{"id":52697,"date":"2019-11-14T00:00:00","date_gmt":"2019-11-13T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah"},"modified":"2020-02-18T14:00:29","modified_gmt":"2020-02-18T11:00:29","slug":"uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","title":{"rendered":"TPM-Fail ranjivost koja omogu\u0107ava vra\u0107anje klju\u010deva pohranjenih u TPM modulima","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Grupa istra\u017eiva\u010da s Tehnolo\u0161kog sveu\u010dili\u0161ta Worcester, Sveu\u010dili\u0161ta L\u00fcbeck i Sveu\u010dili\u0161ta Kalifornija u San Diegu razvila<\/a><\/noindex> metoda napada putem sporednih kanala koja omogu\u0107ava obnavljanje vrijednosti tajnih klju\u010deva pohranjenih u TPM (Trusted Platform Module). Napad je dobio kodno ime TPM-Fail<\/a><\/noindex> i obuhva\u0107a fTPM (softverska implementacija<\/a><\/noindex> temeljena na firmveru koja radi na zasebnom mikrokontroleru unutar CPU-a) od kompanije Intel (CVE-2019-11090) i hardverske TPM na \u010dipovima STMicroelectronics ST33<\/a><\/noindex> (CVE-2019-16863).<\/p>\n

Istra\u017eiva\u010di objavili<\/a><\/noindex> prototip alata za izvo\u0111enje napada i demonstrirali mogu\u0107nost obnavljanja 256-bitnog tajnog klju\u010da koji se koristi za generiranje digitalnih potpisa kori\u0161tenjem algoritama temeljenih na elipti\u010dnim krivuljama ECDSA i EC-Schnorr. Ovisno o pravima pristupa, ukupno vrijeme napada na sustave Intel fTPM iznosi od 4 do 20 minuta i zahtijeva analizu od 1.000 do 15.000 operacija. Za napad na sustave s \u010dipom ST33 potrebno je oko 80 minuta i analiza oko 40.000 operacija generiranja digitalnog potpisa. <\/p>\n

Istra\u017eiva\u010di su tako\u0111er demonstrirali mogu\u0107nost izvo\u0111enja daljinskog napada u visok brzim mre\u017eama, omogu\u0107uju\u0107i u lokalnoj mre\u017ei s propusno\u0161\u0107u od 1GB pod laboratorijskim uvjetima da za pet sati obnove tajni klju\u010d, nakon mjerenja vremena odaziva za 45.000 sesija autentifikacije s VPN poslu\u017eiteljem temeljenim na softveru strongSwan, koji pohranjuje svoje klju\u010deve u podlo\u017enom ranjivosti TPM-u.<\/p>\n

Metoda napada temelji se na analizi razlika u vremenu izvo\u0111enja operacija tijekom generiranja digitalnog potpisa. Procjena ka\u0161njenja prilikom izvo\u0111enja izra\u010duna omogu\u0107ava identificiranje informacija o pojedinim bitovima tijekom izvr\u0161enja mno\u017eenja sa skalarom prilikom operacija s elipti\u010dnom krivuljom. Za ECDSA, odre\u0111ivanje \u010dak i nekoliko bitova koji sadr\u017ee informacije o vektoru inicijalizacije (nonce) dovoljno je za izvo\u0111enje napada putem postupnog obnavljanja cijelog tajnog klju\u010da. Za uspje\u0161no izvo\u0111enje napada potrebno je analizirati vrijeme generiranja nekoliko tisu\u0107a digitalnih potpisa, stvorenih nad podacima poznatim napada\u010du.<\/p>\n

Ranjivost rije\u0161ena<\/a><\/noindex> tvrtke STMicroelectronics u novoj verziji \u010dipova, u kojima je implementacija ECDSA algoritma oslobo\u0111ena vremenskih korelacija tijekom izvr\u0161enja operacija. Zanimljivo je da su \u010dipovi STMicroelectronics koji su pogo\u0111eni ovim problemom tako\u0111er kori\u0161teni u opremi koja ispunjava sigurnosni nivo CommonCriteria (CC) EAL 4+. Istra\u017eiva\u010di su tako\u0111er provjeravali TPM \u010dipove poduze\u0107a Infineon i Nuvoton, ali u njima nije bilo curenja na temelju promjena vremena izra\u010duna.<\/p>\n

U Intel procesorima problem se javlja od izdavanja obitelji Haswell 2013. godine. Primje\u0107uje se da su pogo\u0111eni \u0161irok spektar prijenosnih ra\u010dunala, PC-a i servera koje proizvode razni proizvo\u0111a\u010di, uklju\u010duju\u0107i Dell, Lenovo i HP.<\/p>\n

