{"id":119725,"date":"2024-09-06T15:43:01","date_gmt":"2024-09-06T13:43:02","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-eucleak-pozvolyayushhaya-klonirovat-yubikey-5-i-drugie-klyuchi-na-chipah-infineon"},"modified":"2024-09-06T15:43:01","modified_gmt":"2024-09-06T13:43:02","slug":"ataka-eucleak-pozvolyayushhaya-klonirovat-yubikey-5-i-drugie-klyuchi-na-chipah-infineon","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/ataka-eucleak-pozvolyayushhaya-klonirovat-yubikey-5-i-drugie-klyuchi-na-chipah-infineon","title":{"rendered":"Sulmi EUCLEAK, i cili lejon klonimin e YubiKey 5 dhe \u00e7el\u00ebsa t\u00eb tjer\u00eb n\u00eb \u00e7ipet Infineon","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

K\u00ebrkuesit e siguris\u00eb nga kompania NinjaLab kan\u00eb zhvilluar nj\u00eb teknik\u00eb sulmi p\u00ebrmes kanaleve an\u00ebsore, duke lejuar klonimin e \u00e7el\u00ebsave ECDSA, t\u00eb ruajtur n\u00eb tokenat kriptografik\u00eb YubiKey 5 dhe pajisje t\u00eb tjera q\u00eb p\u00ebrdorin bibliotek\u00ebn kriptografike nga kompania Infineon. Sulmi ka marr\u00eb emrin kodues EUCLEAK dhe p\u00ebrve\u00e7 tokenave me \u00e7ipet Infineon SLE78, si YubiKey 5, mund t\u00eb p\u00ebrdoret n\u00eb shum\u00eb sisteme t\u00eb tjera me mikropro\u00e7esor\u00ebt e Infineon, duke p\u00ebrfshir\u00eb \u00e7ipet Infineon Optiga Trust M dhe Infineon Optiga TPM. <\/p>\n

Mund\u00ebsia e realizimit t\u00eb sulmit \u00ebsht\u00eb konfirmuar n\u00eb praktik\u00eb p\u00ebr \u00e7el\u00ebsat YubiKey 5Ci dhe p\u00ebr TPM n\u00eb \u00e7ipet SLB96xx, nd\u00ebrsa p\u00ebr pajisjet e tjera ka natyr\u00eb teorike. N\u00eb \u00e7el\u00ebsat YubiKey 5, vulnerabiliteti \u00ebsht\u00eb eliminuar n\u00eb versionin e firmware 5.7 p\u00ebrmes z\u00ebvend\u00ebsimit t\u00eb bibliotek\u00ebs kriptografike (korrigjimi \u00ebsht\u00eb i aplikuesh\u00ebm vet\u00ebm p\u00ebr pajisjet e reja, pasi n\u00eb pajisjet e l\u00ebshuara tashm\u00eb YubiKey nuk parashikohet mund\u00ebsia e p\u00ebrdit\u00ebsimit t\u00eb firmware-it). P\u00ebr bibliotek\u00ebn Infineon jan\u00eb zhvilluar bllokues t\u00eb korrigjimit t\u00eb vulnerabilitetit, por ato ende nuk jan\u00eb aktivizuar pasi nuk kan\u00eb kaluar certifikimin. <\/p>\n

P\u00ebrve\u00e7 \u00e7el\u00ebsave YubiKey 5, problemi potencialisht preku \u00e7ipet TPM (Trusted Platform Module) t\u00eb laptop\u00ebve Lenovo, Dell dhe HP, enklavat t\u00eb izoluara t\u00eb smartphone-ve Samsung dhe OnePlus, portofolat kriptografik\u00eb hardware, kartat inteligjente, kartat SIM dhe \u00e7ipet EMV t\u00eb kartave bankare, si dhe \u00e7ipet e pasaportave elektronike, q\u00eb p\u00ebrdoren n\u00eb Kin\u00eb, Indi, Brazil, SHBA dhe disa vende t\u00eb tjera aziatike dhe evropiane. <\/p>\n

Rreziku i klonimit t\u00eb \u00e7el\u00ebseve kompesohet nga kushtet dhe kompleksiteti i realizimit t\u00eb nj\u00eb sulmi \u2014 sulmuesi duhet t\u00eb ket\u00eb akses fizik n\u00eb \u00e7el\u00ebs dhe ta shp\u00ebrb\u00ebj\u00eb at\u00eb, duke hequr mbules\u00ebn plastike dhe mbushjen p\u00ebrmbajt\u00ebse. Pas nj\u00eb manipulimi t\u00eb till\u00eb, mund t\u00eb rikonstruktohet mbulesa p\u00ebrmes nj\u00eb printeri 3D, por t\u00eb b\u00ebsh manipulimet me \u00e7el\u00ebsin t\u00eb kalojn\u00eb pa u v\u00ebn\u00eb re \u00ebsht\u00eb mjaft e v\u00ebshtir\u00eb. Skanimimi i \u00e7el\u00ebsit merr disa minuta, por k\u00ebrkon gjithashtu rreth nj\u00eb or\u00eb p\u00ebr nj\u00eb shp\u00ebrb\u00ebrje t\u00eb kujdesshme dhe krijimin e nj\u00eb mbulese t\u00eb re. Pas skanimit, pajisja mund t'i kthehet pronarit, por p\u00ebr t\u00eb rikrijuar \u00e7el\u00ebsin ECDSA t\u00eb mbyllur mbi baz\u00ebn e t\u00eb dh\u00ebnave t\u00eb marra, nevojiten edhe rreth 24 or\u00eb llogaritjesh (v\u00ebmendje vihet se procesi mund t\u00eb reduktohet n\u00eb nj\u00eb or\u00eb, duke automatizuar operacionet manuale dhe duke b\u00ebr\u00eb optimizime).

