{"id":32375,"date":"2019-10-31T21:46:40","date_gmt":"2019-10-31T18:46:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimost-v-chipah-qualcomm-pozvolyayushhaya-izvlech-zakrytye-klyuchi-iz-hranilishha-trustzone\/"},"modified":"2019-10-31T21:46:40","modified_gmt":"2019-10-31T18:46:40","slug":"uyazvimost-v-chipah-qualcomm-pozvolyayushhaya-izvlech-zakrytye-klyuchi-iz-hranilishha-trustzone","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-chipah-qualcomm-pozvolyayushhaya-izvlech-zakrytye-klyuchi-iz-hranilishha-trustzone","title":{"rendered":"Qualcommi kiipide haavatavus, mis v\u00f5imaldab eraldada lukustatud v\u00f5tmed TrustZone'i salvest.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Uuringud tegi NCC Group avalikustas<\/a><\/noindex> \u00fcksikasjad<\/noindex> haavat (CVE-2018-11976<\/a><\/noindex>) Qualcommi kiiprites, mis v\u00f5imaldab ligip\u00e4\u00e4su kr\u00fcpteerimise sulgemise v\u00f5tmete sisu, mis asuvad Qualcomm QSEE-is (Qualcomm Secure Execution Environment), mis p\u00f5hineb ARM TrustZone tehnoloogial. Probleem avaldub enamasti<\/a><\/noindex> Snapdragoni SoC-des, mis on laialdaselt kasutusel Androidi platvormile p\u00f5hinevates nutitelefonides. Probleemi lahendavad parandused on juba on lisatud<\/a><\/noindex> aprillikuu Androidi uuendusse ja uutesse Qualcommi kiipide tarkvaraversioonidesse. Qualcommil kulus paranduse ettevalmistamiseks \u00fcle aasta \u2014 esialgsed teated haavatavuse kohta saadeti Qualcommile juba 19. m\u00e4rtsil 2018.<\/p>\n

Tuletame meelde, et ARM TrustZone tehnoloogia v\u00f5imaldab luua riistvaraliselt isoleeritud turvalisi keskkondi, mis on t\u00e4ielikult eraldatud peamisest s\u00fcsteemist ja t\u00f6\u00f6tavad eraldi virtuaalprotsessoril, kasutades eraldi spetsialiseeritud operatsioonis\u00fcsteemi. TrustZonei peamine eesm\u00e4rk on tagada isoleeritud t\u00f6\u00f6tlemine kr\u00fcpteerimise v\u00f5tmete, biometrilise autentimise, makseandmete ja muude konfidentsiaalsete andmete jaoks. Suhtlemine peamise operatsioonis\u00fcsteemiga toimub kaudselt halduri liidese kaudu. Suletud kr\u00fcpteerimisv\u00f5tmed asuvad riistvaraliselt isoleeritud v\u00f5tmehoidlas, mis \u00f5ige rakendamise korral takistab nende leket juhul, kui peamine s\u00fcsteem on ohustatud.<\/p>\n

Haavatavus on seotud algoritmi defekti t\u00f5ttu, mille tulemusena lekitatakse teavet andmete t\u00f6\u00f6tlemise edenemise kohta. Teadlased t\u00f6\u00f6tasid v\u00e4lja k\u00fclgkanali r\u00fcnnaku tehnika, mis v\u00f5imaldab olemasolevatest kaudsetest lekete kaudu taastada sulgemise v\u00f5tmete sisu, mis asuvad riistvaraliselt isoleeritud Android Keystore<\/a><\/noindex>. Lekkeid tuvastatakse, anal\u00fc\u00fcsides ennustamisploki tegevuse ja andmete juurde p\u00e4\u00e4semise ajalise muutuse aktiivsust. Katse k\u00e4igus demonstreerisid teadlased edukalt 224- ja 256-bitiste ECDSA v\u00f5tmete taastamist riistvaraliselt isoleeritud v\u00f5tmehoidlast, mida kasutati Nexus 5X nutitelefonis. V\u00f5tme taastamiseks oli vajalik genereerida umbes 12 000 digitaalset allkirja, millega kulus enam kui 14 tundi. R\u00fcnnaku l\u00e4biviimiseks kasutati t\u00f6\u00f6riista Cachegrab<\/a><\/noindex>.<\/p>\n

Probleemi peamine p\u00f5hjus on \u00fchiste riistvarakomponentide ja m\u00e4luga jagamine TrustZone'i ja p\u00f5hiss\u00fcsteemi arvutusteks \u2014 isolatsioon on teostatud loogilise jaotuse tasemel, kuid kasutatakse \u00fchiseid arvutusbloke ja j\u00e4\u00e4ke arvutuste j\u00e4lgedest ja aadresside \u00fcleminekute infost jagatud protsessori m\u00e4lus. Prime+Probe meetodi abil, mis p\u00f5hineb vahem\u00e4lu informatsiooni juurdep\u00e4\u00e4su vaatlemisel, saab teatud mustrite olemasolu kaudu m\u00e4lus andmevooge ja koodiga seotud toimingute m\u00e4rke j\u00e4lgida piisava t\u00e4psusega, mis on seotud digitaalsete allkirjade arvutamisega TrustZone'is. <\/p>\n

