Mokhoa o Mocha oa Tlhaselo ea Lehlakoreng la ho Fuputsa Linotlolo tsa ECDSA

Bafuputsi ba Univesithi. Masaryk koaheloa tlhahisoleseding mabapi le bofokodi ts'ebetsong e fapaneng ea algorithm ea tlhahiso ea signature ea ECDSA/EdDSA, e u lumellang ho khutlisa boleng ba senotlolo sa poraefete ho ipapisitse le tlhahlobo ea ho lutla ha tlhahisoleseling mabapi le likotoana tse hlahang ha u sebelisa mekhoa ea tlhahlobo ea motho oa boraro. Bofokoli bo ne bo bitsoa Minerva.

Merero e tsebahalang haholo e anngoeng ke mokhoa oa tlhaselo o reriloeng ke OpenJDK/OracleJDK (CVE-2019-2894) le laeborari. libgcrypt (CVE-2019-13627) e sebelisitsoeng ho GnuPG. E boetse e ka ba le bothata MatrixSSL, Crypto++, wolfCrypt, selikalikoe, jsrsasign, python-ecdsa, ruby_ecdsa, fastecdsa, bonolo-ecc le likarete tse bohlale tsa Athena IDProtect. Ha e ea lekoa, empa likarete tsa Valid S/A IDflex V, SafeNet eToken 4300 le TecSec Armored Card, tse sebelisang mojule o tloaelehileng oa ECDSA, le tsona li phatlalatsoa e le tse ka bang kotsing.

Bothata bo se bo lokisitsoe ho libgcrypt 1.8.5 le wolfCrypt 4.1.0, merero e setseng ha e e-s'o hlahise lintlafatso. U ka tseba ho lokisa bothata ba sephutheloana sa libgcrypt kabong maqepheng ana: Debian, Botho, RHEL, Fedora, bulaSUSE / SUSE, FreeBSD, Arch.

Likotsi e sa tshoheng OpenSSL, Botan, mbedTLS le BoringSSL. Ha e so lekoe Mozilla NSS, LibreSSL, Nettle, BearSSL, cryptlib, OpenSSL ka mokhoa oa FIPS, Microsoft .NET crypto,
libkcapi ho tsoa ho Linux kernel, Sodium le GnuTLS.

Bothata bo bakoa ke bokhoni ba ho tseba boleng ba likotoana tsa motho ka mong nakong ea katiso ea scalar ts'ebetsong ea elliptic curve. Mekhoa e sa tobang, joalo ka ho hakanya tieho ea khomphutha, e sebelisoa ho ntša litaba tse nyane. Tlhaselo e hloka phihlello e sa lokang ho moamoheli eo ho hlahisoang signature ea dijithale (eseng kgethile le tlhaselo e hōle, empa e rarahane haholo 'me e hloka palo e kholo ea data bakeng sa tlhahlobo, kahoo e ka nkoa e le ntho e ke keng ea etsahala). Bakeng sa ho kenya fumaneha lisebelisoa tse sebedisoang bakeng sa tlhaselo.

Leha ho na le boholo bo sa reng letho ba ho lutla, bakeng sa ECDSA ho fumana esita le likotoana tse 'maloa tse nang le tlhaiso-leseling mabapi le vector ea ho qala (nonce) ho lekane ho etsa tlhaselo ea ho khutlisa senotlolo sa poraefete ka tatellano. Ho ea ka bangoli ba mokhoa ona, ho fumana senotlolo ka katleho, tlhahlobo ea li-signature tse makholo a 'maloa ho isa ho tse likete tse' maloa tse hlahisoang bakeng sa melaetsa e tsejoang ke mohlaseli e lekane. Mohlala, li-signature tse likete tse 90 tsa dijithale li ile tsa hlahlojoa ho sebelisoa secp256r1 elliptic curve ho fumana senotlolo sa lekunutu se sebelisitsoeng ho karete e bohlale ea Athena IDProtect e ipapisitseng le chip ea Inside Secure AT11SC. Nako eohle ea tlhaselo e bile metsotso e 30.

Source: opennet.ru