{"id":31273,"date":"2019-10-31T21:40:23","date_gmt":"2019-10-31T18:40:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vzlom-wpa3-dragonblood\/"},"modified":"2019-10-31T21:40:23","modified_gmt":"2019-10-31T18:40:23","slug":"vzlom-wpa3-dragonblood","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","title":{"rendered":"Attack mot WPA3: DragonBlood","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"Attack
\n
\nTrots att den nya standarden WPA3 \u00e4nnu inte har implementerats ordentligt, g\u00f6r s\u00e4kerhetsbrister i detta protokoll det m\u00f6jligt f\u00f6r angripare att kn\u00e4cka Wi-Fi-l\u00f6senord.
\n<\/a><\/noindex>
\nProtokollet Wi-Fi Protected Access III (WPA3) lanserades i ett f\u00f6rs\u00f6k att \u00e5tg\u00e4rda de tekniska bristerna i WPA2, som l\u00e4nge ans\u00e5gs os\u00e4kert och s\u00e5rbart f\u00f6r KRACK-attacker (Key Reinstallation Attack). \u00c4ven om WPA3 bygger p\u00e5 en s\u00e4krare handskakning, k\u00e4nd som Dragonfly, som syftar till att skydda Wi-Fi-n\u00e4tverk mot offline-ordboksattacker, har s\u00e4kerhetsforskare Mathy Vanhoef och Eyal Ronen uppt\u00e4ckt svagheter i den tidiga implementationen av WPA3-Personal som kan till\u00e5ta en angripare att \u00e5terst\u00e4lla Wi-Fi-l\u00f6senord genom att utnyttja timingen eller sidok\u00f6ning.<\/p>\n

\u00abAngripare kan l\u00e4sa information som WPA3 antas kryptera s\u00e4kert. Detta kan anv\u00e4ndas f\u00f6r att stj\u00e4la k\u00e4nslig information, s\u00e5som kreditkortsnummer, l\u00f6senord, chattmeddelanden, e-post med mera.\u00bb<\/p><\/blockquote>\n

I den publicerade idag forskningsrapporten<\/a><\/noindex>, kallad DragonBlood, har forskarna noggrant granskat tv\u00e5 typer av designbrister i WPA3: den f\u00f6rsta leder till nedgraderingsattacker och den andra till l\u00e4ckage av sidok\u00f6.<\/p>\n

Cache-baserad sidokanalsattack<\/h3>\n

\nKrypteringsalgoritmen f\u00f6r l\u00f6senord i Dragonfly, \u00e4ven k\u00e4nd som \u00abhunting and pecking\u00bb-algoritmen, inneh\u00e5ller villkorsgrenar. Om en angripare kan avg\u00f6ra vilken gren av if-then-else-satsen som har valts, kan han ta reda p\u00e5 om en l\u00f6senordskomponent har hittats i en specifik iteration av denna algoritm. I praktiken har det visat sig att om en angripare kan k\u00f6ra icke-privilegerad kod p\u00e5 offrets dator, kan cache-baserade attacker anv\u00e4ndas f\u00f6r att avg\u00f6ra vilken gren som togs i den f\u00f6rsta iterationen av l\u00f6senordsgenereringsalgoritmen. Denna information kan anv\u00e4ndas f\u00f6r att utf\u00f6ra en l\u00f6senordsdelningattack (det liknar en offline-ordboksattack).<\/p>\n

Denna s\u00e5rbarhet sp\u00e5ras med identifieraren CVE-2019-9494.<\/p>\n

Skyddet best\u00e5r i att ers\u00e4tta villkorsgrenarna som beror p\u00e5 hemliga v\u00e4rden med hj\u00e4lp av tidskonstantval. Legendre-symbolen<\/a><\/noindex> i konstant tid.<\/p>\n

Sidosattack baserad p\u00e5 synkronisering<\/h3>\n

\nN\u00e4r Dragonfly-handshake anv\u00e4nder vissa multiplikativa grupper, anv\u00e4nder l\u00f6senordskodningsalgoritmen ett variabelt antal iterationer f\u00f6r att koda l\u00f6senordet. Det exakta antalet iterationer beror p\u00e5 det anv\u00e4nda l\u00f6senordet och MAC-adressen f\u00f6r b\u00e5de \u00e5tkomstpunkten och klienten. En angripare kan genomf\u00f6ra en fj\u00e4rrtempor\u00e4r attack mot l\u00f6senordskodningsalgoritmen f\u00f6r att avg\u00f6ra hur m\u00e5nga iterationer som kr\u00e4vdes f\u00f6r att koda l\u00f6senordet. Den \u00e5terst\u00e4llda informationen kan anv\u00e4ndas f\u00f6r att genomf\u00f6ra en l\u00f6senordsattack som liknar en offline ordboksattack.<\/p>\n

F\u00f6r att f\u00f6rebygga synkroniseringsbaserade attacker m\u00e5ste implementationer inaktivera de s\u00e5rbara multiplikativa grupperna. Tekniskt sett b\u00f6r grupperna MODP 22, 23 och 24 inaktiveras. Det rekommenderas ocks\u00e5 att inaktivera grupperna MODP 1, 2 och 5.<\/p>\n

Den h\u00e4r s\u00e5rbarheten sp\u00e5ras ocks\u00e5 med identifieraren CVE-2019-9494 p\u00e5 grund av likheten med attackimplementeringen.<\/p>\n

WPA3 nedgradering<\/h3>\n

\nEftersom den 15-\u00e5riga protokollet WPA2 har anv\u00e4nts av miljarder enheter, kommer det inte att finnas ett omedelbart spridande av WPA3. F\u00f6r att st\u00f6dja \u00e4ldre enheter erbjuder certifierade WPA3-enheter en \"\u00f6verg\u00e5ngsdrift\" som kan konfigureras f\u00f6r att ta emot anslutningar med b\u00e5de WPA3-SAE och WPA2.<\/p>\n

