{"id":31424,"date":"2019-10-31T21:41:11","date_gmt":"2019-10-31T18:41:11","guid":{"rendered":"https:\/\/prohoster.info\/blog\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd\/"},"modified":"2019-10-31T21:41:11","modified_gmt":"2019-10-31T18:41:11","slug":"uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","title":{"rendered":"A WPA3 vezet\u00e9k n\u00e9lk\u00fcli h\u00e1l\u00f3zati v\u00e9delmet \u00e9rint\u0151 sebezhet\u0151s\u00e9gek \u00e9s az EAP-pwd","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Mathy Vanhoef, a researcher behind the KRACK attack on wireless networks with WPA2, and Eyal Ronen, co-author of several TLS attacks, have revealed details about six vulnerabilities (CVE-2019-9494 \u2014 CVE-2019-9499) in the WPA3 wireless network security technology. These vulnerabilities allow for the recreation of connection passwords and access to wireless networks without knowing the password. The vulnerabilities are collectively named Dragonblood and compromise the Dragonfly connection negotiation method, which is designed to prevent offline password guessing. In addition to WPA3, the Dragonfly method is also used to protect against dictionary attacks in the EAP-pwd protocol, utilized in Android, RADIUS servers, and hostapd\/wpa_supplicant.<\/p>\n<p>A kutat\u00e1s sor\u00e1n k\u00e9t f\u0151 architektur\u00e1lis probl\u00e9mat\u00edpust azonos\u00edtottak a WPA3-ban. Mindk\u00e9t probl\u00e9ma v\u00e9gs\u0151 soron felhaszn\u00e1lhat\u00f3 a hozz\u00e1f\u00e9r\u00e9si jelsz\u00f3 vissza\u00e1ll\u00edt\u00e1s\u00e1ra. Az els\u0151 t\u00edpus lehet\u0151v\u00e9 teszi a visszav\u00e1lt\u00e1st megb\u00edzhatatlan kriptogr\u00e1fiai m\u00f3dszerekre (downgrade attack): a WPA2-vel val\u00f3 kompatibilit\u00e1s \u00e9rdek\u00e9ben haszn\u00e1lt eszk\u00f6z\u00f6k (\u00e1tmeneti m\u00f3d, amely WPA2 \u00e9s WPA3 haszn\u00e1lat\u00e1t is megengedi) lehet\u0151v\u00e9 teszik a t\u00e1mad\u00f3 sz\u00e1m\u00e1ra, hogy a klienst r\u00e1vil\u00e1g\u00edtson a WPA2 n\u00e9gyl\u00e9pcs\u0151s \u00f6sszekapcsol\u00e1si protokollra, amely lehet\u0151v\u00e9 teszi a klasszikus jelsz\u00f3pr\u00f3b\u00e1l\u00f3 t\u00e1mad\u00e1sok alkalmaz\u00e1s\u00e1t, amelyek a WPA2-re vonatkoznak. Ezen k\u00edv\u00fcl felfedezt\u00e9k a downgrade t\u00e1mad\u00e1s lehet\u0151s\u00e9g\u00e9t k\u00f6zvetlen\u00fcl a Dragonfly \u00f6sszekapcsol\u00e1si m\u00f3dszerre, amely lehet\u0151v\u00e9 teszi a visszav\u00e1lt\u00e1st kev\u00e9sb\u00e9 v\u00e9dett elliptikus g\u00f6rb\u00e9k haszn\u00e1lat\u00e1ra.<\/p>\n<p>A m\u00e1sodik probl\u00e9ma t\u00edpusa az inform\u00e1ci\u00f3s sziv\u00e1rg\u00e1st okozza az alternat\u00edv csatorn\u00e1kon, a jelsz\u00f3 jellemz\u0151ir\u0151l sz\u00f3l\u00f3 inform\u00e1ci\u00f3kat vonva be, ami a Dragonfly jelsz\u00f3csere-m\u00f3dszer hib\u00e1ib\u00f3l ered, amelyek lehet\u0151v\u00e9 teszik, hogy k\u00f6zvetett adatok, mint p\u00e9ld\u00e1ul az elj\u00e1r\u00e1sok v\u00e9grehajt\u00e1sakor tapasztalt k\u00e9sleked\u00e9sek v\u00e1ltoz\u00e1sa, seg\u00edts\u00e9g\u00e9vel rekonstru\u00e1lj\u00e1k az eredeti jelsz\u00f3t. A Dragonfly-ban haszn\u00e1lt hash-\u00e1talak\u00edt\u00f3 algoritmus, amely elliptikus g\u00f6rb\u00e9ket k\u00e9pez (hash-to-curve), \u00e9rz\u00e9keny a processzork\u00e9szletbe t\u00f6rt\u00e9n\u0151 inform\u00e1ci\u00f3s sziv\u00e1rg\u00e1sra (cache attack), m\u00edg a hash-\u00e1talak\u00edt\u00f3 algoritmus csoportba (hash-to-group) id\u0151m\u00e9r\u00e9ses t\u00e1mad\u00e1soknak van kit\u00e9ve (timing attack).