{"id":37225,"date":"2019-10-31T22:16:26","date_gmt":"2019-10-31T19:16:26","guid":{"rendered":"https:\/\/prohoster.info\/blog\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth\/"},"modified":"2019-10-31T22:16:26","modified_gmt":"2019-10-31T19:16:26","slug":"ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","title":{"rendered":"Atacul KNOB, care permite interceptarea traficului Bluetooth criptat","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Dezv\u0103luite<\/a><\/noindex> informa\u021bii<\/a><\/noindex> despre atac KNOB<\/a><\/noindex> (Key Negotiation Of Bluetooth), care permite interceptarea \u0219i substituirea informa\u021biilor \u00een traficul Bluetooth criptat. Prin blocarea transmisiei directe de pachete \u00een timpul negoci\u0103rii conexiunii dispozitivelor Bluetooth, atacatorul poate solicita utilizarea unor chei care con\u021bin doar 1 byte de entropie, ceea ce permite aplicarea metodei brute-force pentru determinarea cheii de criptare. <\/p>\n

Problema este cauzat\u0103 de deficien\u021be (CVE-2019-9506) \u00een specifica\u021bia Bluetooth BR\/EDR Core 5.1 \u0219i versiunile anterioare, care permit utilizarea unor chei de criptare prea scurte \u0219i nu \u00eempiedic\u0103 interven\u021bia atacatorului \u00een faza de negociere a conexiunii pentru a reveni la astfel de chei nesigure (substituirea pachetelor poate fi f\u0103cut\u0103 de un atacator neautentificat). Atacul poate fi realizat \u00een momentul negocierii conexiunii dispozitivelor (se sesiunile deja stabilite nu pot fi atacate) \u0219i este eficient doar pentru conexiunile \u00een modurile BR\/EDR (Bluetooth Basic Rate\/Enhanced Data Rate), dac\u0103 ambele dispozitive sunt vulnerabile. \u00cen cazul \u00een care atacatorul reu\u0219e\u0219te s\u0103 g\u0103seasc\u0103 cheia, acesta poate decripta datele transmise \u0219i poate efectua, f\u0103r\u0103 ca victima s\u0103 observe, substituirea \u00een trafic a oric\u0103rui text criptat.<\/p>\n

Atunci c\u00e2nd se stabile\u0219te o conexiune \u00eentre dou\u0103 controlere Bluetooth A \u0219i B, controlerul A, dup\u0103 autentificarea prin cheia de canal (link key), poate propune utilizarea unei chei de criptare (encryption key) de 16 bytes de entropie, iar controlerul B poate accepta aceast\u0103 valoare sau poate indica o valoare mai mic\u0103, \u00een cazul \u00een care nu are capacitatea de a forma o cheie de dimensiunea propus\u0103. Ca r\u0103spuns, controlerul A poate accepta oferta primit\u0103 \u0219i activa canalul de comunicare criptat. \u00cen acest stadiu al negoci\u0103rii parametrilor, criptarea nu este aplicat\u0103, astfel c\u0103 atacatorul are posibilitatea de a interveni \u00een schimbul de date dintre controlere \u0219i de a substitui pachetul cu dimensiunea propus\u0103 a entropiei. Dat fiind c\u0103 dimensiunea cheii acceptabile variaz\u0103 \u00eentre 1 \u0219i 16 bytes, al doilea controler va accepta aceast\u0103 valoare \u0219i va trimite confirmarea sa indic\u00e2nd o dimensiune similar\u0103.<\/p>\n

\"Atacul<\/a><\/noindex><\/center><\/p>\n

Pentru reproducerea vulnerabilit\u0103\u021bii \u00een condi\u021bii de laborator (activitatea atacatorului a fost emulat\u0103 pe unul dintre dispozitive), a fost propus
\nun prototip de instrumentar<\/a><\/noindex> pentru realizarea atacului.
\nPentru un atac real, atacatorul trebuie s\u0103 fie \u00een zona de recep\u021bie a dispozitivelor victim\u0103 \u0219i s\u0103 aib\u0103 capacitatea de a bloca temporar semnalul de la fiecare dispozitiv, ceea ce se propune a fi realizat prin manipularea semnalului sau prin interferen\u021b\u0103 reactiv\u0103. <\/p>\n

Organiza\u021bia Bluetooth SIG, responsabil\u0103 pentru dezvoltarea standardelor Bluetooth, a publicat<\/a><\/noindex> a corectat specifica\u021bia cu num\u0103rul 11838, \u00een care pentru implementarea de c\u0103tre produc\u0103tori sunt propuse m\u0103suri pentru blocarea vulnerabilit\u0103\u021bii (dimensiunea minim\u0103 a cheii de criptare a fost crescut\u0103 de la 1 la 7). Problema se manifest\u0103<\/a><\/noindex> const\u0103 tuturor<\/a><\/noindex> \u00een stivele \u0219i firmware-urile Bluetooth care respect\u0103 standardul Bluetooth, inclusiv produsele Intel<\/a><\/noindex>, Broadcom, Lenovo<\/a><\/noindex>, Apple<\/a><\/noindex>, de Microsoft<\/a><\/noindex>, Qualcomm, Linux, Android<\/a><\/noindex>, Blackberry<\/a><\/noindex> \u0219i Cisco<\/a><\/noindex> (din cele 14 cipuri testate, toate s-au dovedit a fi vulnerabile). \u00cen stiva Bluetooth a nucleului Linux a fost implementat\u0103<\/a><\/noindex> a fost disponibil\u0103 o corec\u021bie care permite modificarea dimensiunii minime a cheii de criptare. <\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e\u0431 \u0430\u0442\u0430\u043a\u0435 KNOB (Key Negotiation Of Bluetooth), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442 \u0438 \u043f\u043e\u0434\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u0432 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c Bluetooth-\u0442\u0440\u0430\u0444\u0438\u043a\u0435. \u0418\u043c\u0435\u044f \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u0440\u044f\u043c\u0443\u044e \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0443 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u0441\u043e\u0433\u043b\u0430\u0441\u043e\u0432\u0430\u043d\u0438\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f Bluetooth-\u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0434\u043b\u044f \u0441\u0435\u0430\u043d\u0441\u0430 \u043a\u043b\u044e\u0447\u0435\u0439, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0432\u0441\u0435\u0433\u043e 1 \u0431\u0430\u0439\u0442 \u044d\u043d\u0442\u0440\u043e\u043f\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u043c\u0435\u0442\u043e\u0434 \u043f\u0440\u044f\u043c\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0431\u043e\u0440\u0430 (brute-force) \u0434\u043b\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043a\u043b\u044e\u0447\u0430 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u0434\u043e\u0440\u0430\u0431\u043e\u0442\u043a\u0430\u043c\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27914,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-37225","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Atacul KNOB, care permite interceptarea traficului Bluetooth criptat | ProHoster","description":"Dezv\u0103luite","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 KNOB, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0442\u0440\u0430\u0444\u0438\u043a Bluetooth | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-knob-pozvolyayushhaya-perehvatit-zashifrovannyj-trafik-bluetooth","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:16:26+00:00","article:modified_time":"2019-10-31T19:16:26+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37225","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 16:49:21","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:31:24","updated":"2026-01-23 16:49:21","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/37225","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=37225"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/37225\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/27914"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=37225"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=37225"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=37225"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}