{"id":118325,"date":"2024-07-26T15:43:00","date_gmt":"2024-07-26T13:43:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/v-806-modelyah-materinskih-plat-vyyavlen-testovyj-klyuch-pozvolyayushhij-obojti-uefi-secure-boot"},"modified":"2024-07-26T15:43:00","modified_gmt":"2024-07-26T13:43:00","slug":"v-806-modelyah-materinskih-plat-vyyavlen-testovyj-klyuch-pozvolyayushhij-obojti-uefi-secure-boot","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/v-806-modelyah-materinskih-plat-vyyavlen-testovyj-klyuch-pozvolyayushhij-obojti-uefi-secure-boot","title":{"rendered":"\u00cen 806 modele de pl\u0103ci de baz\u0103 a fost descoperit o cheie de test care permite ocolirea UEFI Secure Boot","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Cercet\u0103torii de securitate de la Binarly au descoperit o vulnerabilitate \u00een modul de verificare a \u00eenc\u0103rc\u0103rii UEFI Secure Boot, afect\u00e2nd peste 800 de produse lansate de companii precum Acer, Dell, Fujitsu, Gigabyte, HP, Intel, Lenovo \u0219i Supermicro. Problema a primit numele cod PKfail \u0219i este asociat\u0103 cu utilizarea unui cheie de platform\u0103 (PK, Platform Key) nesigur\u0103 \u00een firmware-uri, generat\u0103 de AMI (American Megatrends International) \u0219i livrat\u0103 ca exemplu de testare. Cele mai vechi firmware-uri care au folosit cheia de testare au fost lansate \u00een 2012, iar cele mai recente sunt din iunie 2024. Potrivit cercet\u0103torilor, peste 10% dintre toate firmware-urile verificate sunt afectate. <\/p>\n

\u00cen specifica\u021biile cheii, s-a men\u021bionat c\u0103 aceasta nu este de \u00eencredere \u0219i nu ar trebui livrat\u0103 \u00een produsele lor. S-a sub\u00een\u021beles c\u0103 aceast\u0103 cheie de testare ar trebui \u00eenlocuit\u0103 cu una proprie, \u00eens\u0103 produc\u0103torii nu au \u021binut cont de avertisment \u0219i au folosit \u00een firmware-urile finale o cheie comun\u0103 standard livrat\u0103 tuturor partenerilor \u0219i clien\u021bilor AMI. <\/p>\n

Partea privat\u0103 a cheii de testare AMI, necesar\u0103 pentru crearea semn\u0103turilor digitale, a devenit public\u0103 dup\u0103 o scurgere de informa\u021bii de la un produc\u0103tor de hardware, ale c\u0103rui angajat a publicat din gre\u0219eal\u0103 \u00een depozitul public de pe GitHub un cod ce con\u021bine aceast\u0103 cheie. Cheia privat\u0103 a fost plasat\u0103 \u00eentr-un fi\u0219ier criptat, iar criptarea s-a realizat folosind o parol\u0103 simpl\u0103 de 4 caractere, care a putut fi ghicit\u0103 u\u0219or prin metoda for\u021b\u0103rii brute. <\/p>\n

Cheia platformei este utilizat\u0103 ca r\u0103d\u0103cin\u0103 de \u00eencredere pentru semnarea bazelor de date cu chei pentru Secure Boot. Ob\u021binerea p\u0103r\u021bii secrete a cheii platformei duce la compromiterea \u00eentregii lan\u021buri de \u00eencredere implicate \u00een validarea componentelor sistemului de operare \u00eenc\u0103rcat \u2014 cunosc\u00e2nd cheia platformei, se poate ocoli protec\u021bia Secure Boot \u0219i organiza substituirea la \u00eenc\u0103rcare a propriilor componente prin manipularea cheii KEK (Key Exchange Key) \u0219i bazelor de date \u00abdb\u00bb (Signature Database) \u0219i \u00abdbx\u00bb (Forbidden Signature Database). KEK este responsabil pentru crearea lan\u021bului de \u00eencredere \u00eentre firmware \u0219i sistemul de operare, \u00abdb\u00bb con\u021bine certificatele \u0219i semn\u0103turile pentru bootloader \u0219i componentele ter\u021be UEFI, iar \u00abdbx\u00bb include semn\u0103turile revocate ale componentelor d\u0103un\u0103toare cunoscute. <\/p>\n