Tvrtka Intel je uklju\u010dila ispravak u novembarsko<\/a><\/noindex> a\u017euriranje firmvera, u kojem se osim razmatranog problema otklonjene su<\/a><\/noindex> nalazi jo\u0161 24 ranjivosti, od kojih je devet ozna\u010deno visokom razinom opasnosti, a jedna kriti\u010dnom. Za navedene probleme dostupne su samo op\u0107e informacije, primjerice, spominje se da je kriti\u010dna ranjivost (CVE-2019-0169) uzrokovana mogu\u0107no\u0161\u0107u izazivanja preljevanja memorije u Intel CSME (Converged Security and Management Engine) i Intel TXE (Trusted Execution Engine) okru\u017eenjima, \u0161to omogu\u0107ava napada\u010du pove\u0107anje svojih privilegija i pristup povjerljivim podacima.<\/p>\n

Tako\u0111er se mo\u017ee primijetiti otkrivanje<\/a><\/noindex> rezultati revizije raznih SDK-a za razvoj aplikacija koje komuniciraju s kodom koji se izvr\u0161ava u izoliranim enklavama. S ciljem otkrivanja problemati\u010dnih funkcija koje se mogu koristiti za izvr\u0161avanje napada, ispitano je osam SDK-a: Intel SGX-SDK<\/a><\/noindex>, SGX-LKL<\/a><\/noindex>, Microsoft OpenEnclave<\/a><\/noindex>, Graphene<\/a><\/noindex>,
\nRust-EDP<\/a><\/noindex> i Google Asylo<\/a><\/noindex> za Intel SGX, Keystone<\/a><\/noindex> za RISC-V i Sancus<\/a><\/noindex> za Sancus TEE. Tijekom revizije otkriveno je otkriveno<\/a><\/noindex> 35 ranjivosti, na temelju kojih su razvijeni razli\u010diti scenariji napada koji omogu\u0107avaju izvla\u010denje AES klju\u010deva iz enklave ili organiziranje izvr\u0161avanja vlastitog koda stvaranjem uvjeta za o\u0161te\u0107enje sadr\u017eaja memorije.<\/p>\n

\"TPM-Fail<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Izvor: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0412\u0443\u0441\u0442\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u0438\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043b\u0430 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u043a\u043b\u044e\u0447\u0435\u0439, \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0445 \u0432 TPM (Trusted Platform Module). \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f TPM-Fail \u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 fTPM (\u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u0430\u044f \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f \u043d\u0430 \u0431\u0430\u0437\u0435 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0430\u044f \u043d\u0430 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u043c \u043c\u0438\u043a\u0440\u043e\u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0435 \u0432\u043d\u0443\u0442\u0440\u0438 CPU) \u043e\u0442 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Intel (CVE-2019-11090) \u0438 \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u044b\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":52698,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-52697","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ranjivost TPM-Fail, koja omogu\u0107uje oporavak klju\u010deva pohranjenih u TPM modulima | ProHoster","description":"Grupa istra\u017eiva\u010da s Tehnolo\u0161kog sveu\u010dili\u0161ta Worcester, Sveu\u010dili\u0161ta L\u00fcbeck i Sveu\u010dili\u0161ta Kalifornija u San Diegu","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c TPM-Fail, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u043e\u0441\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043a\u043b\u044e\u0447\u0438, \u0445\u0440\u0430\u043d\u0438\u043c\u044b\u0435 \u0432 TPM-\u043c\u043e\u0434\u0443\u043b\u044f\u0445 | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0412\u0443\u0441\u0442\u0435\u0440\u0441\u043a\u043e\u0433\u043e \u043f\u043e\u043b\u0438\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0438\u043d\u0441\u0442\u0438\u0442\u0443\u0442\u0430, \u041b\u044e\u0431\u0435\u043a\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0438 \u041a\u0430\u043b\u0438\u0444\u043e\u0440\u043d\u0438\u0439\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0421\u0430\u043d-\u0414\u0438\u0435\u0433\u043e","og:url":"https:\/\/prohoster.info\/hr\/blog\/news\/uyazvimost-tpm-fail-pozvolyayushhaya-vosstanovit-klyuchi-hranimye-v-tpm-modulyah","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-11-13T21:00:00+00:00","article:modified_time":"2020-02-18T11:00:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"52697","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 04:30:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:38:25","updated":"2026-01-24 04:30:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/52697","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=52697"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/52697\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/52698"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=52697"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=52697"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=52697"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}