Forskare tror att \u00f6verg\u00e5ngsdriften \u00e4r s\u00e5rbar f\u00f6r nedgraderingsattacker som angripare kan anv\u00e4nda f\u00f6r att skapa en falsk \u00e5tkomstpunkt som endast st\u00f6der WPA2, vilket tvingar enheter som st\u00f6djer WPA3 att ansluta med den os\u00e4kra fyrv\u00e4gshandshake som anv\u00e4nds av WPA2.<\/p>\n

\"Vi har ocks\u00e5 uppt\u00e4ckt en nedgraderingsattack mot sj\u00e4lva SAE-handshake ('Simultaneous Authentication of Equals', ofta kallad 'Dragonfly') d\u00e4r vi kan tvinga en enhet att anv\u00e4nda en svagare elliptisk kurva \u00e4n normalt,\" s\u00e4ger forskarna.<\/p><\/blockquote>\n

\nDessutom beh\u00f6vs ingen \"man-in-the-middle\"-st\u00e4llning f\u00f6r att genomf\u00f6ra en nedgraderingsattack. Ist\u00e4llet m\u00e5ste angriparna endast k\u00e4nna till SSID f\u00f6r WPA3-SAE-n\u00e4tverket.<\/p>\n

Forskare har rapporterat sina resultat till Wi-Fi Alliance, en ideell organisation som certifierar WiFi-standarder och produkter f\u00f6r \u00f6verensst\u00e4mmelse, som har erk\u00e4nt problemen och arbetar med leverant\u00f6rer f\u00f6r att \u00e5tg\u00e4rda befintliga enheter som \u00e4r certifierade med WPA3.<\/p>\n

PoC (vid tidpunkten f\u00f6r publiceringen \u2014 404)<\/h3>\n

\nSom en bekr\u00e4ftelse p\u00e5 konceptet kommer forskarna snart att sl\u00e4ppa f\u00f6ljande fyra separata verktyg (i GitHub-repositorier med hyperl\u00e4nkar nedan) som kan anv\u00e4ndas f\u00f6r att kontrollera s\u00e5rbarheter.<\/p>\n

Dragondrain<\/noindex> \u2014 ett verktyg som kan kontrollera hur s\u00e5rbar en \u00e5tkomstpunkt \u00e4r f\u00f6r DoS-attacker mot WPA3 Dragonfly-handshake.
\nDragontime<\/noindex> \u2014 ett experimentellt verktyg f\u00f6r att utf\u00f6ra tidsattacker mot Dragonfly-handshake.
\nDragonforce<\/a><\/noindex> \u2014 ett experimentellt verktyg som inh\u00e5ller information f\u00f6r att \u00e5terst\u00e4lla efter tidsattacker och genomf\u00f6ra ett l\u00f6senordsangrepp.
\nDragonslayer<\/a><\/noindex> \u2014 ett verktyg som utf\u00f6r attacker mot EAP-pwd.<\/p>\n

Dragonblood: En s\u00e4kerhetsanalys av WPA3:s SAE-handshake<\/a><\/noindex>
\nProjektets webbplats \u2014 wpa3.mathyvanhoef.com<\/a><\/noindex>
\n
K\u00e4lla: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 WPA3 \u0435\u0449\u0435 \u0442\u043e\u043b\u043a\u043e\u043c \u043d\u0435 \u0432\u0432\u0435\u0434\u0435\u043d \u0432 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044e, \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u043c \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u0437\u043b\u043e\u043c\u0430\u0442\u044c \u043f\u0430\u0440\u043e\u043b\u044c Wi-Fi. \u041f\u0440\u043e\u0442\u043e\u043a\u043e\u043b Wi-Fi Protected Access III (WPA3) \u0431\u044b\u043b \u0437\u0430\u043f\u0443\u0449\u0435\u043d \u0432 \u043f\u043e\u043f\u044b\u0442\u043a\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0442\u044c \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 WPA2, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0434\u043e\u043b\u0433\u043e\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0447\u0438\u0442\u0430\u043b\u0441\u044f \u043d\u0435\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u044b\u043c \u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0434\u043b\u044f KRACK-\u0430\u0442\u0430\u043a\u0438 (Key Reinstallation Attack). \u0425\u043e\u0442\u044f WPA3 \u043e\u043f\u0438\u0440\u0430\u0435\u0442\u0441\u044f \u043d\u0430 \u0431\u043e\u043b\u0435\u0435 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23239,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31273","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Hacking av WPA3: DragonBlood | ProHoster","description":"Trots att den nya WPA3-standarden \u00e4nnu inte har inf\u00f6rts ordentligt.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0412\u0437\u043b\u043e\u043c WPA3: DragonBlood | ProHoster","og:description":"\u041d\u0435\u0441\u043c\u043e\u0442\u0440\u044f \u043d\u0430 \u0442\u043e, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0439 \u0441\u0442\u0430\u043d\u0434\u0430\u0440\u0442 WPA3 \u0435\u0449\u0435 \u0442\u043e\u043b\u043a\u043e\u043c \u043d\u0435 \u0432\u0432\u0435\u0434\u0435\u043d \u0432.","og:url":"https:\/\/prohoster.info\/sv\/blog\/administrirovanie\/vzlom-wpa3-dragonblood","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:40:23+00:00","article:modified_time":"2019-10-31T18:40:23+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31273","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 05:21:38","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:12:48","updated":"2026-01-21 05:21:38","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/31273","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=31273"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/31273\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/23239"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=31273"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=31273"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=31273"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}