{"id":36788,"date":"2019-10-31T22:13:49","date_gmt":"2019-10-31T19:13:49","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novye-uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd\/"},"modified":"2019-10-31T22:13:49","modified_gmt":"2019-10-31T19:13:49","slug":"novye-uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/novye-uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","title":{"rendered":"Nya s\u00e5rbarheter i skyddstekniken f\u00f6r tr\u00e5dl\u00f6sa n\u00e4tverk WPA3 och i EAP-pwd","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mathy Vanhoef och Eyal Ronen (Eyal Ronen<\/a><\/noindex>) har uppt\u00e4ckt<\/a><\/noindex> en ny attackmetod (CVE-2019-13377) f\u00f6r tr\u00e5dl\u00f6sa n\u00e4tverk som anv\u00e4nder WPA3-skydd, vilket m\u00f6jligg\u00f6r att man f\u00e5r information om l\u00f6senordets egenskaper som kan anv\u00e4ndas f\u00f6r att kn\u00e4cka det i offline-l\u00e4ge. Problemet uppst\u00e5r i den aktuella versionen av Hostapd<\/a><\/noindex>.<\/p>\n

Vi p\u00e5minner om att samma f\u00f6rfattare i april uppt\u00e4ckte identifierats<\/a><\/noindex> sex s\u00e5rbarheter i WPA3, f\u00f6r vilka Wi-Fi Alliance, som arbetar med standarder f\u00f6r tr\u00e5dl\u00f6sa n\u00e4tverk, har gjort \u00e4ndringar i rekommendationerna f\u00f6r s\u00e4kra implementationer av WPA3, d\u00e4r det f\u00f6reskrivs att s\u00e4kra elliptiska kurvor ska anv\u00e4ndas. Brainpool<\/a><\/noindex>, ist\u00e4llet f\u00f6r de tidigare godk\u00e4nda elliptiska kurvorna P-521 och P-256. <\/p>\n

Trots detta visade analysen att anv\u00e4ndningen av Brainpool leder till en ny klass av l\u00e4ckage genom sidokanaler i den algoritm som anv\u00e4nds f\u00f6r anslutningshandshake i WPA3. Dragonfly<\/a><\/noindex>, som erbjuder<\/a><\/noindex> skydd mot kn\u00e4ckning av l\u00f6senord i offline-l\u00e4ge. Det uppt\u00e4ckta problemet visar att skapandet av implementationer av Dragonfly och WPA3, fria fr\u00e5n datal\u00e4ckage genom sidokanaler, \u00e4r en extremt komplex uppgift och visar \u00e4ven p\u00e5 otillr\u00e4ckligheten i standardutvecklingsmodeller bakom st\u00e4ngda d\u00f6rrar utan offentlig diskussion av f\u00f6reslagna metoder och granskning av samh\u00e4llet.<\/p>\n

Vid anv\u00e4ndning av den elliptiska kurvan Brainpool vid kodning av l\u00f6senord genom Dragonfly-algoritmen genomf\u00f6rs flera prelimin\u00e4ra iterationer med l\u00f6senordet, kopplade till snabb ber\u00e4kning av en kort hash innan den elliptiska kurvan anv\u00e4nds. Fram till att den korta hashen hittas beror de utf\u00f6rda operationerna direkt p\u00e5 l\u00f6senordet och klientens MAC-adress. K\u00f6rtiden (som korrelerar med antalet iterationer) och f\u00f6rdr\u00f6jningarna mellan operationerna under de prelimin\u00e4ra iterationerna kan m\u00e4tas och anv\u00e4ndas f\u00f6r att best\u00e4mma l\u00f6senordets egenskaper som kan anv\u00e4ndas offline f\u00f6r att verifiera korrektheten av val av delar av l\u00f6senordet under kn\u00e4ckningsprocessen. F\u00f6r att genomf\u00f6ra attacken kr\u00e4vs tillg\u00e5ng till anv\u00e4ndarens system som \u00e4r anslutet till det tr\u00e5dl\u00f6sa n\u00e4tverket. <\/p>\n

