{"id":37225,"date":"2019-10-31T22:16:26","date_gmt":"2019-10-31T19:16:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth\/"},"modified":"2019-10-31T22:16:26","modified_gmt":"2019-10-31T19:16:26","slug":"ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","title":{"rendered":"KNOB napad, koji omogu\u0107uje presretanje \u0161ifriranog Bluetooth prometa","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Otkriveno<\/a><\/noindex> informacije<\/a><\/noindex> o napadu KNOB<\/a><\/noindex> (Key Negotiation Of Bluetooth), koji omogu\u0107ava presretanje i zamjenu informacija u \u0161ifriranom Bluetooth prometu. Imaju\u0107i mogu\u0107nost blokirati izravnu transmisiju paketa tijekom pregovaranja veze Bluetooth ure\u0111aja, napada\u010d mo\u017ee posti\u0107i kori\u0161tenje klju\u010deva koji sadr\u017ee samo 1 bajt entropije za sesiju, \u0161to omogu\u0107ava primjenu metode izravnog ispitivanja (brute-force) za odre\u0111ivanje \u0161ifrirnog klju\u010da. <\/p>\n

Problem je uzrokovan nedostacima (CVE-2019-9506) u specifikaciji Bluetooth BR\/EDR Core 5.1 i ranijim verzijama, koji dopu\u0161taju kori\u0161tenje prekratkih \u0161ifrirnih klju\u010deva i ne sprje\u010davaju intervenciju napada\u010da tijekom pregovaranja veze za povratak na takve nesigurne klju\u010deve (mogu\u0107a je zamjena paketa neautoriziranim napada\u010dem). Napad se mo\u017ee izvesti tijekom pregovaranja veze ure\u0111aja (ve\u0107 uspostavljene sesije ne mogu biti napadnute) i u\u010dinkovit je samo za veze u BR\/EDR modovima (Bluetooth Basic Rate\/Enhanced Data Rate), ako su oba ure\u0111aja podlo\u017ena ranjivosti. U slu\u010daju uspje\u0161nog odabira klju\u010da, napada\u010d mo\u017ee de\u0161ifrirati prenesene podatke i neprimjetno za \u017ertvu izvr\u0161iti zamjenu u prometu proizvoljnih \u0161ifriranih podataka.<\/p>\n

Prilikom uspostavljanja veze izme\u0111u dva Bluetooth kontrolera A i B, kontroler A nakon autentifikacije putem kanalskog klju\u010da (link key) mo\u017ee ponuditi kori\u0161tenje 16 bajtova entropije za \u0161ifrirni klju\u010d (encryption key), a kontroler B se mo\u017ee slo\u017eiti s ovom vrijedno\u0161\u0107u ili navesti manju vrijednost, u slu\u010daju da nije u mogu\u0107nosti generirati klju\u010d predlo\u017eene veli\u010dine. Kao odgovor, kontroler A mo\u017ee prihvatiti povratnu ponudu i aktivirati \u0161ifrirani komunikacijski kanal. U ovoj fazi pregovaranja parametara ne primjenjuje se \u0161ifriranje, pa napada\u010d ima mogu\u0107nost uvu\u0107i se u razmjenu podataka izme\u0111u kontrolera i zamijeniti paket s predlo\u017eenom veli\u010dinom entropije. Budu\u0107i da se dopu\u0161tena veli\u010dina klju\u010da kre\u0107e od 1 do 16 bajtova, drugi kontroler \u0107e prihvatiti tu vrijednost i poslati svoje potvr\u0111ivanje s odgovaraju\u0107om veli\u010dinom.<\/p>\n

\"KNOB<\/a><\/noindex><\/center><\/p>\n

Za reproduciranje ranjivosti u laboratorijskim uvjetima (aktivnost napada\u010da emitirana je na jednom od ure\u0111aja) predlo\u017een je
\nprototip alatnog kompleta<\/a><\/noindex> za izvo\u0111enje napada.
\nZa stvarni napad, napada\u010d mora biti unutar dometa ure\u0111aja \u017ertava i imati mogu\u0107nost kratkoro\u010dnog blokiranja signala svakog ure\u0111aja, \u0161to se predla\u017ee ostvariti manipulacijom signalom ili aktivnim ometanjem. <\/p>\n

Organizacija Bluetooth SIG, odgovorna za razvoj Bluetooth standarda, objavila<\/a><\/noindex> prilagodila je specifikaciju pod brojem 11838, u kojoj su proizvo\u0111a\u010dima predlo\u017eena mjera za blokiranje ranjivosti (minimalna veli\u010dina \u0161ifrirnog klju\u010da pove\u0107ana je sa 1 na 7). Problem javlja se<\/a><\/noindex> le\u017ei sve<\/a><\/noindex> u odgovaraju\u0107im Bluetooth standardnim stablima i Bluetooth \u010dipovima, uklju\u010duju\u0107i proizvode Intel<\/a><\/noindex>, Broadcom, Lenovo<\/a><\/noindex>, Apple<\/a><\/noindex>, Microsoft<\/a><\/noindex>, Qualcomm, Linux, Android<\/a><\/noindex>, Blackberry<\/a><\/noindex> i Cisco<\/a><\/noindex> (od 14 testiranih \u010dipova svi su se pokazali ranjivima). U Bluetooth stablu jezgre Linuxa je unesena<\/a><\/noindex> ispravka omogu\u0107ava izmjenu minimalne veli\u010dine \u0161ifrirnog klju\u010da. <\/p>\n

<\/a><\/noindex><\/p>\n

Izvor: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 KNOB (Key Negotiation Of Bluetooth), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c Bluetooth-\u0442\u0440\u0430\u0444\u0438\u043a\u0435. \u0418\u043c\u0435\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u0443\u044e \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f Bluetooth-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0435\u0430\u043d\u0441\u0430 \u043a\u043b\u044e\u0447\u0435\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442 \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043c\u0435\u0442\u043e\u0434 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 (brute-force) \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u0434\u043e\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u043c\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27914,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37225","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47KNOB napad koji omogu\u0107ava presretanje \u0161ifriranog Bluetooth prometa | ProHoster","description":"Otkriveno","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 KNOB, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a Bluetooth | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:26+00:00","article:modified_time":"2019-10-31T19:16:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37225","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 16:49:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:31:24","updated":"2026-01-23 16:49:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/37225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=37225"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/37225\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/27914"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=37225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=37225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=37225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}