{"id":111506,"date":"2023-11-14T21:10:14","date_gmt":"2023-11-14T19:10:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vossozdanie-rsa-klyuchej-cherez-analiz-ssh-soedinenij-k-sbojnym-serveram"},"modified":"2023-11-14T21:10:14","modified_gmt":"2023-11-14T19:10:14","slug":"vossozdanie-rsa-klyuchej-cherez-analiz-ssh-soedinenij-k-sbojnym-serveram","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vossozdanie-rsa-klyuchej-cherez-analiz-ssh-soedinenij-k-sbojnym-serveram","title":{"rendered":"RSA-v\u00f5tmete taastamine SSH-\u00fchenduste kaudu riknenud serveritesse","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kalifornia \u00dclikooli San Diegos asuv teadlaste r\u00fchm demonstreeris v\u00f5imalust taastada SSH-serveri privaatseid RSA-v\u00f5tmeid passiivse SSH-traffiku anal\u00fc\u00fcsi abil. R\u00fcnnak v\u00f5ib toimuda serveritele, kus juhuslikel asjaoludel v\u00f5i r\u00fcndaja tegevuse t\u00f5ttu esinevad rikked, kui toimub digitaalallkirja arvutamine SSH-\u00fchenduse loomise ajal. Rikked v\u00f5ivad olla nii tarkvaralised (matemaatiliste operatsioonide vale t\u00e4itmine, m\u00e4lukahjustus) kui ka riistvaralised (NVRAM ja DRAM t\u00f6\u00f6 vigade v\u00f5i toitekatkestuste korral). <\/p>\n

\u00dcks rikkete stimuleerimise v\u00f5imalusi v\u00f5ivad olla RowHammeri klassi r\u00fcnnakud, mis v\u00f5imaldavad kaugjuhtimisega v\u00f5i JavaScript-koodi t\u00f6\u00f6tlemisel brauseris tekitada \u00fche m\u00e4lubiidi sisu moonutamise intensiivsete andme lugemisringide ajal naaberm\u00e4lu rakkudest. Teine rikkete p\u00f5hjustamise v\u00f5imalus v\u00f5ib tulla haavatavuste \u00e4rakasutamisest, mis p\u00f5hjustavad puhver\u00fclevoolu ja avad andmete kahjustumist m\u00e4lu v\u00f5tmete osas. <\/p>\n

Avaldatud uuringus n\u00e4idatakse, et SSH-s digitaalsete allkirjade puhul, mis p\u00f5hinevad RSA-algoritmil, on digitaalallkirja parameetritele rakendatavad RSA sulgeda v\u00f5tme taasloomise r\u00fcnded Lattice meetodil (Fault Attack), kui allkirjastamisprotsessi ajal esinevad tark- v\u00f5i riistvara t\u00f5rked. Meetodi olemus on selles, et v\u00f5rreldes \u00f5ige ja vigase RSA digitaalallkirjaga on v\u00f5imalik kindlaks teha \u00fchine jagaja, et tuletada v\u00e4lja \u00fcks kahest algarvust, mis on kasutatud v\u00f5tme loomisel. <\/p>\n

RSA kr\u00fcpteerimise aluseks on eksponentsiaalne t\u00f5stmine suure arvu mooduliga. Avalikus v\u00f5tmes on moodul ja eksponent. Moodul luuakse kahe juhusliku algarvu p\u00f5hjal, mis on tuntud ainult sulgeda v\u00f5tme omanikule. R\u00fcnnaku saab rakendada RSA teostustele, mis kasutavad Hiina j\u00e4\u00e4nuste teooriat ja m\u00e4\u00e4ratletud t\u00e4idisrakendusi, nagu PKCS#1 v1.5. <\/p>\n

R\u00fcndamiseks piisab lihtsast legitiimsete \u00fchenduste passiivsest j\u00e4lgimisest SSH-serverile, et tuvastada liikluses eba\u00f5ige digiallkiri, mida saab kasutada teabe allikana privaatse RSA- v\u00f5tme taastamiseks. P\u00e4rast hosti RSA- v\u00f5tme taastamist saab r\u00fcndaja MITM-r\u00fcnnaku k\u00e4igus salaja suunata p\u00e4ringud vale hostile, kes esitleb end kompromiteeritud SSH-serverina, ja korraldada sellel edastatavate andmete pealtkuulamine. server<\/a> andmete. <\/p>\n

Anal\u00fc\u00fcsides kogumiku r\u00f6\u00f6vitud v\u00f5rguandmeid, mis sisaldab umbes 5,2 miljardit SSH-protokolliga seotud kirjete, tuvastasid teadlased ligikaudu 3,2 miljardit avatud hostiv\u00f5tmeid ja digiallkirju, mida kasutati SSH-seansi kokkulepimise ajal. Neist 1,2 miljardit (39,1%) loodi RSA-algoritmi abil. 593671 juhul (0,048%) oli RSA-allkiri rikutud ja ei l\u00e4binud kontrolli. 4962 defektsel allkirjal \u00f5nnestus rakendada Lattice fatoriseerimise meetodit, et tuvastada privaatv\u00f5ti teadaoleva avaliku v\u00f5tme p\u00f5hjal, mis v\u00f5imaldas l\u00f5puks taastada 189 ainulaadset RSA v\u00f5ti paari (paljudel juhtudel kasutati erinevate rikutud allkirjade genereerimiseks samu v\u00f5tmeid ja defektsed seadmeid). V\u00f5tmete taastamiseks kulus umbes 26 tundi protsessoriaega.