\"Sulmi<\/center> <\/p>\n

P\u00ebrve\u00e7 qasjes fizike n\u00eb \u00e7el\u00ebsin p\u00ebr t\u00eb kryer me sukses nj\u00eb sulm ndaj sh\u00ebrbimeve me autentikim t\u00eb shum\u00ebfisht\u00eb, sulmuesi gjithashtu k\u00ebrkon ndonj\u00eb m\u00ebnyr\u00eb p\u00ebr t\u00eb m\u00ebsuar loginin dhe fjal\u00ebkalimin e sh\u00ebrbimit, p\u00ebr autentikimin e shtuar t\u00eb cilit p\u00ebrdoret \u00e7el\u00ebsi i pajisjes s\u00eb fituar, e n\u00eb rastin e p\u00ebrdorimit t\u00eb autentikimit pa fjal\u00ebkalim n\u00eb modet FIDO2 Passwordless ose Passkey, \u00ebsht\u00eb e nevojshme t\u00eb riprodhohet nj\u00eb faktor unik biometrik (p.sh., gjurm\u00eb e gishti). <\/p>\n

Metoda e sulmit ka t\u00eb b\u00ebj\u00eb me rikrijimin e \u00e7el\u00ebsave ECDSA t\u00eb ruajtur n\u00eb token, duke u bazuar n\u00eb t\u00eb dh\u00ebnat e marra p\u00ebrmes analiz\u00ebs s\u00eb sinjalit elektromagnetik, q\u00eb emetohet nga tokeni gjat\u00eb formimit t\u00eb n\u00ebnshkrimeve digjitale dhe q\u00eb korrelon me informacionin mbi \u00e7el\u00ebsin efemer ECDSA, q\u00eb \u00ebsht\u00eb e mjaftueshme p\u00ebr t\u00eb rikuperuar \u00e7el\u00ebsin sekret duke p\u00ebrdorur metoda t\u00eb m\u00ebsimit t\u00eb makineris\u00eb. N\u00eb rastin e YubiKey, p\u00ebr t\u00eb iniciuar operacionet me n\u00ebnshkrimin digjital, \u00ebsht\u00eb e nevojshme t\u00eb dihet login dhe fjal\u00ebkalimi n\u00eb nj\u00ebrin nga sh\u00ebrbimet ku tokeni p\u00ebrdoret si nj\u00eb lidhje shtes\u00eb p\u00ebr autentikim. <\/p>\n

Problemi shkaktohet nga p\u00ebrdorimi n\u00eb bibliotek\u00ebn Infineon t\u00eb nj\u00eb algoritmi t\u00eb pasigurt p\u00ebr llogaritjen e elementit t\u00eb kund\u00ebrt modulo, llogaritja e t\u00eb cilit k\u00ebrkon koh\u00eb t\u00eb varur nga vlerat e t\u00eb dh\u00ebnave hyr\u00ebse (p\u00ebr vektor\u00eb t\u00eb ndrysh\u00ebm v\u00ebrehet koh\u00eb e ndryshme llogaritjeje t\u00eb elementit t\u00eb kund\u00ebrt modulo). Ky ve\u00e7ori e till\u00eb lejon q\u00eb, mbi baz\u00ebn e analiz\u00ebs s\u00eb ndryshimeve t\u00eb sinjalit, t\u00eb nxirret informacion rreth bit\u00ebve t\u00eb ve\u00e7ant\u00eb gjat\u00eb kryerjes s\u00eb operacioneve me vektorin e inicializimit. N\u00eb rastin e ECDSA, p\u00ebrcaktimi edhe i disa bit\u00ebve me informacion mbi vektor\u00eb t\u00eb inicializimit (nonce) \u00ebsht\u00eb i mjaftuesh\u00ebm p\u00ebr t\u00eb kryer nj\u00eb sulm t\u00eb rind\u00ebrtimit sekondar t\u00eb gjith\u00eb \u00e7el\u00ebsit t\u00eb mbyllur. P\u00ebr t\u00eb rikrijuar \u00e7el\u00ebsin me sukses nevojitet kapja e aktivitetit gjat\u00eb krijimit t\u00eb rreth 40 n\u00ebnshkrimeve digjitale. <\/p>\n

P\u00ebr t\u00eb analizuar emissionin elektromagnetik gjat\u00eb gjenerimit t\u00eb n\u00ebnshkrimeve dixhitale, k\u00ebrkohet nj\u00eb pajisje profesionale me kosto mbi 10 mij\u00eb dollar\u00eb. P\u00ebr shembull, gjat\u00eb sulmit, k\u00ebrkuesit p\u00ebrdor\u00ebn kompleksin mat\u00ebs Langer ICR HH 500-6 (2300 dollar\u00eb), i p\u00ebrdorur p\u00ebr testimin e \u00e7ipave p\u00ebr p\u00ebrputhshm\u00ebrin\u00eb elektromagnetike, amplifikuesin Langer BT 706, mikromanipulatorin Thorlabs PT3\/M (1000 dollar\u00eb) me nj\u00eb sakt\u00ebsi prej 10 mikrometra, mikroskopin dixhital Dino-Lite AM4113TL (450 dollar\u00eb) dhe oscilografin kat\u00ebrkanal PicoScope 6424E (7500 dollar\u00eb) me nj\u00eb sakt\u00ebsi prej 8 bit\u00ebsh t\u00eb ADC.

\"Sulmi<\/center> <\/p>\n

Skenari i sulmit ndaj token-eve YubiKey 5 p\u00ebrb\u00ebhet nga hapat e m\u00ebposht\u00ebm: <\/p>\n