{"id":52697,"date":"2019-11-14T00:00:00","date_gmt":"2019-11-13T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah"},"modified":"2020-02-18T14:00:29","modified_gmt":"2020-02-18T11:00:29","slug":"uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","title":{"rendered":"TPM-Fail haavatavus, mis v\u00f5imaldab taastada TPM-modulites salvestatud v\u00f5tmeid","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Worcester Polytechnic Institute'i, L\u00fcbecki \u00dclikooli ja California \u00dclikooli San Diegos teadlaste r\u00fchm arendas<\/a><\/noindex> kolmanda osapoole r\u00fcnnakumeetodi, mis v\u00f5imaldab taastada TPM-is (Trusted Platform Module) salvestatud privaatsete v\u00f5tmete v\u00e4\u00e4rtusi. R\u00fcnnak sai nimeks TPM-Fail<\/a><\/noindex> ja see h\u00f5lmab fTPM-i (programmi rakendust<\/a><\/noindex> , mis t\u00f6\u00f6tab eraldi mikroprotsessoril CPU sees) Intelilt (CVE-2019-11090) ja riistvaralist TPM-i STMicroelectronics'i kiipidel ST33<\/a><\/noindex> (CVE-2019-16863).<\/p>\n

Teadlased avalikustasid<\/a><\/noindex> protot\u00fc\u00fcbi r\u00fcnnakut\u00f6\u00f6riistast ja demonstreerisid 256-bitise privaatv\u00f5tme taastamise v\u00f5imalust, mis on loodud digitaalsete allkirjade genereerimiseks elliptiliste k\u00f5verate ECDSA ja EC-Schnorr alusel. S\u00f5ltuvalt \u00f5igustest on Intel fTPM-i s\u00fcsteemide r\u00fcnnaku koguaeg 4-20 minutit ja n\u00f5uab 1-15 tuhat operatsiooni anal\u00fc\u00fcsi. ST33 kiibiga s\u00fcsteemide r\u00fcndamiseks kulub umbes 80 minutit ja vajab umbes 40 tuhande digitaalallkirja genereerimise operatsiooni anal\u00fc\u00fcsi. <\/p>\n

Teadlased demonstreerisid ka eemal r\u00fcndamise v\u00f5imalust k\u00f5rge kiirusaga v\u00f5rkudes, kus kohalikus v\u00f5rgus, mille ribalaius on 1GB, suudeti viie tunni jooksul taastada privaatv\u00f5ti p\u00e4rast 45 tuhande VPN-serveri autentimise sessiooni vastuseaegade m\u00f5\u00f5tmist, kus kasutati strongSwan tarkvara, mis salvestab oma v\u00f5tmeid haavatavas TPM-is.<\/p>\n

R\u00fcnnakumeetod p\u00f5hineb digitaalallkirjade genereerimise operatsioonide t\u00e4itmise aja erinevuste anal\u00fc\u00fcsil. Arvutuste teostamise ajal viivituse hindamine v\u00f5imaldab tuvastada teavet \u00fcksikute bitide kohta skalaarsest korrutamisest elliptikulise k\u00f5veraga. ECDSA puhul on piisav isegi m\u00f5ne bitu teabe m\u00e4\u00e4ramine initsialiseerimise vektori (nonce) kohta, et teostada peaaegu k\u00f5igi privaatv\u00f5tmete j\u00e4rjestikust taastamist. R\u00fcnde edukaks toimetamiseks on vajalik anal\u00fc\u00fcsida mitme tuhande digitaalallkirja genereerimise aega, mis on loodud r\u00fcndajale tuntud andmete alusel.<\/p>\n

Haavatavus on k\u00f5rvaldatud<\/a><\/noindex> STMicroelectronics'i ettev\u00f5te on v\u00e4lja andnud uue versiooni kiipidest, kus ECDSA algoritmi rakendamine on vabastatud toimingute t\u00e4itmise ajaga seotud korrelatsioonidest. Huvi p\u00e4rast, probleemsete STMicroelectronics'i kiipide kasutatakse ka seadmetes, mis vastavad Common Criteria (CC) EAL 4+ turvalisuse tasemele. Uuringud on samuti kontrollinud Infineon'i ja Nuvoton'i TPM-kiipe, kuid neil puudub aegade arvutuste muutumisest tulenev lekkimine.<\/p>\n

