{"id":31273,"date":"2019-10-31T21:40:23","date_gmt":"2019-10-31T18:40:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vzlom-wpa3-dragonblood\/"},"modified":"2019-10-31T21:40:23","modified_gmt":"2019-10-31T18:40:23","slug":"vzlom-wpa3-dragonblood","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","title":{"rendered":"Napadnutie WPA3: DragonBlood","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Napadnutie
\n
\nAj ke\u010f nov\u00fd \u0161tandard WPA3 e\u0161te nebol skuto\u010dne uveden\u00fd do praxe, bezpe\u010dnostn\u00e9 nedostatky v tomto protokole umo\u017e\u0148uj\u00fa \u00fato\u010dn\u00edkom prelomi\u0165 heslo Wi-Fi.
\n<\/a><\/noindex>
\nProtokol Wi-Fi Protected Access III (WPA3) bol spusten\u00fd v snahe odstr\u00e1ni\u0165 technick\u00e9 nedostatky protokolu WPA2, ktor\u00fd bol dlh\u00fd \u010das pova\u017eovan\u00fd za nebezpe\u010dn\u00fd a zranite\u013en\u00fd vo\u010di \u00fatoku KRACK (Key Reinstallation Attack). Hoci WPA3 sa spolieha na bezpe\u010dnej\u0161ie handshake zn\u00e1me ako Dragonfly, ktor\u00e9 m\u00e1 chr\u00e1ni\u0165 Wi-Fi siete pred offline \u00fatokmi slovn\u00edkov\u00e9ho typu, bezpe\u010dnostn\u00ed v\u00fdskumn\u00edci Mathy Vanhoef a Eyal Ronen odhalili slabiny v ran\u00fdch implement\u00e1ci\u00e1ch WPA3-Personal, ktor\u00e9 m\u00f4\u017eu \u00fato\u010dn\u00edkom umo\u017eni\u0165 obnovi\u0165 Wi-Fi hesl\u00e1 vyu\u017e\u00edvan\u00edm \u010dasov\u00fdch rozdielov alebo ved\u013eaj\u0161\u00edmi cache.<\/p>\n

\u201e\u00dato\u010dn\u00edci m\u00f4\u017eu \u010d\u00edta\u0165 inform\u00e1cie, ktor\u00e9 mal WPA3 bezpe\u010dne za\u0161ifrova\u0165. To m\u00f4\u017ee by\u0165 vyu\u017eit\u00e9 na kr\u00e1de\u017e citliv\u00fdch inform\u00e1ci\u00ed, ako s\u00fa \u010d\u00edsla kreditn\u00fdch kariet, hesl\u00e1, chatov\u00e9 spr\u00e1vy, e-maily at\u010f.\u201c<\/p><\/blockquote>\n

V dnes publikovanom v\u00fdskumnom dokumente<\/a><\/noindex>, nazvanom DragonBlood, v\u00fdskumn\u00edci podrobne presk\u00famali dva typy projektov\u00fdch nedostatkov v WPA3: prv\u00fd vedie k \u00fatokom s zn\u00ed\u017een\u00edm \u00farovne, a druh\u00fd vedie k \u00fanikom ved\u013eaj\u0161ej cache.<\/p>\n

\u00datok na ved\u013eaj\u0161iu cache<\/h3>\n

\nAlgoritmus k\u00f3dovania hesla v Dragonfly, zn\u00e1my tie\u017e ako algoritmus \u201elovu a klovania\u201c (hunting and pecking), obsahuje podmienen\u00e9 vetvy. Ak m\u00f4\u017ee \u00fato\u010dn\u00edk ur\u010di\u0165, ktor\u00e1 vetva if-then-else bola zvolen\u00e1, m\u00f4\u017ee zisti\u0165, \u010di bol prvok hesla n\u00e1jden\u00fd v konkr\u00e9tnej iter\u00e1cii tohto algoritmu. V praxi sa zistilo, \u017ee ak \u00fato\u010dn\u00edk m\u00f4\u017ee spusti\u0165 neprivilegovan\u00fd k\u00f3d na po\u010d\u00edta\u010di obete, je mo\u017en\u00e9 vyu\u017e\u00edva\u0165 \u00fatoky na z\u00e1klade cache na ur\u010denie, ktor\u00e1 vetva bola vykonan\u00e1 v prvej iter\u00e1cii algorytmu generovania hesla. T\u00e1to inform\u00e1cia m\u00f4\u017ee by\u0165 pou\u017eit\u00e1 na vykonanie \u00fatoku rozdelenia hesla (\u010do je podobn\u00e9 offline \u00fatoku slovn\u00edkov\u00e9ho typu).<\/p>\n

