{"id":93917,"date":"2020-09-11T01:41:59","date_gmt":"2020-09-10T23:41:59","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/uyazvimost-v-tls-dopuskayushhaya-opredelenie-klyucha-dlya-soedinenij-na-baze-shifrov-dh"},"modified":"2020-09-11T01:41:59","modified_gmt":"2020-09-10T23:41:59","slug":"uyazvimost-v-tls-dopuskayushhaya-opredelenie-klyucha-dlya-soedinenij-na-baze-shifrov-dh","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-tls-dopuskayushhaya-opredelenie-klyucha-dlya-soedinenij-na-baze-shifrov-dh","title":{"rendered":"Vulnerabiliteti n\u00eb TLS q\u00eb lejon p\u00ebrcaktimin e \u00e7el\u00ebsit p\u00ebr lidhjet e bazuara n\u00eb algoritmet DH","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Zbulua<\/a><\/noindex> informacione mbi nj\u00eb dob\u00ebsin\u00eb<\/a><\/noindex> (CVE-2020-1968) n\u00eb protokollin TLS, i njohur me emrin kodues
\nRaccoon<\/a><\/noindex> dhe q\u00eb n\u00eb rrethana t\u00eb rralla lejon t\u00eb p\u00ebrcaktohet \u00e7el\u00ebsi i par\u00eb p\u00ebrpara (pre-master), i cili mund t\u00eb p\u00ebrdoret p\u00ebr t\u00eb dekriptuar lidhjet TLS, p\u00ebrfshir\u00eb HTTPS, gjat\u00eb kapjes s\u00eb trafikut transit (MITM). V\u00ebrehet se sulmi \u00ebsht\u00eb shum\u00eb i komplikuar p\u00ebr t'u realizuar n\u00eb praktik\u00eb dhe ka nj\u00eb karakter m\u00eb shum\u00eb teprohetik. P\u00ebr t\u00eb kryer sulmin k\u00ebrkohet nj\u00eb konfigurim specifik i serverit TLS dhe mund\u00ebsia e matjes shum\u00eb t\u00eb sakt\u00eb t\u00eb koh\u00ebs s\u00eb p\u00ebrpunimit t\u00eb operacioneve nga serveri.<\/p>\n

Problemi ekziston drejtp\u00ebrdrejt n\u00eb specifikimin TLS dhe prek vet\u00ebm lidhjet q\u00eb p\u00ebrdorin kriptografia t\u00eb bazuar n\u00eb protokollin e shk\u00ebmbimit t\u00eb \u00e7el\u00ebsave DH (Diffie-Hellman, TLS_DH_*). Me kriptografi ECDH problemi nuk shfaqet dhe ato mbeten t\u00eb sigurta. T\u00eb prekura jan\u00eb vet\u00ebm protokollet TLS deri n\u00eb versionin 1.2 p\u00ebrfshir\u00eb, protokolli TLS 1.3 nuk \u00ebsht\u00eb i ekspozuar ndaj k\u00ebtij problemi. Vulnerabiliteti shfaqet n\u00eb implementimet e TLS q\u00eb rip\u00ebrdorin \u00e7el\u00ebsin sekret DH n\u00eb lidhje t\u00eb ndryshme TLS (nj\u00eb sjellje e till\u00eb v\u00ebrehet n\u00eb rreth 4.4% t\u00eb server\u00ebve nga renditja Alexa Top 1M).<\/p>\n

N\u00eb OpenSSL 1.0.2e dhe versione m\u00eb t\u00eb hershme, \u00e7el\u00ebsi kryesor DH rip\u00ebrdoret n\u00eb t\u00eb gjitha lidhjet e serverit, n\u00ebse opsioni SSL_OP_SINGLE_DH_USE nuk \u00ebsht\u00eb aktivizuar qart\u00eb. Duke filluar nga OpenSSL 1.0.2f, \u00e7el\u00ebsi kryesor DH rip\u00ebrdoret vet\u00ebm kur p\u00ebrdoren kriptografit\u00eb statike DH (\"DH-*\", p\u00ebr shembull \"DH-RSA-AES256-SHA\"). N\u00eb OpenSSL 1.1.1, vulnerabiliteti nuk shfaqet, pasi n\u00eb k\u00ebt\u00eb deg\u00eb nuk p\u00ebrdoret \u00e7el\u00ebsi kryesor DH dhe nuk aplikohen kriptografi statike DH. <\/p>\n