\"RSA-v\u00f5tmete<\/center> <\/p>\n

Probleem puudutab ainult spetsiifilisi SSH protokolli rakendusi, mida kasutatakse peamiselt sisseehitatud seadmetes. Probleemsete SSH rakenduste n\u00e4idetena on mainitud Zyxel, Cisco, Mocana ja Hillstone Networks seadmeid. OpenSSH ei ole probleemile vastuv\u00f5tlik, kuna see kasutab v\u00f5tmete genereerimiseks OpenSSL (v\u00f5i LibreSSL) raamatukogu, milles on rikutud rikkeanal\u00fc\u00fcside (Fault Attack) r\u00fcnnakute kaitse alates 2001. aastast. Lisaks on OpenSSH-s ssh-rsa digitaalallkirja skeem (sha1 p\u00f5hjal) 2020. aastast kuulutatud vananenuks ja see on keelatud versioonis 8.8 (rsa-sha2-256 ja rsa-sha2-512 skeemide tugi on s\u00e4ilinud). Potentsiaalselt v\u00f5ib r\u00fcnnak olla rakendatav ka IPsec protokollile, kuid uurijatel ei olnud piisavalt eksperimenteerimise andmeid sellise r\u00fcnnaku praktikas kinnitamiseks.
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432\u044b\u0445 RSA-\u043a\u043b\u044e\u0447\u0435\u0439 SSH-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 SSH. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432 \u0441\u0438\u043b\u0443 \u0441\u0442\u0435\u0447\u0435\u043d\u0438\u044f \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0438\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0441\u0431\u043e\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u0421\u0431\u043e\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043a\u0430\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u043c\u0438 (\u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439, \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438), […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":111507,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-111506","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 RSA v\u00f5tmete loomine SSH-\u00fchenduste anal\u00fc\u00fcsi kaudu rikete korral | ProHoster","description":"Kalifornia \u00dclikooli teadlaste r\u00fchm demonstreeris RSA v\u00f5tmete uuesti loomise v\u00f5imalust SSH-serverites, kasutades SSH liikluse passiivset anal\u00fc\u00fcsi. R\u00fcnnak v\u00f5ib toimuda serverites, kus juhtumite v\u00f5i r\u00fcndaja tegevuse t\u00f5ttu esinevad digitaalse allkirja arvutamise ajal SSH-\u00fchenduse loomisel katkestused. Katkestused v\u00f5ivad olla nii programmeerimist asuvad (eba\u00f5ige matemaatiliste operatsioonide t\u00e4itmine, m\u00e4lu rike),","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vossozdanie-rsa-klyuchej-cherez-analiz-ssh-soedinenij-k-sbojnym-serveram","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 RSA-\u043a\u043b\u044e\u0447\u0435\u0439 \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u0430\u043b\u0438\u0437 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u043a \u0441\u0431\u043e\u0439\u043d\u044b\u043c \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u043f\u0440\u043e\u0434\u0435\u043c\u043e\u043d\u0441\u0442\u0440\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0445\u043e\u0441\u0442\u043e\u0432\u044b\u0445 RSA-\u043a\u043b\u044e\u0447\u0435\u0439 SSH-\u0441\u0435\u0440\u0432\u0435\u0440\u0430, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043f\u0430\u0441\u0441\u0438\u0432\u043d\u044b\u0439 \u0430\u043d\u0430\u043b\u0438\u0437 \u0442\u0440\u0430\u0444\u0438\u043a\u0430 SSH. \u0410\u0442\u0430\u043a\u0430 \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u044b, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432 \u0441\u0438\u043b\u0443 \u0441\u0442\u0435\u0447\u0435\u043d\u0438\u044f \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u0438\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0442 \u0441\u0431\u043e\u0438 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f \u0446\u0438\u0444\u0440\u043e\u0432\u043e\u0439 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u043f\u0440\u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0435 SSH-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f. \u0421\u0431\u043e\u0438 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u043a\u0430\u043a \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u044b\u043c\u0438 (\u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0435 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0439, \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u043f\u0430\u043c\u044f\u0442\u0438),","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/vossozdanie-rsa-klyuchej-cherez-analiz-ssh-soedinenij-k-sbojnym-serveram","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2023-11-14T19:10:14+00:00","article:modified_time":"2023-11-14T19:10:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/111506","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=111506"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/111506\/revisions"}],"predecessor-version":[{"id":173001,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/111506\/revisions\/173001"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/111507"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=111506"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=111506"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=111506"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}