{"id":111506,"date":"2023-11-14T21:10:14","date_gmt":"2023-11-14T19:10:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vossozdanie-rsa-klyuchej-cherez-analiz-ssh-soedinenij-k-sbojnym-serveram"},"modified":"2023-11-14T21:10:14","modified_gmt":"2023-11-14T19:10:14","slug":"vossozdanie-rsa-klyuchej-cherez-analiz-ssh-soedinenij-k-sbojnym-serveram","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/vossozdanie-rsa-klyuchej-cherez-analiz-ssh-soedinenij-k-sbojnym-serveram","title":{"rendered":"RSA-v\u00f5tmete loomine vigaste serverite SSH-\u00fchenduste anal\u00fc\u00fcsi kaudu","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

California University researchers in San Diego have demonstrated the possibility of reconstructing closed host RSA keys of an SSH server using passive analysis of SSH traffic. An attack can be executed on servers where, due to circumstances or the attacker's actions, failures occur during the computation of the digital signature while establishing an SSH connection. Failures can be either software-related (incorrect execution of mathematical operations, memory damage) or hardware-related (errors in NVRAM and DRAM operation or failures during power interruptions). <\/p>\n

One option for inducing failures could be RowHammer-class attacks, among others, allowing for the remote or browser JavaScript code processing distortion of individual bits of memory through intensive cyclic reading of data from adjacent memory cells. Another potential trigger for failures could be the exploitation of vulnerabilities leading to buffer overflows and damage to key data in memory. <\/p>\n

The published research shows that when using digital signatures based on the RSA algorithm in SSH, attacks to reconstruct RSA private keys using the Lattice method (Fault Attack) are applicable to the parameters of the digital signature in case of software or hardware failures during the signing process. The essence of the method is that by comparing correct and faulty RSA digital signatures, one can determine the greatest common divisor to derive one of the prime numbers used in key formation. <\/p>\n

RSA encryption is based on the operation of exponentiation modulo a large number. The public key contains a modulus and an exponent. The modulus is formed from two random prime numbers, which are known only to the owner of the private key. An attack can be applied to RSA implementations that use the Chinese remainder theorem and deterministic padding schemes such as PKCS#1 v1.5. <\/p>\n

R\u00fcndamiseks piisab passiivsest j\u00e4lgimisest seaduslikest \u00fchendustest SSH-serveriga, kuni avastatakse liikluses rikutud digitaalne allkiri, mida saab kasutada teabeallikana RSA-erakihi taastamiseks. P\u00e4rast hosti RSA-erakihi taastamist saab r\u00fcndaja MITM-r\u00fcnnaku k\u00e4igus m\u00e4rkamatult suunata p\u00e4ringud vale hosti poole, mis kujutab endast kompromiteeritud SSH-serverit, ja korraldada edastatavate andmete pealtkuulamist. server<\/a> andmeid. <\/p>\n

Kogutud pealtkuulatud v\u00f5rgudaatade, mis sisaldavad ligikaudu 5,2 miljardit salvestust SSH-protokolli kasutamise kohta, uurimisel tuvastasid teadlased umbes 3,2 miljardit avatud hosti v\u00f5tit ja digitaalset allkirja, mida kasutati SSH-seansi l\u00e4bir\u00e4\u00e4kimiste ajal. Nendest 1,2 miljardit (39,1%) loodi RSA-algoritmi abil. 593671 juhul (0,048%) oli RSA-allkiri rikutud ja ei l\u00e4binud kontrolli. 4962 rikutud allkirja korral \u00f5nnestus rakendada Lattice faktoriseerimise meetod, et m\u00e4\u00e4rata privaatv\u00f5ti teadaoleva avaliku v\u00f5tme kaudu, mis v\u00f5imaldas l\u00f5puks taastada 189 unikaalset RSA-v\u00f5tme paari (paljudel juhtudel kasutati erinevate rikutud allkirjade genereerimiseks samu v\u00f5tmeid ja rikutud seadmeid). V\u00f5tmete taastamiseks kulus umbes 26 tundi protsessoriaega.

\"RSA-v\u00f5tmete<\/center> <\/p>\n

Probleem puudutab ainult spetsiifilisi SSH-protokolli rakendusi, mida peamiselt kasutatakse sisseehitatud seadmetes. Probleemsete SSH-implementatsioonide n\u00e4idetena on mainitud Zyxel, Cisco, Mocana ja Hillstone Networks tooteid. OpenSSH ei ole probleemile vastuv\u00f5tlik, kuna kasutab v\u00f5tmete genereerimiseks OpenSSL (v\u00f5i LibreSSL) raamatukogu, kus rikkumiste anal\u00fc\u00fcsir\u00fcnnakute (Fault Attack) kaitse on olemas alates 2001. aastast. Lisaks on OpenSSH digitaalallkirjade skeem ssh-rsa (sha1 p\u00f5hjal) alates 2020. aastast kuulutatud aegunuks ja see on v\u00e4lja l\u00fclitatud versioonis 8.8 (skeemide rsa-sha2-256 ja rsa-sha2-512 tugi j\u00e4\u00e4b alles). Potentsiaalselt v\u00f5ib r\u00fcnnak olla rakendatav ka IPsec-protokollile, kuid teadlastel ei olnud piisavalt eksperimentaalseid andmeid, et kinnitada sellist r\u00fcnnakut praktikas.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432\u044b\u0445 RSA-\u043a\u043b\u044e\u0447\u0435\u0439 SSH-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 SSH. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432 \u0441\u0438\u043b\u0443 \u0441\u0442\u0435\u0447\u0435\u043d\u0438\u044f \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0438\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0441\u0431\u043e\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u0421\u0431\u043e\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043a\u0430\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u043c\u0438 (\u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439, \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438), […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":111507,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-111506","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Reconstructing RSA Keys Through Analyzing SSH Connections To Failed Servers | ProHoster","description":"California University researchers in San Diego have demonstrated the ability to reconstruct closed host RSA keys of an SSH server using passive analysis of SSH traffic.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/vossozdanie-rsa-klyuchej-cherez-analiz-ssh-soedinenij-k-sbojnym-serveram","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 RSA-\u043a\u043b\u044e\u0447\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u043a \u0441\u0431\u043e\u0439\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432\u044b\u0445 RSA-\u043a\u043b\u044e\u0447\u0435\u0439 SSH-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 SSH.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/vossozdanie-rsa-klyuchej-cherez-analiz-ssh-soedinenij-k-sbojnym-serveram","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-11-14T19:10:14+00:00","article:modified_time":"2023-11-14T19:10:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/111506","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=111506"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/111506\/revisions"}],"predecessor-version":[{"id":173001,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/111506\/revisions\/173001"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/111507"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=111506"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=111506"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=111506"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}