<\/p>\n<p> A t\u00e1mad\u00f3nak, aki a cache elemz\u00e9s\u00e9n kereszt\u00fcl t\u00e1mad\u00e1sokat k\u00edv\u00e1n v\u00e9grehajtani, k\u00e9pesnek kell lennie arra, hogy jogosulatlan k\u00f3dot futtasson a felhaszn\u00e1l\u00f3i rendszeren, aki csatlakozik a vezet\u00e9k n\u00e9lk\u00fcli h\u00e1l\u00f3zathoz. Mindk\u00e9t m\u00f3dszer lehet\u0151v\u00e9 teszi az inform\u00e1ci\u00f3k megszerz\u00e9s\u00e9t, amelyek sz\u00fcks\u00e9gesek a jelsz\u00f3 r\u00e9szleteinek pontos kiv\u00e1laszt\u00e1s\u00e1hoz a jelsz\u00f3 kital\u00e1l\u00e1s\u00e1nak folyamata sor\u00e1n. A t\u00e1mad\u00e1s hat\u00e9konys\u00e1ga el\u00e9g magas, \u00e9s lehet\u0151v\u00e9 teszi egy 8 karakteres jelsz\u00f3, amely kisbet\u0171s karaktereket tartalmaz, kital\u00e1l\u00e1s\u00e1t mind\u00f6ssze 40 csatlakoz\u00e1si handshake megszerz\u00e9s\u00e9vel, \u00e9s olyan er\u0151forr\u00e1sok felhaszn\u00e1l\u00e1s\u00e1val, amelyek egyen\u00e9rt\u00e9k\u0171ek az Amazon EC2 125 doll\u00e1ros b\u00e9rl\u00e9s\u00e9vel. <\/p>\n<p>A felfedezett sebezhet\u0151s\u00e9gek alapj\u00e1n t\u00f6bb t\u00e1mad\u00e1si forgat\u00f3k\u00f6nyvet javasoltak:<\/p>\n<ul>\n<li class=\"l\"> WPA2 visszamin\u0151s\u00edt\u0151 t\u00e1mad\u00e1s, amely lehet\u0151v\u00e9 teszi a sz\u00f3t\u00e1r alap\u00fa kital\u00e1l\u00e1st. Olyan k\u00f6r\u00fclm\u00e9nyek k\u00f6z\u00f6tt, amikor a kliens \u00e9s a hozz\u00e1f\u00e9r\u00e9si pont t\u00e1mogatja mind a WPA3, mind a WPA2-t, a t\u00e1mad\u00f3 l\u00e9trehozhat egy saj\u00e1t hamis hozz\u00e1f\u00e9r\u00e9si pontot, amely ugyanazzal a h\u00e1l\u00f3zati n\u00e9vvel rendelkezik, \u00e9s csak WPA2-t t\u00e1mogat. Ilyen helyzetben a kliens a WPA2-re jellemz\u0151 csatlakoz\u00e1si elj\u00e1r\u00e1st alkalmazza, amely sor\u00e1n meg\u00e1llap\u00edtj\u00e1k, hogy a visszamin\u0151s\u00edt\u00e9s elfogadhatatlan, de ezt akkor v\u00e9gzik el, amikor a csatorna k\u00e9zfog\u00e1sr\u00f3l sz\u00f3l\u00f3 \u00fczeneteket m\u00e1r elk\u00fcldt\u00e9k, \u00e9s az \u00f6sszes sz\u00fcks\u00e9ges inform\u00e1ci\u00f3, amely a sz\u00f3t\u00e1r alap\u00fa t\u00e1mad\u00e1shoz sz\u00fcks\u00e9ges, m\u00e1r kisziv\u00e1rgott. Hasonl\u00f3 m\u00f3dszer alkalmazhat\u00f3 a probl\u00e9m\u00e1s elliptikus g\u00f6rb\u00e9k SAE-re val\u00f3 visszamin\u0151s\u00edt\u00e9s\u00e9re is.\n<p>Furthermore, it has been found that the iwd daemon, developed by Intel as an alternative to wpa_supplicant, and the wireless stack of the Samsung Galaxy S10 are vulnerable to downgrade attacks even in networks that use only WPA3 \u2014 if these devices have previously connected to a WPA3 network, they will attempt to connect to a forged WPA2 network with the same name.