{"id":35134,"date":"2019-10-31T22:02:29","date_gmt":"2019-10-31T19:02:29","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimosti-v-hsm-modulyah-kotorye-mogut-privesti-k-atake-na-klyuchi-shifrovaniya\/"},"modified":"2019-10-31T22:02:29","modified_gmt":"2019-10-31T19:02:29","slug":"uyazvimosti-v-hsm-modulyah-kotorye-mogut-privesti-k-atake-na-klyuchi-shifrovaniya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimosti-v-hsm-modulyah-kotorye-mogut-privesti-k-atake-na-klyuchi-shifrovaniya","title":{"rendered":"HSM-modulite haavatavused, mis v\u00f5ivad viia kr\u00fcpteerimisv\u00f5tmete r\u00fcnnakuni","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Ledgeri uurijate r\u00fchm, mis toodab kr\u00fcptovaluutade riistvarakoldeid, tuvastas<\/a><\/noindex> mitmeid haavatavusi HSM-seadmetes (Hardware Security Module<\/a><\/noindex>), mida saab kasutada v\u00f5tmete v\u00e4ljav\u00f5tmiseks v\u00f5i HSM-seadmestiku p\u00fchendamiseks kaugjuhtimise r\u00fcnnaku kaudu. Probleemist on praegu saadaval teade saadaval<\/noindex> ainult prantsuse keeles, ingliskeelne aruande v\u00e4ljaandmine on plaanis publitseerida<\/a><\/noindex> augustis Blackhat USA 2019 konverentsi ajal. HSM on spetsialiseeritud v\u00e4line seade, mis on ette n\u00e4htud digitaalsete allkirjade genereerimiseks ja andmete kr\u00fcpteerimiseks kasutatavate avalike ja privaatsete v\u00f5tmete hoidmiseks. <\/p>\n

HSM v\u00f5imaldab m\u00e4rkimisv\u00e4\u00e4rselt suurendada kaitset, kuna see isoleerib v\u00f5tmed t\u00e4ielikult s\u00fcsteemist ja rakendustest, pakkudes vaid API-d p\u00f5hikr\u00fcptograafiliste primitiivide t\u00e4itmiseks, mis on rakendatud seadme k\u00fcljes. T\u00fc\u00fcpiliselt kasutatakse HSM-e valdkondades, kus on vaja tagada k\u00f5rgeim kaitse, n\u00e4iteks pankades, kr\u00fcptovaluutab\u00f6rsidel, akrediteerimiskeskustes sertifikaatide ja digitaalsete allkirjade kontrollimiseks ja genereerimiseks.<\/p>\n

Pakutud r\u00fcnnakumeetodid v\u00f5imaldavad autentimata kasutajal saada t\u00e4ieliku kontrolli HSM sisu \u00fcle, sealhulgas v\u00e4ljav\u00f5tta k\u00f5ik seadmes hoitavad kr\u00fcptograafilised v\u00f5tmed ja administraatori mandaadid. Probleemid on p\u00f5hjustatud PKCS#11 sisemise k\u00e4sitlemisseadme m\u00e4lupuhvri \u00fclevoolust ja veast kr\u00fcptograafilise kaitse rakendamisel, mis v\u00f5imaldab l\u00e4bida PKCS#1v1.5 digitaalse allkirjastamise kontrolli ja algatada HSM-i enda p\u00fcsivara laadimist. <\/p>\n

Demona tegemiseks korraldati muudetud p\u00fcsivara laadimine, millele lisati tagumine uks, mis j\u00e4\u00e4b aktiivseks p\u00e4rast edasisi tootja standardsete p\u00fcsivara uuenduste installimist. V\u00e4idetakse, et r\u00fcnnakut saab teha kaugelt (r\u00fcnnakumeetodit ei t\u00e4psustata, kuid t\u00f5en\u00e4oliselt viidatakse laaditava p\u00fcsivara muutmisele v\u00f5i spetsiaalselt vormistatud sertifikaatide t\u00f6\u00f6tlemiseks edastamisele).<\/p>\n

