{"id":31273,"date":"2019-10-31T21:40:23","date_gmt":"2019-10-31T18:40:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vzlom-wpa3-dragonblood\/"},"modified":"2019-10-31T21:40:23","modified_gmt":"2019-10-31T18:40:23","slug":"vzlom-wpa3-dragonblood","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","title":{"rendered":"WPA3 Vulnerability: DragonBlood","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"WPA3
\n
\nAlthough the new WPA3 standard has not yet been fully implemented, security flaws in this protocol allow attackers to compromise Wi-Fi passwords.
\n<\/a><\/noindex>
\nThe Wi-Fi Protected Access III (WPA3) protocol was launched in an attempt to address the technical shortcomings of the WPA2 protocol, which has long been considered unsafe and vulnerable to KRACK attacks (Key Reinstallation Attack). While WPA3 relies on a more secure handshake known as Dragonfly, aimed at protecting Wi-Fi networks from offline dictionary attacks, security researchers Mathy Vanhoef and Eyal Ronen discovered weaknesses in the early implementation of WPA3-Personal, which may allow an attacker to recover Wi-Fi passwords by exploiting timing attacks or side-channel caching.<\/p>\n

\"Attackers can read information that WPA3 was supposed to securely encrypt. This can be used to steal sensitive information such as credit card numbers, passwords, chat messages, emails, and more.\"<\/p><\/blockquote>\n

In a research paper published today research paper<\/a><\/noindex>, titled DragonBlood, researchers examined two types of design flaws in WPA3: the first leads to downgrade attacks, and the second to side-channel leakage.<\/p>\n

Cache-based side-channel attack<\/h3>\n

\nThe password encoding algorithm in Dragonfly, also known as the \"hunting and pecking\" algorithm, contains conditional branches. If an attacker can determine which branch of the if-then-else statement was taken, they can learn if a password element was found in a specific iteration of this algorithm. In practice, it has been shown that if an attacker can run unprivileged code on the victim's computer, it may be possible to use cache-based attacks to ascertain which branch was taken in the first iteration of the password generation algorithm. This information can be used to perform a password splitting attack (similar to an offline dictionary attack).<\/p>\n

This vulnerability is tracked using the identifier CVE-2019-9494.<\/p>\n

Protection involves replacing conditional branches that depend on secret values with constant-time selection utilities. Implementations should also use computation of the L\u00e9ger symbol<\/a><\/noindex> with constant time.<\/p>\n

Side-channel attack based on synchronization<\/h3>\n

\nWhen the Dragonfly handshake uses specific multiplicative groups, the password encoding algorithm uses a variable number of iterations to encode the password. The exact number of iterations depends on the password used and the MAC address of the access point and client. An attacker can perform a remote timing attack on the password encoding algorithm to determine how many iterations were required to encode the password. The recovered information can be used to carry out a password attack similar to an offline dictionary attack.<\/p>\n

To prevent synchronization-based attacks, implementations should disable the vulnerable multiplicative groups. From a technical standpoint, MODP groups 22, 23, and 24 should be disabled. It is also recommended to disable MODP groups 1, 2, and 5.<\/p>\n

This vulnerability is also tracked using the CVE-2019-9494 identifier due to the similarity of the attack implementation.<\/p>\n

WPA3 downgrade<\/h3>\n

\nSince the 15-year-old WPA2 protocol has been widely used by billions of devices, the widespread adoption of WPA3 will not happen overnight. To support older devices, certified WPA3 devices offer a 'transition mode' that can be configured to accept connections using both WPA3-SAE and WPA2.<\/p>\n

Researchers believe that the transition mode is vulnerable to downgrade attacks that attackers can exploit to create a rogue access point that supports only WPA2, causing WPA3-capable devices to connect using the insecure WPA2 four-way handshake.<\/p>\n

\"We also discovered a downgrade attack against the SAE handshake itself ('Simultaneous Authentication of Equals', commonly known as 'Dragonfly'), where we can force a device to use a weaker elliptic curve than usual,\" researchers say.<\/p><\/blockquote>\n

\nMoreover, the 'man-in-the-middle' position is not necessary to carry out a downgrade attack. Instead, attackers need only to know the SSID of the WPA3-SAE network.<\/p>\n

Researchers reported their findings to the Wi-Fi Alliance, a non-profit organization that certifies WiFi standards and products for compliance, which acknowledged the issues and is working with vendors to address existing WPA3-certified devices.<\/p>\n

PoC (as of publication - 404)<\/h3>\n

\nAs a proof of concept, the researchers will soon release four separate tools (in GitHub repositories linked below) that can be used to test vulnerabilities.<\/p>\n

Dragondrain<\/noindex> \u2014 a tool that can check the extent to which an access point is vulnerable to DoS attacks on the WPA3 Dragonfly handshake.
\nDragontime<\/noindex> \u2014 an experimental tool for conducting timing attacks against the Dragonfly handshake.
\nDragonforce<\/a><\/noindex> \u2014 an experimental tool that gathers information to recover from timing attacks and performs password attacks.
\nDragonslayer<\/a><\/noindex> \u2014 a tool that conducts attacks on EAP-pwd.<\/p>\n

Dragonblood: A Security Analysis of WPA3's SAE Handshake<\/a><\/noindex>
\nProject website \u2014 wpa3.mathyvanhoef.com<\/a><\/noindex>
\n
Source: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 WPA3 \u0435\u0449\u0435 \u0442\u043e\u043b\u043a\u043e\u043c \u043d\u0435 \u0432\u0432\u0435\u0434\u0435\u043d \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c Wi-Fi. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b Wi-Fi Protected Access III (WPA3) \u0431\u044b\u043b \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0432 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WPA2, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0433\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0447\u0438\u0442\u0430\u043b\u0441\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0434\u043b\u044f KRACK-\u0430\u0442\u0430\u043a\u0438 (Key Reinstallation Attack). \u0425\u043e\u0442\u044f WPA3 \u043e\u043f\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23239,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31273","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hacking WPA3: DragonBlood | ProHoster","description":"Despite the new WPA3 standard not yet being fully implemented.","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c WPA3: DragonBlood | ProHoster","og:description":"\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 WPA3 \u0435\u0449\u0435 \u0442\u043e\u043b\u043a\u043e\u043c \u043d\u0435 \u0432\u0432\u0435\u0434\u0435\u043d \u0432.","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:40:23+00:00","article:modified_time":"2019-10-31T18:40:23+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31273","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 05:21:38","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:12:48","updated":"2026-01-21 05:21:38","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/31273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=31273"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/31273\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/23239"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=31273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=31273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=31273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}