Kur p\u00ebrdoret metoda e shk\u00ebmbimit t\u00eb \u00e7el\u00ebsave DH, t\u00eb dy pal\u00ebt e lidhjes gjenerojn\u00eb \u00e7el\u00ebsa t\u00eb rast\u00ebsish\u00ebm privat\u00eb (\u00e7el\u00ebsi \"a\" dhe \u00e7el\u00ebsi \"b\"), mbi baz\u00ebn e t\u00eb cil\u00ebve llogariten dhe d\u00ebrgohen \u00e7el\u00ebsat publik\u00eb (ga mod p dhe gb mod p). Pas marrjes s\u00eb \u00e7el\u00ebsave publik\u00eb nga secila pal\u00eb, llogaritet \u00e7el\u00ebsi kryesor i p\u00ebrbashk\u00ebt (gab mod p), i cili p\u00ebrdoret p\u00ebr formimin e \u00e7el\u00ebsave t\u00eb sesionit. Sulmi Raccoon lejon identifikimin e \u00e7el\u00ebsit kryesor p\u00ebrmes analiz\u00ebs s\u00eb informacionit nga kanale t\u00eb tjera, duke u mb\u00ebshtetur n\u00eb faktin se n\u00eb especificimet TLS deri n\u00eb versionin 1.2 parashikohet hedhja e t\u00eb gjitha bajt\u00ebve fillestar\u00eb zero t\u00eb \u00e7el\u00ebsit kryesor para llogaritjeve me pjes\u00ebmarrjen e tij.<\/p>\n

P\u00ebrfshir\u00eb nj\u00eb \u00e7el\u00ebs fillestar t\u00eb pranuar n\u00eb funksionin e gjenerimit t\u00eb \u00e7el\u00ebsit t\u00eb sesionit, i cili bazohet n\u00eb funksione hash me vonesa t\u00eb ndryshme p\u00ebr p\u00ebrpunimin e t\u00eb dh\u00ebnave t\u00eb ndryshme. Matjet e sakta t\u00eb koh\u00ebs s\u00eb operacioneve t\u00eb serverit me \u00e7el\u00ebsin lejojn\u00eb sulmuesin t\u00eb identifikoj\u00eb sugjerime (oracle), q\u00eb japin mund\u00ebsin\u00eb p\u00ebr t\u00eb gjykuar n\u00ebse \u00e7el\u00ebsi fillestar fillon nga zeroja apo jo. P\u00ebr shembull, sulmuesi mund t\u00eb kap\u00eb \u00e7el\u00ebsin publik t\u00eb d\u00ebrguar nga klienti (ga), ta d\u00ebrgoj\u00eb at\u00eb p\u00ebrs\u00ebri n\u00eb server dhe t\u00eb p\u00ebrcaktoj\u00eb
\nn\u00ebse \u00e7el\u00ebsi fillestar rezultues fillon nga zeroja.<\/p>\n

M\u00eb vete, p\u00ebrcaktimi i nj\u00eb bajti t\u00eb \u00e7el\u00ebsit nuk jep asgj\u00eb, por duke kapur vler\u00ebn \"ga\" t\u00eb d\u00ebrguar gjat\u00eb negociat\u00ebs s\u00eb lidhjes nga klienti, sulmuesi mund t\u00eb formoj\u00eb nj\u00eb grup vlerash t\u00eb tjera t\u00eb lidhura me \"ga\" dhe t'i d\u00ebrgoj\u00eb ato n\u00eb server n\u00eb seanca t\u00eb ve\u00e7anta t\u00eb negociat\u00ebs s\u00eb lidhjes. Duke formuar dhe d\u00ebrguar vlerat \"gri*ga\", sulmuesi mund t\u00eb p\u00ebrcaktoj\u00eb, p\u00ebrmes analiz\u00ebs s\u00eb ndryshimeve t\u00eb vonesave n\u00eb p\u00ebrgjigjen e serverit, vlerat q\u00eb \u00e7ojn\u00eb n\u00eb marrjen e \u00e7el\u00ebsave kryesor\u00eb q\u00eb fillojn\u00eb nga zero. Duke p\u00ebrcaktuar k\u00ebto vlera, sulmuesi mund t\u00eb p\u00ebrb\u00ebj\u00eb nj\u00eb grup ekuacionesh p\u00ebr zgjidhjen<\/a><\/noindex> problemet e numrave t\u00eb fshehta<\/a><\/noindex> dhe p\u00ebr t\u00eb llogaritur \u00e7el\u00ebsin fillestar origjinal. <\/p>\n