T\u00e1to zranite\u013enos\u0165 je sledovan\u00e1 pomocou identifik\u00e1tora CVE-2019-9494.<\/p>\n

Ochrana spo\u010d\u00edva v nahraden\u00ed podmienen\u00fdch vetiev, ktor\u00e9 z\u00e1visia od tajn\u00fdch hodn\u00f4t, n\u00e1strojmi s kon\u0161tantn\u00fdm \u010dasom. Implement\u00e1cie by mali taktie\u017e vyu\u017e\u00edva\u0165 v\u00fdpo\u010det Legendreho symbolu<\/a><\/noindex> s kon\u0161tantn\u00fdm \u010dasom.<\/p>\n

\u00datok na z\u00e1klad\u011b vedlej\u0161\u00edch kan\u00e1l\u016f zalo\u017een\u00fd na synchronizaci<\/h3>\n

\nKdy\u017e handshake Dragonfly pou\u017e\u00edv\u00e1 ur\u010dit\u00e9 multiplikativn\u00ed skupiny, algoritmus k\u00f3dov\u00e1n\u00ed hesla vyu\u017e\u00edv\u00e1 prom\u011bnliv\u00fd po\u010det iterac\u00ed pro k\u00f3dov\u00e1n\u00ed hesla. P\u0159esn\u00fd po\u010det iterac\u00ed z\u00e1vis\u00ed na pou\u017eit\u00fdch hesle a MAC adrese p\u0159\u00edstupov\u00e9ho bodu a klienta. \u00dato\u010dn\u00edk m\u016f\u017ee prov\u00e9st vzd\u00e1len\u00fd \u010dasov\u00fd \u00fatok na algoritmus k\u00f3dov\u00e1n\u00ed hesla, aby ur\u010dil, kolik iterac\u00ed bylo zapot\u0159eb\u00ed k zak\u00f3dov\u00e1n\u00ed hesla. Obnoven\u00e9 informace mohou b\u00fdt pou\u017eity k proveden\u00ed \u00fatoku na heslo, kter\u00fd je podobn\u00fd offline slovn\u00edkov\u00e9mu \u00fatoku.<\/p>\n

Aby se p\u0159ede\u0161lo \u00fatoku na z\u00e1klad\u011b synchronizace, implementace mus\u00ed deaktivovat zraniteln\u00e9 multiplikativn\u00ed skupiny. Z technick\u00e9ho hlediska by m\u011bly b\u00fdt vypnuty skupiny MODP 22, 23 a 24. Doporu\u010duje se tak\u00e9 vypnout skupiny MODP 1, 2 a 5.<\/p>\n

Tato zranitelnost je rovn\u011b\u017e sledov\u00e1na pomoc\u00ed identifik\u00e1toru CVE-2019-9494 kv\u016fli podobnosti realizace \u00fatoku.<\/p>\n

WPA3 downgrade<\/h3>\n

\nProto\u017ee 15let\u00fd protokol WPA2 byl \u0161iroce pou\u017e\u00edv\u00e1n miliardami za\u0159\u00edzen\u00ed, plo\u0161n\u00e9 zaveden\u00ed WPA3 nenastane okam\u017eit\u011b. Pro podporu star\u0161\u00edch za\u0159\u00edzen\u00ed certifikovan\u00e1 za\u0159\u00edzen\u00ed WPA3 nab\u00edzej\u00ed \"p\u0159echodn\u00fd re\u017eim\", kter\u00fd lze nastavit tak, aby p\u0159ij\u00edmal p\u0159ipojen\u00ed pomoc\u00ed jak WPA3-SAE, tak WPA2.<\/p>\n

V\u00fdzkumn\u00edci se domn\u00edvaj\u00ed, \u017ee p\u0159echodn\u00fd re\u017eim je zraniteln\u00fd v\u016f\u010di \u00fatok\u016fm s downgradov\u00e1n\u00edm, kter\u00e9 mohou \u00fato\u010dn\u00edci vyu\u017e\u00edt k vytvo\u0159en\u00ed podvodn\u00e9ho p\u0159\u00edstupov\u00e9ho bodu, kter\u00fd podporuje pouze WPA2, co\u017e p\u0159im\u011bje za\u0159\u00edzen\u00ed, kter\u00e1 podporuj\u00ed WPA3, p\u0159ipojit se pomoc\u00ed nezabezpe\u010den\u00e9ho \u010dty\u0159cestn\u00e9ho handshake WPA2.<\/p>\n