Dessutom har forskarna identifierat en andra s\u00e5rbarhet (CVE-2019-13456) kopplad till informationsl\u00e4ckage i implementationen av protokollet EAP-pwd<\/a><\/noindex>, som anv\u00e4nder Dragonfly-algoritmen. Problemet \u00e4r specifikt f\u00f6r RADIUS-servern FreeRADIUS och baserat p\u00e5 l\u00e4ckor via externa kanaler, liksom den f\u00f6rsta s\u00e5rbarheten, g\u00f6r det ocks\u00e5 betydligt enklare att kn\u00e4cka l\u00f6senord. <\/p>\n

I kombination med en f\u00f6rb\u00e4ttrad metod f\u00f6r att filtrera ut brus under tidsm\u00e4tningarna f\u00f6r att avg\u00f6ra antalet iterationer, r\u00e4cker det med att g\u00f6ra 75 m\u00e4tningar f\u00f6r en MAC-adress. Vid anv\u00e4ndning av GPU uppskattas resurskostnaden f\u00f6r att kn\u00e4cka ett enda ordboksl\u00f6senord till $1. S\u00e4kerhetsh\u00f6jande metoder f\u00f6r protokoll som kan blockera identifierade problem har redan inf\u00f6rts i utkast till framtida Wi-Fi-standarder (WPA 3.1<\/a><\/noindex>) och EAP-pwd<\/a><\/noindex>. Tyv\u00e4rr, utan att bryta den bak\u00e5tkompatibilitet som finns i nuvarande versioner av protokollen, g\u00e5r det inte att \u00e5tg\u00e4rda l\u00e4ckor via externa kanaler.<\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef) \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen) \u0432\u044b\u044f\u0432\u0438\u043b\u0438 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 (CVE-2019-13377) \u043d\u0430 \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0435 \u0441\u0435\u0442\u0438, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0435 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u0437\u0430\u0449\u0438\u0442\u044b WPA3, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0438\u0441\u0442\u0438\u043a\u0430\u0445 \u043f\u0430\u0440\u043e\u043b\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0435\u0433\u043e \u043f\u043e\u0434\u0431\u043e\u0440\u0430 \u0432 offline-\u0440\u0435\u0436\u0438\u043c\u0435. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0432 \u0430\u043a\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 Hostapd. \u041d\u0430\u043f\u043e\u043c\u043d\u0438\u043c, \u0447\u0442\u043e \u0432 \u0430\u043f\u0440\u0435\u043b\u0435 \u0442\u0435\u043c\u0438 \u0436\u0435 \u0430\u0432\u0442\u043e\u0440\u0430\u043c\u0438 \u0431\u044b\u043b\u0438 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0448\u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 WPA3, […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-36788","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Nya s\u00e5rbarheter i WPA3-tr\u00e5dl\u00f6sa n\u00e4tverks skyddsteknik och i EAP-pwd | ProHoster","description":"Mathy Vanhoef och Eyal Ronen har identifierat.","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/novye-uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 \u0437\u0430\u0449\u0438\u0442\u044b \u0431\u0435\u0441\u043f\u0440\u043e\u0432\u043e\u0434\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 WPA3 \u0438 \u0432 EAP-pwd | ProHoster","og:description":"\u041c\u044d\u0442\u0438 \u0412\u0430\u043d\u0445\u043e\u0444\u043e\u043c (Mathy Vanhoef) \u0438 \u042d\u044f\u043b\u044c \u0420\u043e\u043d\u0435\u043d (Eyal Ronen) \u0432\u044b\u044f\u0432\u0438\u043b\u0438.","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/novye-uyazvimosti-v-tehnologii-zashhity-besprovodnyh-setej-wpa3-i-v-eap-pwd","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:13:49+00:00","article:modified_time":"2019-10-31T19:13:49+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36788","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-22 04:50:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:38:25","updated":"2026-01-22 04:50:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/36788","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=36788"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/36788\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=36788"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=36788"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=36788"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}