{"id":91429,"date":"2020-08-13T13:42:00","date_gmt":"2020-08-13T11:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte"},"modified":"2020-08-13T13:42:00","modified_gmt":"2020-08-13T11:42:00","slug":"ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","title":{"rendered":"Atacul ReVoLTE, care permite interceptarea apelurilor criptate \u00een LTE.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Un grup de cercet\u0103tori de la Universitatea Ruhr din Bochum (Germania) a prezentat o tehnic\u0103 de atac ReVoLTE<\/a><\/noindex> (PDF<\/a><\/noindex>), care permite interceptarea apelurilor vocale criptate \u00een re\u021belele de telefonie mobil\u0103 4G\/LTE, care utilizeaz\u0103 tehnologia VoLTE pentru transmiterea traficului vocal (Voice over LTE<\/a><\/noindex>).
\n.<\/p>\n

Pentru a proteja apelurile telefonice de interceptare \u00een VoLTE, se aplic\u0103 criptarea bazat\u0103 pe un flux de criptare<\/a><\/noindex>. Specifica\u021bia impune generarea unui flux de chei unic pentru fiecare sesiune, dar, a\u0219a cum au descoperit cercet\u0103torii, 12 din cele 15 sta\u021bii de baz\u0103 testate nu respect\u0103 aceast\u0103 cerin\u021b\u0103 \u0219i reutilizeaz\u0103 acela\u0219i flux de chei pentru dou\u0103 apeluri consecutive pe acela\u0219i canal radio sau folosesc metode de generare predictibile a unei noi secven\u021be.<\/p>\n

Reutilizarea fluxului de chei permite atacatorului s\u0103 decripteze traficul criptat \u00eenregistrat \u00een timpul conversa\u021biei. Pentru a realiza decriptarea con\u021binutului apelului vocal, atacatorul intercept\u0103 \u0219i salveaz\u0103 ini\u021bial traficul radio criptat \u00eentre victim\u0103 \u0219i sta\u021bia de baz\u0103 vulnerabil\u0103. Dup\u0103 finalizarea apelului, atacatorul sun\u0103 din nou victim\u0103 \u0219i \u00eencearc\u0103 s\u0103 continue discu\u021bia c\u00e2t mai mult timp, f\u0103r\u0103 a permite victimei s\u0103 \u00eenchid\u0103 telefonul. Pe parcursul acestei conversa\u021bii, pe l\u00e2ng\u0103 \u00eenregistrarea traficului radio criptat, se salveaz\u0103 \u0219i semnalul audio necriptat.<\/p>\n

Pentru a decripta primul apel al victimei, atacatorul poate calcula valoarea fluxului de chei pe baza traficului criptat interceptat \u00een timpul celui de-al doilea apel \u0219i a datelor vocale originale \u00eenregistrate pe telefonul atacatorului, folosind opera\u021bia XOR \u00eentre datele deschise \u0219i cele criptate. Deoarece fluxul de chei este reutilizat, aplic\u00e2nd fluxul de chei calculat pentru al doilea apel la datele criptate ale primului apel, atacatorul poate avea acces la con\u021binutul s\u0103u original. Cu c\u00e2t a durat mai mult al doilea apel al atacatorului cu victima, cu at\u00e2t mai multe informa\u021bii pot fi decriptate din primul apel. De exemplu, dac\u0103 atacatorului i-a reu\u0219it s\u0103 \u00eentind\u0103 conversa\u021bia pe 5 minute, acesta va putea decripta \u0219i 5 minute.<\/p>\n

Pentru capturarea traficului criptat \u00een re\u021belele LTE, cercet\u0103torii au folosit un analizor de semnal AirScope<\/a><\/noindex>, iar pentru ob\u021binerea fluxului audio original \u00een timpul apelului atacatorului au fost utilizate smartphone-uri Android, controlate prin ADB \u0219i SCAT<\/a><\/noindex>. Costul echipamentului necesar pentru realizarea atacului este estimat la 7000 de dolari. <\/p>\n


\n
\r\n \"Reda\u021bi\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Produc\u0103torii de sta\u021bii de baz\u0103 au fost informa\u021bi despre problem\u0103 \u00een decembrie anul trecut, iar majoritatea au publicat deja patch-uri pentru remedierea vulnerabilit\u0103\u021bii. Totu\u0219i, unii operatori ar fi putut ignora actualiz\u0103rile. Pentru a verifica expunerea re\u021belelor LTE \u0219i 5G a fost preg\u0103tit<\/a><\/noindex> aplica\u021bie mobil\u0103 special\u0103 pentru platforma Android 9 (este necesar acces root \u0219i un smartphone pe cipuri Qualcomm, cum ar fi Xiaomi Mi A3, One Plus 6T \u0219i Xiaomi Mix 3 5G). Pe l\u00e2ng\u0103 detectarea vulnerabilit\u0103\u021bii, aplica\u021bia poate fi utilizat\u0103 \u0219i pentru captarea traficului \u0219i vizualizarea mesajelor de serviciu. Traficul captat este salvat \u00een format PCAP \u0219i poate fi trimis pe un server HTTP specificat de utilizator pentru analiz\u0103 ulterioar\u0103 cu instrumente standard. <\/p>\n

\"Atacul<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

Sursa: opennet.ro<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Re­VoL­TE (PDF), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 \u0441\u0435\u0442\u044f\u0445 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 4G\/LTE, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e VoLTE (Voice over LTE). . \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0445 \u0437\u0432\u043e\u043d\u043a\u043e\u0432 \u043e\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0432 VoLTE \u0434\u043b\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u0430. \u0421\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91430,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91429","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Atacul ReVoLTE, care permite interceptarea apelurilor criptate \u00een LTE | ProHoster","description":"Un grup de cercet\u0103tori de la Universitatea Ruhr din Bochum (Germania) a prezentat tehnica de atac Re\u00adVoL\u00adTE (","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 ReVoLTE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 LTE | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Re\u00adVoL\u00adTE (","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-13T11:42:00+00:00","article:modified_time":"2020-08-13T11:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91429","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:28:26","updated":"2022-09-30 10:24:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/91429","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=91429"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/91429\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/91430"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=91429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=91429"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=91429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}