\"Vulnerabiliteti<\/center><\/p>\n

N\u00eb OpenSSL ka dob\u00ebsi i caktuar<\/a><\/noindex> niveli i ul\u00ebt i rrezikut, dhe rregullimi u reduktua n\u00eb zhvendosjen n\u00eb versionin 1.0.2w t\u00eb kriptografive problematike \"TLS_DH_*\" n\u00eb kategorin\u00eb e deaktivizuar nga default t\u00eb kriptografive me nivel t\u00eb pamjaftuesh\u00ebm mbrojtjeje (\"weak-ssl-ciphers\"). Po ashtu vepruan zhvilluesit e Mozilla, t\u00eb cil\u00ebt \u00e7aktivizuan<\/a><\/noindex> n\u00eb bibliotek\u00ebn NSS q\u00eb p\u00ebrdoret n\u00eb Firefox, grupet e cifrave DH dhe DHE. Duke filluar nga Firefox 78, cifrat problematike jan\u00eb \u00e7aktivizuar. N\u00eb Chrome mb\u00ebshtetje p\u00ebr DH u pezullua q\u00eb n\u00eb vitin 2016. Bibliotekat BearSSL, BoringSSL, Botan, Mbed TLS dhe s2n nuk jan\u00eb prekur nga ky problem, pasi nuk mb\u00ebshtesin ciftet DH ose variantet statike t\u00eb ciftave DH. <\/p>\n

P\u00ebrve\u00e7 k\u00ebsaj, sh\u00ebnohen probleme t\u00eb tjera (CVE-2020-5929<\/a><\/noindex>) n\u00eb grumbullin TLS t\u00eb pajisjeve F5 BIG-IP, q\u00eb e b\u00ebjn\u00eb sulmin m\u00eb realist. S\u00eb ve\u00e7anti, jan\u00eb zbuluar devijime n\u00eb sjelljen e pajisjeve kur ka nj\u00eb bajt zero n\u00eb fillim t\u00eb \u00e7el\u00ebsit primar, t\u00eb cilat mund t\u00eb p\u00ebrdoren n\u00eb vend t\u00eb matjes s\u00eb sakt\u00eb t\u00eb vones\u00ebs gjat\u00eb llogaritjeve.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2020-1968) \u0432 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 TLS, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043a\u043e\u0434\u043e\u0432\u043e\u0435 \u0438\u043c\u044f Raccoon \u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u0440\u0438 \u0440\u0435\u0434\u043a\u043e\u043c \u0441\u0442\u0435\u0447\u0435\u043d\u0438\u0438 \u043e\u0431\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u0441\u0442\u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0439 \u043f\u0435\u0440\u0432\u0438\u0447\u043d\u044b\u0439 \u043a\u043b\u044e\u0447 (pre-master), \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u043a\u0438 TLS-\u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 HTTPS, \u043f\u0440\u0438 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0435 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 (MITM). \u041e\u0442\u043c\u0435\u0447\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u043e\u0447\u0435\u043d\u044c \u0441\u043b\u043e\u0436\u043d\u0430 \u0434\u043b\u044f \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0438 \u0438 \u0431\u043e\u043b\u044c\u0448\u0435 \u043d\u043e\u0441\u0438\u0442 \u0442\u0435\u043e\u0440\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440. \u0414\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0442\u0430\u043a\u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":93918,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-93917","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47 Vulnerabiliteti n\u00eb TLS q\u00eb lejon identifikimin e \u00e7el\u00ebsit p\u00ebr lidhjet bazuar n\u00eb algoritmet DH | ProHoster","description":"Informacione mbi nj\u00eb t\u00eb re","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-tls-dopuskayushhaya-opredelenie-klyucha-dlya-soedinenij-na-baze-shifrov-dh","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 TLS, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0430\u044f \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u0438\u0435 \u043a\u043b\u044e\u0447\u0430 \u0434\u043b\u044f \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0439 \u043d\u0430 \u0431\u0430\u0437\u0435 \u0448\u0438\u0444\u0440\u043e\u0432 DH | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u0439","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-tls-dopuskayushhaya-opredelenie-klyucha-dlya-soedinenij-na-baze-shifrov-dh","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-09-10T23:41:59+00:00","article:modified_time":"2020-09-10T23:41:59+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"93917","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 11:37:29","updated":"2022-10-06 06:50:38","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/93917","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=93917"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/93917\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/93918"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=93917"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=93917"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=93917"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}