<\/p>\n<li class=\"l\"> Oldalcsatorn\u00e1kon v\u00e9gzett t\u00e1mad\u00e1s a processzor gyors\u00edt\u00f3t\u00e1r\u00e1b\u00f3l t\u00f6rt\u00e9n\u0151 adatkinyer\u00e9ssel. A Dragonfly jelsz\u00f3-k\u00f3dol\u00f3 algoritmus\u00e1ban felt\u00e9telezett el\u00e1gaz\u00e1s tal\u00e1lhat\u00f3, \u00e9s a t\u00e1mad\u00f3, aki k\u00e9pes k\u00f3dot v\u00e9grehajtani a felhaszn\u00e1l\u00f3 vezet\u00e9k n\u00e9lk\u00fcli h\u00e1l\u00f3zat\u00e1ban, az gyors\u00edt\u00f3t\u00e1raz\u00e1si viselked\u00e9s elemz\u00e9se alapj\u00e1n meghat\u00e1rozhatja, hogy melyik if-then-else kifejez\u00e9s blokkja ker\u00fclt kiv\u00e1laszt\u00e1sra. Az \u00edgy nyert inform\u00e1ci\u00f3 a jelsz\u00f3 fokozatos kital\u00e1l\u00e1s\u00e1hoz haszn\u00e1lhat\u00f3, olyan m\u00f3dszereket alkalmazva, amelyek hasonl\u00edtanak a WPA2 jelszavak offline t\u00e1mad\u00e1sainak v\u00e9grehajt\u00e1s\u00e1ra. A v\u00e9delem \u00e9rdek\u00e9ben javasolt \u00e1lland\u00f3 v\u00e9grehajt\u00e1si id\u0151tartam\u00fa m\u0171veletekre \u00e1tt\u00e9rni, f\u00fcggetlen\u00fcl az feldolgozott adatok jelleg\u00e9t\u0151l;\n<li class=\"l\"> Oldalcsatorn\u00e1kon v\u00e9gzett t\u00e1mad\u00e1s az oper\u00e1ci\u00f3k v\u00e9grehajt\u00e1si idej\u00e9nek \u00e9rt\u00e9kel\u00e9s\u00e9vel. A jelszavak k\u00f3dol\u00e1sakor a Dragonfly k\u00f3dban t\u00f6bb szorz\u00e1si csoport (MODP) \u00e9s v\u00e1ltoz\u00f3 sz\u00e1m\u00fa iter\u00e1ci\u00f3 alkalmaz\u00e1s\u00e1ra ker\u00fcl sor, amely a haszn\u00e1lt jelsz\u00f3t\u00f3l \u00e9s a hozz\u00e1f\u00e9r\u00e9si pont vagy kliens MAC-c\u00edm\u00e9t\u0151l f\u00fcgg. A t\u00e1voli t\u00e1mad\u00f3 meghat\u00e1rozhatja, hogy h\u00e1ny iter\u00e1ci\u00f3t hajtottak v\u00e9gre a jelsz\u00f3 k\u00f3dol\u00e1sa sor\u00e1n, \u00e9s ezeket a fokozatos jelsz\u00f3keres\u00e9s sor\u00e1n mint jelz\u0151t haszn\u00e1lhatja.\n<li class=\"l\"> Szolg\u00e1ltat\u00e1smegtagad\u00e1si t\u00e1mad\u00e1s. A t\u00e1mad\u00f3 blokkolhatja a hozz\u00e1f\u00e9r\u00e9si pont bizonyos funkci\u00f3it az el\u00e9rhet\u0151 er\u0151forr\u00e1sok kimer\u00edt\u00e9se r\u00e9v\u00e9n, nagy sz\u00e1m\u00fa csatornaegyeztet\u00e9si k\u00e9r\u00e9s k\u00fcld\u00e9s\u00e9vel. A WPA3 v\u00e9delme elleni \u00e1rv\u00edzmegold\u00e1shoz elegend\u0151, hogy hamis, meg nem ism\u00e9tl\u0151d\u0151 MAC-c\u00edmekr\u0151l k\u00fcldj\u00f6n k\u00e9r\u00e9seket.\n<li class=\"l\">  Visszal\u00e9p\u00e9s a kev\u00e9sb\u00e9 v\u00e9dett kriptogr\u00e1fiai csoportokhoz, amelyeket a WPA3 kapcsolatok egyeztet\u00e9se sor\u00e1n haszn\u00e1lnak. P\u00e9ld\u00e1ul, ha a kliens t\u00e1mogatja az elliptikus g\u00f6rb\u00e9ket P-521 \u00e9s P-256, \u00e9s a P-521-et priorit\u00e1sk\u00e9nt haszn\u00e1lja, a t\u00e1mad\u00f3, f\u00fcggetlen\u00fcl a hozz\u00e1f\u00e9r\u00e9si pont oldal\u00e1n tal\u00e1lhat\u00f3 P-521 t\u00e1mogat\u00e1s\u00e1t\u00f3l, k\u00e9nyszer\u00edtheti a klienst a P-256 haszn\u00e1lat\u00e1ra. A t\u00e1mad\u00e1s \u00fagy val\u00f3sul meg, hogy bizonyos \u00fczeneteket kisz\u0171rnek a kapcsolat egyeztet\u00e9se sor\u00e1n, \u00e9s hamis \u00fczeneteket k\u00fcldenek arr\u00f3l, hogy bizonyos t\u00edpus\u00fa elliptikus g\u00f6rb\u00e9k t\u00e1mogat\u00e1sa nem \u00e1ll rendelkez\u00e9sre.