{"id":37225,"date":"2019-10-31T22:16:26","date_gmt":"2019-10-31T19:16:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth\/"},"modified":"2019-10-31T22:16:26","modified_gmt":"2019-10-31T19:16:26","slug":"ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","title":{"rendered":"KNOB r\u00fcnnak, mis v\u00f5imaldab haarata Bluetoothi kr\u00fcpteeritud liiklust","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Avalikustatud<\/a><\/noindex> teave<\/a><\/noindex> r\u00fcnnaku kohta KNOB<\/a><\/noindex> (Key Negotiation Of Bluetooth), mis v\u00f5imaldab juhtida ja asendada teavet kr\u00fcpteeritud Bluetoothi liikluses. Olles suuteline blokeerima pakettide vahetust Bluetooth-seadmete \u00fchenduse seadistamise protsessi k\u00e4igus, v\u00f5ib r\u00fcndaja tagada, et seansi jaoks kasutatakse v\u00f5tmeid, mis sisaldavad vaid 1 bait entroopiat, v\u00f5imaldades rakendada j\u00f5hkruse (brute-force) meetodit kr\u00fcpteerimisv\u00f5tme tuvastamiseks. <\/p>\n

Probleem tuleneb Bluetooth BR\/EDR Core 5.1 ja varasemate versioonide spetsifikatsioonide (CVE-2019-9506) vajakaj\u00e4\u00e4mislest, mis lubavad kasutada liiga l\u00fchikesi kr\u00fcpteerimisv\u00f5tmeid ja ei takista r\u00fcndaja sekkumist \u00fchenduse kehtestamise ajal selliste ebat\u00e4psete v\u00f5tmete tagasiviimiseks (v\u00f5ib olla pakettide asendamine autentimata r\u00fcndaja poolt). R\u00fcnnak v\u00f5ib aset leida seadmete \u00fchenduse kehtestamise ajal (juba loodud seansse ei saa r\u00fcnnata) ja on t\u00f5hus ainult BR\/EDR re\u017eiimide \u00fchenduste puhul (Bluetooth Basic Rate\/Enhanced Data Rate), kui m\u00f5lemad seadmed on haavatavad. Kui r\u00fcndaja suudab v\u00f5tme \u00f5igesti koguda, v\u00f5ib ta dekr\u00fcpteerida edastatavad andmed ja m\u00e4rkamatult asendada j\u00f5udnud liiklust meelevaldse kr\u00fcpteeritud tekstiga.<\/p>\n

Kahe Bluetooth-kontrolleri A ja B vahelise \u00fchenduse loomisel v\u00f5ib kontroller A p\u00e4rast kanaliv\u00f5tme (link key) autentimist pakkuda kr\u00fcpteerimisv\u00f5tme (encryption key) jaoks 16 bitti entropiat. Kontroller B v\u00f5ib selle v\u00e4\u00e4rtuse vastu v\u00f5tta v\u00f5i pakkuda v\u00e4iksemat v\u00e4\u00e4rtust, kui tal ei ole v\u00f5imalik soovitatud suurust genereerida. Vastuseks v\u00f5ib kontroller A n\u00f5ustuda vastupakkumisega ja aktiveerida kr\u00fcpteeritud suhtluskanali. Selles parameetrite kokkuleppe etapis kr\u00fcpteerimist ei rakendata, mist\u00f5ttu on r\u00fcndajal v\u00f5imalus sekkuda kontrollerite vaheline andmevahetusse ja asendada pakett soovitatud entropia suurusega. Kuna lubatud v\u00f5tme suurus varieerub vahemikus 1 kuni 16 bitti, aktsepteerib teine kontroller selle v\u00e4\u00e4rtuse ja saadab oma kinnituse sama suuruse n\u00e4itamisega.<\/p>\n