Probleem tuvastati HSM-is rakendatud PKCS#11 k\u00e4skude sisemise teostuse fuzzing-testi k\u00e4igus. Testimine toimus HSM-i oma mooduli laadimise kaudu tavalise SDL abil. Tulemusena avastati PKCS#11 teostuses \u00fcle- v\u00f5i allapoole \u00fclemineku viga, mida saab \u00e4ra kasutada mitte ainult HSM-i sisekeskkonnast, vaid ka HSM-i mooduli \u00fchendatud arvuti peamisest operatsioonis\u00fcsteemist PKCS#11 draiveri kaudu. <\/p>\n

Seej\u00e4rel kasutati \u00fcle- v\u00f5i allapoole \u00fclemineku viga, et k\u00e4ivitada kood HSM-is ja muuta juurdep\u00e4\u00e4suparameetreid. Uuringu k\u00e4igus avastati veel \u00fcks haavatavus, mis v\u00f5imaldab laadida uut firmware'i ilma digitaalallkirjata. L\u00f5ppkokkuv\u00f5ttes kirjutati ja laaditi HSM-i enda moodul, mis v\u00e4ljastab k\u00f5ik HSM-is hoitud saladused.<\/p>\n

Tootja nimi, mille HSM-seadmetes haavatavused tuvastati, ei avalikustata, kuid v\u00e4idetakse, et probleemseadmeid kasutavad m\u00f5ned suured pangad ja pilveteenuse pakkujad. Samuti teatatakse, et teave probleemide kohta oli varem tootjale saadetud ja ta on juba haavatavusi uue firmware'i v\u00e4rskendusega k\u00f5rvaldanud. Iseseisvad uurijad soovitavad, et probleem v\u00f5ib olla ettev\u00f5tte Gemalto seadmetes, mis maikuus vabastas<\/a><\/noindex> Sentinel LDK v\u00e4rskendamine haavatavuste k\u00f5rvaldamisega, mille kohta teave on praegu suleud<\/a><\/noindex>.<\/p>\n<\/ul>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Ledger, \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0435\u0439 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b, \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 HSM (Hardware Security Module), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f \u0438\u0437\u0432\u043b\u0435\u0447\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0435\u0439 \u0438\u043b\u0438 \u0441\u043e\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044f \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0439 \u0430\u0442\u0430\u043a\u0438 \u0434\u043b\u044f \u043f\u043e\u0434\u043c\u0435\u043d\u044b \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438 HSM-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430. \u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0434\u043e\u043a\u043b\u0430\u0434 \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430 \u0444\u0440\u0430\u043d\u0446\u0443\u0437\u0441\u043a\u043e\u043c \u044f\u0437\u044b\u043a\u0435, \u0430\u043d\u0433\u043b\u043e\u044f\u0437\u044b\u0447\u043d\u044b\u0439 \u0434\u043e\u043a\u043b\u0430\u0434 \u043f\u043b\u0430\u043d\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u0442\u044c \u0432 \u0430\u0432\u0433\u0443\u0441\u0442\u0435 \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u043e\u043d\u0444\u0435\u0440\u0435\u043d\u0446\u0438\u0438 Blackhat […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-35134","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Haavatavused HSM-moodulites, mis v\u00f5ivad viia kr\u00fcptimisv\u00f5tmete r\u00fcnnakuni | ProHoster","description":"Ledgeri ettev\u00f5tte uurijate r\u00fchm, kes toodab kr\u00fcptovaluuta riistvara rahakotte, on avastanud mitu.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimosti-v-hsm-modulyah-kotorye-mogut-privesti-k-atake-na-klyuchi-shifrovaniya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 HSM-\u043c\u043e\u0434\u0443\u043b\u044f\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u043a\u043b\u044e\u0447\u0438 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Ledger, \u0432\u044b\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0435\u0439 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 \u043a\u043e\u0448\u0435\u043b\u044c\u043a\u0438 \u0434\u043b\u044f \u043a\u0440\u0438\u043f\u0442\u043e\u0432\u0430\u043b\u044e\u0442\u044b, \u0432\u044b\u044f\u0432\u0438\u043b\u0430 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimosti-v-hsm-modulyah-kotorye-mogut-privesti-k-atake-na-klyuchi-shifrovaniya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:02:29+00:00","article:modified_time":"2019-10-31T19:02:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35134","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 21:59:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:09:54","updated":"2026-01-21 21:59:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35134","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=35134"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35134\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=35134"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=35134"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=35134"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}