberens telefon, beregne v\u00e6rdien af n\u00f8glestr\u00f8mmen, som bestemmes ved hj\u00e6lp af en XOR-operation mellem de \u00e5bne og krypterede data. Da n\u00f8glestr\u00f8mmen genbruges, kan angriberen ved at anvende den beregnede n\u00f8glestr\u00f8m fra det andet opkald p\u00e5 de krypterede data fra det f\u00f8rste opkald f\u00e5 adgang til dets oprindelige indhold. Jo l\u00e6ngere den anden samtale mellem angriberen og offeret varer, jo mere information kan der dekrypteres fra det f\u00f8rste opkald. For eksempel, hvis angriberen form\u00e5r at forl\u00e6nge samtalen til 5 minutter, vil han ogs\u00e5 kunne dekryptere 5 minutter.<\/p>\n

For at opfange krypteret trafik i LTE-netv\u00e6rk anvendte forskerne en signalanalysator AirScope<\/a><\/noindex>, og til at f\u00e5 den originale stemmestr\u00f8m under angrebets opkald blev der anvendt Android-smartphones styret via ADB og SCAT<\/a><\/noindex>. Udgifterne til det n\u00f8dvendige udstyr for at udf\u00f8re angrebet vurderes til 7000 dollars. <\/p>\n


\n
\r\n \"Afspil\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Producenterne af basestationer blev underrettet om problemet i december sidste \u00e5r, og de fleste har allerede offentliggjort opdateringer for at afhj\u00e6lpe s\u00e5rbarheden. Ikke desto mindre kan nogle operat\u00f8rer have ignoreret opdateringerne. For at kontrollere s\u00e5rbarhed i LTE- og 5G-netv\u00e6rk forberedt<\/a><\/noindex> en speciel mobilapplikation til Android 9-platformen (root-adgang og en smartphone med Qualcomm-chips s\u00e5som Xiaomi Mi A3, One Plus 6T og Xiaomi Mix 3 5G er p\u00e5kr\u00e6vet). Udover at bestemme tilstedev\u00e6relsen af s\u00e5rbarheden kan appen ogs\u00e5 anvendes til trafikaflytning og visning af systemmeddelelser. Den opfangede trafik gemmes i PCAP-format og kan sendes til en brugerdefineret HTTP-server til efterf\u00f8lgende analyse med standardv\u00e6rkt\u00f8jer. <\/p>\n

\"ReVoLTE-angreb,<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Kilde: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Re­VoL­TE (PDF), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 \u0441\u0435\u0442\u044f\u0445 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 4G\/LTE, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e VoLTE (Voice over LTE). . \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0445 \u0437\u0432\u043e\u043d\u043a\u043e\u0432 \u043e\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0432 VoLTE \u0434\u043b\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u0430. \u0421\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91430,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91429","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Angreb ReVoLTE, der giver mulighed for at opsnappe krypterede opkald i LTE | ProHoster","description":"En gruppe forskere fra Ruhr Universitet i Bochum (Tyskland) pr\u00e6senterede angrebsteknikken Re\u00adVoL\u00adTE (","canonical_url":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"da_DK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 ReVoLTE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 LTE | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Re\u00adVoL\u00adTE (","og:url":"https:\/\/prohoster.info\/da\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-13T11:42:00+00:00","article:modified_time":"2020-08-13T11:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91429","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:28:26","updated":"2022-09-30 10:24:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/91429","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/comments?post=91429"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/posts\/91429\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media\/91430"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/media?parent=91429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/categories?post=91429"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/da\/wp-json\/wp\/v2\/tags?post=91429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}