{"id":36788,"date":"2019-10-31T22:13:49","date_gmt":"2019-10-31T19:13:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novye-uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd\/"},"modified":"2019-10-31T22:13:49","modified_gmt":"2019-10-31T19:13:49","slug":"novye-uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/novye-uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","title":{"rendered":"Uued haavatavused traadita v\u00f5rgu kaitsetehnoloogias WPA3 ja EAP-pwd","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mathy Vanhoef ja Eyal RonenEyal Ronen<\/a><\/noindex>) tuvastasid<\/a><\/noindex> uue r\u00fcnnaku meetodi (CVE-2019-13377), mis v\u00f5imaldab saada teavet parooli omaduste kohta, mida saab kasutada parooli offline-re\u017eiimis murdmiseks. Probleem ilmneb praeguses versioonis Hostapd<\/a><\/noindex>.<\/p>\n

Tuletame meelde, et aprillis tuvastasid samad autorid tuvastatud<\/a><\/noindex> kuus haavatavust WPA3-s, millele vastamiseks tegi Wi-Fi Alliance, mis arendab traadita v\u00f5rkude standardeid, muudatusi WPA3 turvaliste rakenduste soovitustes, kus on ette n\u00e4htud kasutada kaitstud elliptilisi k\u00f5veraid Brainpool<\/a><\/noindex>, asendades varem lubatud elliptilised k\u00f5verad P-521 ja P-256. <\/p>\n

Siiski n\u00e4itas anal\u00fc\u00fcs, et Brainpooli kasutamine toob kaasa uue klassi andmelekkesid k\u00f5rvalkanalite kaudu WPA3 kasutatavas \u00fchenduse l\u00e4bir\u00e4\u00e4kimiste algoritmis Dragonfly<\/a><\/noindex>, pakub<\/a><\/noindex> paroolide offline-re\u017eiimis murdmise kaitset. Tuvastatud probleem t\u00f5estab, et Dragonfly ja WPA3 rakenduste loomine, mis on vabad andmeleketest k\u00f5rvalkanalite kaudu, on \u00e4\u00e4rmiselt keeruline \u00fclesanne, ning n\u00e4itab, et standardite arengute mudel suletud uste taga ilma avaliku diskussioonita soovitatud meetodite ja kogukonna auditi l\u00e4biviimiseks on vale.<\/p>\n

Brainpooli elliptilise k\u00f5vera kasutamisel parooli kodeerimisel Dragonfly algoritmi kaudu tehakse mitmeid eelnevaid iteratsioone parooliga, mis on seotud l\u00fchikese r\u00e4sihashi kiire arvutamisega enne elliptilise k\u00f5vera rakendamise algust. Enne l\u00fchikese r\u00e4sihashi leidmist s\u00f5ltuvad tehtavad toimingud otseselt paroolist ja kliendi MAC-aadressist. Teostusaeg (seondub iteratsioonide arvuga) ja viivitused toimingute vahel eelnevate iteratsioonide k\u00e4igus v\u00f5ivad olla m\u00f5\u00f5detavad ja neid saab kasutada parooli omaduste m\u00e4\u00e4ramiseks, mida saab offline kasutada parooli murdmiseks sobivate osade valiku t\u00e4psustamiseks. R\u00fcnnaku l\u00e4biviimiseks on vajalik juurdep\u00e4\u00e4s kasutaja s\u00fcsteemile, kes \u00fchineb traadita v\u00f5rguga. <\/p>\n

Lisaks leidsid teadlased teise haavatavuse (CVE-2019-13456), mis on seotud teabe lekkeaga protokolli rakenduses. EAP-pwd<\/a><\/noindex>, kasutades Dragonfly algoritmi. Probleem on spetsiifiline FreeRADIUS RADIUS-serverile ning sarnaneb esimese haavatavusega, v\u00f5imaldades oluliselt lihtsustada parooli tuvastamist teabe lekete kaudu kolmandatesse kanalitesse. <\/p>\n

Koos parendatud m\u00fcrade filtreerimise meetodiga m\u00f5\u00f5tmise viibimise osas, et m\u00e4\u00e4rata iteratsioonide arv, on \u00fche MAC-aadressi teste tegemiseks piisav 75 m\u00f5\u00f5tmist. GPU kasutamisel hinnatakse ressursikulu \u00fche s\u00f5nastiku paroolide tuvastamiseks $1-ks. Protokollide turvameetodid, mis v\u00f5imaldavad tuvastatud probleeme blokeerida, on juba sisse viidud tulevaste Wi-Fi standardite mustanditesse (WPA 3.1<\/a><\/noindex>) ja EAP-pwd<\/a><\/noindex>). Kahjuks ei saa ilma tagasitoetavate riistvaraprobleemide lahendamiseta praegustes protokolli versioonides kolmandate osade kanaleid lekkimist k\u00f5rvaldada.<\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef) \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen) \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2019-13377) \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u0437\u0430\u0449\u0438\u0442\u044b WPA3, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a\u0430\u0445 \u043f\u0430\u0440\u043e\u043b\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0435\u0433\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u0432 offline-\u0440\u0435\u0436\u0438\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Hostapd. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 \u0442\u0435\u043c\u0438 \u0436\u0435 \u0430\u0432\u0442\u043e\u0440\u0430\u043c\u0438 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 WPA3, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36788","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Uued haavatavused WPA3 ja EAP-pwd juhtimisprotokollide turvates ja n\u00f5rgendavad | ProHoster","description":"Mathy Vanhoef ja Eyal Ronen tuvastasid.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/novye-uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3 \u0438 \u0432 EAP-pwd | ProHoster","og:description":"\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef) \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen) \u0432\u044b\u044f\u0432\u0438\u043b\u0438.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/novye-uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:13:49+00:00","article:modified_time":"2019-10-31T19:13:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36788","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:50:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:38:25","updated":"2026-01-22 04:50:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36788","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=36788"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36788\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=36788"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=36788"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=36788"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}