<br \/>\nA sebezhet\u0151s\u00e9gek ellen\u0151rz\u00e9s\u00e9re t\u00f6bb szkriptet k\u00e9sz\u00edtettek a t\u00e1mad\u00e1sok elk\u00f6vet\u00e9s\u00e9re vonatkoz\u00f3 p\u00e9ld\u00e1kkal:<\/p>\n<\/ul>\n<p>Dragonslayer \u2014 EAP-pwd t\u00e1mad\u00e1sok megval\u00f3s\u00edt\u00e1sa;<\/p>\n<ul>\n<li class=\"l\"> Dragonslayer \u2014 implementation of attacks on EAP-pwd;\n<li class=\"l\"> Dragondrain \u2014 a tool for checking the vulnerability of access points in the implementation of the SAE (Simultaneous Authentication of Equals) connection negotiation method, which can be used to initiate a denial of service;\n<li class=\"l\"> Dragontime \u2014 a script for conducting side-channel attacks against SAE, taking into account the timing differences in operation processing when using MODP groups 22, 23, and 24;\n<li class=\"l\"> Dragonforce \u2014 a utility for information recovery (password cracking) based on variations in operation processing times or determining data retention in cache.\n<\/ul>\n<p>A Wi-Fi Sz\u00f6vets\u00e9g, amely a vezet\u00e9k n\u00e9lk\u00fcli h\u00e1l\u00f3zatok szabv\u00e1nyait fejleszti, bejelentette, hogy a hiba egy korai WPA3-Personal megval\u00f3s\u00edt\u00e1st \u00e9rint, \u00e9s firmware- \u00e9s szoftverfriss\u00edt\u00e9ssel orvosolhat\u00f3. Jelenleg m\u00e9g nem \u00e9szleltek olyan k\u00e1rt\u00e9kony tev\u00e9kenys\u00e9geket, amelyek a s\u00e9r\u00fcl\u00e9kenys\u00e9gek kihaszn\u00e1l\u00e1s\u00e1ra \u00e9p\u00edten\u00e9nek. A v\u00e9delem fokoz\u00e1sa \u00e9rdek\u00e9ben a Wi-Fi Sz\u00f6vets\u00e9g kieg\u00e9sz\u00edt\u0151 teszteket adott a vezet\u00e9k n\u00e9lk\u00fcli eszk\u00f6z\u00f6k tan\u00fas\u00edt\u00e1si programj\u00e1hoz a megval\u00f3s\u00edt\u00e1sok helyess\u00e9g\u00e9nek ellen\u0151rz\u00e9s\u00e9re, valamint kapcsolatba l\u00e9pett az eszk\u00f6zgy\u00e1rt\u00f3kkal az azonos\u00edtott probl\u00e9m\u00e1k k\u00f6z\u00f6s koordin\u00e1ci\u00f3j\u00e1nak \u00e9rdek\u00e9ben. A probl\u00e9m\u00e1k orvosl\u00e1s\u00e1ra m\u00e1r kiadtak jav\u00edt\u00f3csomagokat a hostap\/wpa_supplicant sz\u00e1m\u00e1ra. Ubuntu-ra el\u00e9rhet\u0151k a csomagfriss\u00edt\u00e9sek. Debian, RHEL, SUSE\/openSUSE, Arch, Fedora \u00e9s FreeBSD eset\u00e9ben a probl\u00e9m\u00e1k eddig megoldatlanok maradtak.<br \/>\n<br \/>Forr\u00e1s: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50493\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef), \u0430\u0432\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 KRACK \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441 WPA2, \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen), \u0441\u043e\u0430\u0432\u0442\u043e\u0440 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 TLS, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2019-9494 &#8212; CVE-2019-9499) \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0445 \u0432\u043e\u0441\u0441\u043e\u0437\u0434\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0431\u0435\u0437 \u0437\u043d\u0430\u043d\u0438\u044f \u043f\u0430\u0440\u043e\u043b\u044f. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u044b \u043f\u043e\u0434 \u043a\u043e\u0434\u043e\u0432\u044b\u043c \u0438\u043c\u0435\u043d\u0435\u043c Dragonblood [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-31424","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef), \u0430\u0432\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 KRACK \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441 WPA2, \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen), \u0441\u043e\u0430\u0432\u0442\u043e\u0440 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 TLS, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2019-9494 - CVE-2019-9499) \u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"hu_HU\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3 \u0438 \u0432 EAP-pwd | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef), \u0430\u0432\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 KRACK \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441 WPA2, \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen), \u0441\u043e\u0430\u0432\u0442\u043e\u0440 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 TLS, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2019-9494 - CVE-2019-9499) \u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:41:11+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:41:11+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47 S\u00e9r\u00fcl\u00e9kenys\u00e9gek a WPA3 vezet\u00e9k n\u00e9lk\u00fcli h\u00e1l\u00f3zatok v\u00e9delmi technol\u00f3gi\u00e1j\u00e1ban \u00e9s az EAP-pwd | ProHoster","description":"Mathy Vanhoef, a WPA2 vezet\u00e9k n\u00e9lk\u00fcli h\u00e1l\u00f3zatokra ir\u00e1nyul\u00f3 KRACK t\u00e1mad\u00e1s szerz\u0151je, \u00e9s Eyal Ronen, a TLS-en v\u00e9grehajtott t\u00e1mad\u00e1sok egy r\u00e9sz\u00e9nek t\u00e1rsszerz\u0151je, hat s\u00e9r\u00fcl\u00e9kenys\u00e9g (CVE-2019-9494 - CVE-2019-9499) adatait hozt\u00e1k nyilv\u00e1noss\u00e1gra.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3 \u0438 \u0432 EAP-pwd | ProHoster","og:description":"\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef), \u0430\u0432\u0442\u043e\u0440 \u0430\u0442\u0430\u043a\u0438 KRACK \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441 WPA2, \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen), \u0441\u043e\u0430\u0432\u0442\u043e\u0440 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0430\u0442\u0430\u043a \u043d\u0430 TLS, \u0440\u0430\u0441\u043a\u0440\u044b\u043b\u0438 \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0448\u0435\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u0445 (CVE-2019-9494 - CVE-2019-9499) \u0432.","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:41:11+00:00","article:modified_time":"2019-10-31T18:41:11+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31424","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 06:08:14","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:17:25","updated":"2026-01-21 06:08:14","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/31424","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=31424"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/31424\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=31424"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=31424"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=31424"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}