Intel'i protsessorites ilmneb probleem alates 2013. aastast toodetavast Haswell'i perekonnast. Probleemi all kannatavad mitmed s\u00fclearvutite, arvutite ja serverite mudelid, mida toodavad erinevad tootjad, sealhulgas Dell, Lenovo ja HP.<\/p>\n

Intel on lisanud paranduse novembri<\/a><\/noindex> firmav\u00e4rkide uuendusse, kus lisaks k\u00e4sitletud probleemile on likvideeritud<\/a><\/noindex> veel 24 haavatavust, millest \u00fcheksal on k\u00f5rge ohtlikkuse tase ja \u00fchel kriitiline. Antud probleemide osas esitatakse vaid \u00fcldteavet, n\u00e4iteks mainitakse, et kriitiline haavatavus (CVE-2019-0169) tuleneb v\u00f5imalusest p\u00f5hjustada m\u00e4lu \u00fclevool Intel CSME (Converged Security and Management Engine) ja Intel TXE (Trusted Execution Engine) keskkondades, mis v\u00f5imaldab r\u00fcndajal oma \u00f5igusi suurendada ja p\u00e4\u00e4seda ligi konfidentsiaalsetele andmetele.<\/p>\n

Samuti v\u00f5ib m\u00e4rkida avamine<\/a><\/noindex> erinevate rakenduste arendamiseks m\u00f5eldud SDK-de auditite tulemusi, mis suhtlevad isoleeritud enclaves\u2019is t\u00f6\u00f6tava koodiga. Probleemsete funktsioonide tuvastamiseks, mis v\u00f5ivad r\u00fcnnakuteks kasutada, uuriti kaheksa SDK-d: Intel SGX-SDK<\/a><\/noindex>, SGX-LKL<\/a><\/noindex>, Microsoft OpenEnclave<\/a><\/noindex>, Graphene<\/a><\/noindex>,
\nRust-EDP<\/a><\/noindex> ja Google Asylo<\/a><\/noindex> Intel SGX-i jaoks, Keystone<\/a><\/noindex> RISC-V jaoks ja Sancus<\/a><\/noindex> Sancus TEE jaoks. Audiidi k\u00e4igus avastati 35 haavatavust, mille alusel on v\u00e4lja t\u00f6\u00f6tatud mitmeid r\u00fcnnakustsenaariume, mis v\u00f5imaldavad AES-v\u00f5tmete v\u00e4ljav\u00f5tmist enclavest v\u00f5i koodi k\u00e4ivitamist, luues tingimusi m\u00e4lu sisu rikkumiseks.<\/a><\/noindex> Samsung l\u00f5petab Linux on DeX toe<\/p>\n

\"TPM-Fail<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Allikas: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0412\u0443\u0441\u0442\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u0438\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0445 \u0432 TPM (Trusted Platform Module). \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f TPM-Fail \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 fTPM (\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u043c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 CPU) \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Intel (CVE-2019-11090) \u0438 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":52698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-52697","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47TPM-Fail, mis v\u00f5imaldab taastada TPM-moodulites hoitavad v\u00f5tmeid | ProHoster","description":"Worcester Polytechnic Institute'i, L\u00fcbecki \u00dclikooli ja California \u00dclikooli San Diegos teadlaste r\u00fchm","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c TPM-Fail, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043b\u044e\u0447\u0438, \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0435 \u0432 TPM-\u043c\u043e\u0434\u0443\u043b\u044f\u0445 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0412\u0443\u0441\u0442\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u0438\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-13T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52697","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:30:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:38:25","updated":"2026-01-24 04:30:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/52697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=52697"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/52697\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/52698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=52697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=52697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=52697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}