Enamik ECDSA v\u00f5tmetega digitaalsete allkirjade genereerimise aega Qualcommi kiipides kulub korduvate operaatorite teostamisele kasutades iga allkirja jaoks sama initsialiseerimisvektorit (nonce<\/a><\/noindex>). Kui r\u00fcndajal \u00f5nnestub taastada v\u00e4hemalt m\u00f5ned bitid selle initsialiseerimisvektori kohta, tekib v\u00f5imalus r\u00fcnnata ja j\u00e4rjestikku taastada kogu sulgemise v\u00f5ti. <\/p>\n

Qualcommi puhul on tuvastatud kaks kohaj\u00e4\u00e4ki sellise teabe lekitamise kohas multiplicatsiooni algoritmis: tabelite otsinguoperatsioonide ja tingimusliku andmete v\u00e4ljaotsimise koodi k\u00e4itamisel, p\u00f5hinedes viimasest bitist vektoris 'nonce'. Hoolimata Qualcommi koodis olnud meetmetest teabe lekitamise ennetamiseks kolmandate osapoolte kaudu, v\u00f5imaldab v\u00e4lja arendatud r\u00fcnnakumeetod neid meetmeid m\u00f6\u00f6da minna ja m\u00e4\u00e4rata mitu bitti 'nonce' v\u00e4\u00e4rtusest, millest piisab 256-bitiste ECDSA v\u00f5tmete taastamiseks.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NCC Group \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2018-11976) \u0432 \u0447\u0438\u043f\u0430\u0445 Qualcomm, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u0445 \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0430\u043d\u043a\u043b\u0430\u0432\u0435 Qualcomm QSEE (Qualcomm Secure Execution Environment), \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043d\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ARM TrustZone. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 SoC Snapdragon, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0445 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-32375","post","type-post","status-publish","format-standard","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Haavatavus Qualcommi kiipides, mis v\u00f5imaldab ekstrakti sulgemise v\u00f5tmed TrustZone'i hoidlast | ProHoster","description":"NCC Groupi teadlased paljastasid haavatavuse (CVE-2018-11976) \u00fcksikasjad Qualcommi kiipides, mis v\u00f5imaldab ligip\u00e4\u00e4setud sulgemise v\u00f5tmete sisu, mis asuvad Qualcomm QSEE-is (Qualcomm Secure Execution Environment), mis p\u00f5hineb ARM TrustZone tehnoloogial. Probleem ilmneb enamikes Snapdragoni SoC-des, mis on laialdaselt kasutusel Androidi platvormidele p\u00f5hinevates nutitelefonides. Probleemi lahendavad parandused on juba lisatud aprillikuu uuendusse","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-chipah-qualcomm-pozvolyayushhaya-izvlech-zakrytye-klyuchi-iz-hranilishha-trustzone","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0447\u0438\u043f\u0430\u0445 Qualcomm, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u044c \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0435 \u043a\u043b\u044e\u0447\u0438 \u0438\u0437 \u0445\u0440\u0430\u043d\u0438\u043b\u0438\u0449\u0430 TrustZone | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NCC Group \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0434\u0435\u0442\u0430\u043b\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2018-11976) \u0432 \u0447\u0438\u043f\u0430\u0445 Qualcomm, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f, \u0440\u0430\u0437\u043c\u0435\u0449\u0451\u043d\u043d\u044b\u0445 \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u0430\u043d\u043a\u043b\u0430\u0432\u0435 Qualcomm QSEE (Qualcomm Secure Execution Environment), \u043e\u0441\u043d\u043e\u0432\u0430\u043d\u043d\u043e\u043c \u043d\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 ARM TrustZone. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 SoC Snapdragon, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0438\u0445 \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u0432 \u0441\u043c\u0430\u0440\u0442\u0444\u043e\u043d\u0430\u0445 \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b Android. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, \u0443\u0436\u0435 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0430\u043f\u0440\u0435\u043b\u044c\u0441\u043a\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/uyazvimost-v-chipah-qualcomm-pozvolyayushhaya-izvlech-zakrytye-klyuchi-iz-hranilishha-trustzone","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:46:40+00:00","article:modified_time":"2019-10-31T18:46:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"32375","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 10:33:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:59:30","updated":"2026-01-21 10:33:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/32375","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=32375"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/32375\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=32375"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=32375"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=32375"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}