Pentru a efectua un atac, este suficient s\u0103 genera\u021bi chei \u0219i certificate noi pentru KEK \u0219i db, dup\u0103 care s\u0103 folosi\u021bi cheia platformei de test, devenit\u0103 public\u0103, pentru a \u00eenc\u0103rca \u00een firmware UEFI certificatului KEK creat. Dup\u0103 ce \u00eenc\u0103rca\u021bi \u00een firmware certificatul KEK, pute\u021bi utiliza cheia sa secret\u0103 pentru a \u00eenc\u0103rca \u00een baza de date db un nou certificat. Dup\u0103 \u00eenc\u0103rcarea certificatului db, cheia secret\u0103 asociat\u0103 poate fi utilizat\u0103 pentru semnarea componentelor EFI \u00eenc\u0103rcate. openssl req -newkey rsa:4096 -nodes -keyout KEK.key -new -x509 -sha256 -days 3650 -subj \u00ab\/CN=BRLY KEK\/\u00bb -out KEK.crt openssl req -newkey rsa:4096 -nodes -keyout db.key -new -x509 -sha256 -days 3650 -subj \u00ab\/CN=BRLY db\/\u00bb -out db.crt efi-updatevar -a -c KEK.crt -k PK.key KEK efi-updatevar -a -c db.crt -k KEK.key db sbsign \u2014key db.key \u2014cert db.crt \u2014output rogue.efi.signed rogue.efi <\/p>\n

Pentru a verifica corectitudinea cheii platformei, este suficient s\u0103 rulati utilitarul \u00abefi-readvar -v PK\u00bb din pachetul efitools \u0219i s\u0103 v\u0103 asigura\u021bi c\u0103 cheia platformei nu este una de test: efi-readvar -v PK Variable PK, length 862 PK: List 0, type X509 Signature 0, size 834, owner 26dc4851-195f-4ae1-9a19-fbf883bbb35e Subject: CN=DO NOT TRUST \u2014 AMI Test PK Issuer: CN=DO NOT TRUST \u2014 AMI Test PK

\r\n \"Reda\u021bi\r\n
<\/div>\r\n <\/div><\/center>
\n
Sursa: opennet.ro<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Binarly \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0440\u0435\u0436\u0438\u043c\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI Secure Boot \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 800 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 Acer, Dell, Fujitsu, Gigabyte, HP, Intel, Lenovo \u0438 Supermicro. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f PKfail \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0430\u0445 \u043d\u0435 \u0437\u0430\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u044e\u0449\u0435\u0433\u043e \u0434\u043e\u0432\u0435\u0440\u0438\u044f \u043a\u043b\u044e\u0447\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b (PK, Platform Key), \u0441\u0433\u0435\u043d\u0435\u0440\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0435\u0439 AMI (American Megatrends International) […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-118325","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Un certificat de test a fost identificat \u00een 806 modele de pl\u0103ci de baz\u0103, permi\u021b\u00e2nd ocolirea UEFI Secure Boot | ProHoster","description":"Cercet\u0103torii \u00een securitate de la Binarly au identificat o posibilitate de a ocoli modul de \u00eenc\u0103rcare verificat\u0103 UEFI Secure Boot pe mai mult de 800 de produse fabricate de companiile Acer, Dell, Fujitsu, Gigabyte, HP, Intel.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-806-modelyah-materinskih-plat-vyyavlen-testovyj-klyuch-pozvolyayushhij-obojti-uefi-secure-boot","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412 806 \u043c\u043e\u0434\u0435\u043b\u044f\u0445 \u043c\u0430\u0442\u0435\u0440\u0438\u043d\u0441\u043a\u0438\u0445 \u043f\u043b\u0430\u0442 \u0432\u044b\u044f\u0432\u043b\u0435\u043d \u0442\u0435\u0441\u0442\u043e\u0432\u044b\u0439 \u043a\u043b\u044e\u0447, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043e\u0431\u043e\u0439\u0442\u0438 UEFI Secure Boot | ProHoster","og:description":"\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0438\u0437 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 Binarly \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043e\u0431\u0445\u043e\u0434\u0430 \u0440\u0435\u0436\u0438\u043c\u0430 \u0432\u0435\u0440\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 UEFI Secure Boot \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c 800 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445, \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f\u043c\u0438 Acer, Dell, Fujitsu, Gigabyte, HP, Intel.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/v-806-modelyah-materinskih-plat-vyyavlen-testovyj-klyuch-pozvolyayushhij-obojti-uefi-secure-boot","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-07-26T13:43:00+00:00","article:modified_time":"2024-07-26T13:43:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"118325","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 04:53:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 04:53:19","updated":"2026-01-23 04:53:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/118325","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=118325"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/118325\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=118325"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=118325"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=118325"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}