\"KNOB<\/a><\/noindex><\/center><\/p>\n

Haavatavuse reprodutseerimiseks laboratoorsetes tingimustes (kurjategija tegevus emiteeriti \u00fchel seadmel) on v\u00e4lja pakutud
\nprotot\u00fc\u00fcp t\u00f6\u00f6riistade komplekt<\/a><\/noindex> r\u00fcnnaku l\u00e4biviimiseks.
\nT\u00f5elise r\u00fcnnaku korral peab r\u00fcndaja olema ohvrite seadmete vastuv\u00f5tu piirkonnas ja olema v\u00f5imeline l\u00fchiajaliselt blokeerima iga seadme signaali, mida pakutakse teostamiseks signaali manipuleerimise v\u00f5i reaktiivse segamise kaudu. <\/p>\n

Bluetoothi standardite arendamise eest vastutav organisatsioon Bluetooth SIG, avalikustasin<\/a><\/noindex> on kohandanud spetsifikatsiooni numbri 11838, milles tootjatele on soovitatud meetmed haavatavuse blokeerimiseks (kr\u00fcpteerimise minimaalse v\u00f5tme suurus on t\u00f5stetud 1-lt 7-le). Probleem n\u00e4itab ennast<\/a><\/noindex> vastavates Bluetoothi standarditele ja Bluetoothi kiipide p\u00fcsivarades, sealhulgas toodetes keskkondades ja projekti klastrites. Selline p\u00f5him\u00f5te on \u00f5ige<\/a><\/noindex> , Broadcom, Intel<\/a><\/noindex>, Qualcomm, Linux, Lenovo<\/a><\/noindex>, Apple<\/a><\/noindex>, Microsoft<\/a><\/noindex>Blackberry Android<\/a><\/noindex>, 14 testitud kiibist osutusid k\u00f5ik haavatavaks). Linuxi s\u00fcdamiku Bluetoothi sokkel<\/a><\/noindex> ja Cisco<\/a><\/noindex> parandus, mis v\u00f5imaldab muuta kr\u00fcpteerimise minimaalset v\u00f5tme suurust. on sisse viidud<\/a><\/noindex> parandus, mis v\u00f5imaldab muuta kr\u00fcptov\u00f5tmestandardite minimaalset suurust. <\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 KNOB (Key Negotiation Of Bluetooth), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c Bluetooth-\u0442\u0440\u0430\u0444\u0438\u043a\u0435. \u0418\u043c\u0435\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u0443\u044e \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f Bluetooth-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0435\u0430\u043d\u0441\u0430 \u043a\u043b\u044e\u0447\u0435\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442 \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043c\u0435\u0442\u043e\u0434 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 (brute-force) \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u0434\u043e\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u043c\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27914,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37225","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-novosti-interneta"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 KNOB r\u00fcnnak, mis v\u00f5imaldab nuhkida \u0161ifreeritud Bluetooth-i liiklust | ProHoster","description":"K\u00e4tkekuulutused KNOB (Key Negotiation Of Bluetooth) r\u00fcnnakust, mis v\u00f5imaldab nuhkida ja asendada teavet \u0161ifreeritud Bluetooth-i liikluses. Olles suuteline blokeerima otsepakettide edastamise Bluetooth-seadmete \u00fchendamise protsessi ajal, v\u00f5ib r\u00fcndaja saavutada seansi jaoks v\u00f5tmete kasutamise, mis sisaldavad vaid 1 bait entropiat, mis v\u00f5imaldab rakendada j\u00f5hkr\u00f5\u00f5pmise meetodit (brute-force) \u0161ifriv\u00f5tme m\u00e4\u00e4ramiseks. Probleem tuleneb puudulikest lahendustest.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 KNOB, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a Bluetooth | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 KNOB (Key Negotiation Of Bluetooth), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c Bluetooth-\u0442\u0440\u0430\u0444\u0438\u043a\u0435. \u0418\u043c\u0435\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u0443\u044e \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f Bluetooth-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0435\u0430\u043d\u0441\u0430 \u043a\u043b\u044e\u0447\u0435\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442 \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043c\u0435\u0442\u043e\u0434 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 (brute-force) \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u0434\u043e\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u043c\u0438","og:url":"https:\/\/prohoster.info\/et\/blog\/novosti-interneta\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:26+00:00","article:modified_time":"2019-10-31T19:16:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37225","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 16:49:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:31:24","updated":"2026-01-23 16:49:21"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/37225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=37225"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/37225\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/27914"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=37225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=37225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=37225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}