\"Tak\u00e9 jsme zjistili \u00fatok na downgrade proti samotn\u00e9mu handshake SAE (\"Sou\u010dasn\u00e1 autentizace rovn\u00e9ho\", b\u011b\u017en\u011b zn\u00e1m\u00e1 jako \"\u0160\u00eddlo\"), kde m\u016f\u017eeme donutit za\u0159\u00edzen\u00ed pou\u017e\u00edt slab\u0161\u00ed eliptickou k\u0159ivku, ne\u017e je obvykl\u00e9,\" \u0159\u00edkaj\u00ed v\u00fdzkumn\u00edci.<\/p><\/blockquote>\n

\nNav\u00edc pozice \"\u010dlov\u011bka uprost\u0159ed\" nen\u00ed nutn\u00e1 k proveden\u00ed \u00fatoku s downgradov\u00e1n\u00edm. \u00dato\u010dn\u00edci pot\u0159ebuj\u00ed pouze zn\u00e1t SSID s\u00edt\u011b WPA3-SAE.<\/p>\n

Vedci ozn\u00e1mili svoje v\u00fdsledky Wi-Fi Alliance, neziskovej organiz\u00e1cie, ktor\u00e1 certifikuje \u0161tandardy WiFi a produkty Wi-Fi na s\u00falad, uznali probl\u00e9my a spolupracuj\u00fa s dod\u00e1vate\u013emi na oprave existuj\u00facich zariaden\u00ed certifikovan\u00fdch WPA3.<\/p>\n

PoC (k datu publik\u00e1cie \u2014 404)<\/h3>\n

\nAko potvrdenie konceptu vedci \u010doskoro vydaj\u00fa \u010fal\u0161ie \u0161tyri samostatn\u00e9 n\u00e1stroje (v repozit\u00e1roch GitHub s hypertextov\u00fdm odkazom ni\u017e\u0161ie), ktor\u00e9 je mo\u017en\u00e9 pou\u017ei\u0165 na testovanie zranite\u013enost\u00ed.<\/p>\n

Dragondrain<\/noindex> \u2014 n\u00e1stroj, ktor\u00fd dok\u00e1\u017ee overi\u0165, do akej miery je pr\u00edstupov\u00fd bod zranite\u013en\u00fd vo\u010di DoS \u00fatokom na handshake WPA3 Dragonfly.
\nDragontime<\/noindex> \u2014 experiment\u00e1lny n\u00e1stroj na vykon\u00e1vanie \u010dasov\u00fdch \u00fatokov proti handshake Dragonfly.
\nDragonforce<\/a><\/noindex> \u2014 experiment\u00e1lny n\u00e1stroj, ktor\u00fd zhroma\u017e\u010fuje inform\u00e1cie na obnovu po \u010dasov\u00fdch \u00fatokoch a vykon\u00e1va \u00fatok s heslom.
\nDragonslayer<\/a><\/noindex> \u2014 n\u00e1stroj, ktor\u00fd vykon\u00e1va \u00fatoky na EAP-pwd.<\/p>\n

Dragonblood: Anal\u00fdza bezpe\u010dnosti SAE handshake WPA3<\/a><\/noindex>
\nWebov\u00e1 str\u00e1nka projektu \u2014 wpa3.mathyvanhoef.com<\/a><\/noindex>
\n
Zdroj: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 WPA3 \u0435\u0449\u0435 \u0442\u043e\u043b\u043a\u043e\u043c \u043d\u0435 \u0432\u0432\u0435\u0434\u0435\u043d \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c Wi-Fi. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b Wi-Fi Protected Access III (WPA3) \u0431\u044b\u043b \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0432 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WPA2, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0433\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0447\u0438\u0442\u0430\u043b\u0441\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0434\u043b\u044f KRACK-\u0430\u0442\u0430\u043a\u0438 (Key Reinstallation Attack). \u0425\u043e\u0442\u044f WPA3 \u043e\u043f\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23239,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31273","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hacking WPA3: DragonBlood | ProHoster","description":"Napriek tomu, \u017ee nov\u00fd \u0161tandard WPA3 e\u0161te nebol poriadne zaveden\u00fd.","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c WPA3: DragonBlood | ProHoster","og:description":"\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 WPA3 \u0435\u0449\u0435 \u0442\u043e\u043b\u043a\u043e\u043c \u043d\u0435 \u0432\u0432\u0435\u0434\u0435\u043d \u0432.","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:40:23+00:00","article:modified_time":"2019-10-31T18:40:23+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31273","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 05:21:38","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:12:48","updated":"2026-01-21 05:21:38","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/31273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=31273"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/31273\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/23239"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=31273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=31273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=31273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}