{"id":91429,"date":"2020-08-13T13:42:00","date_gmt":"2020-08-13T11:42:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte"},"modified":"2020-08-13T13:42:00","modified_gmt":"2020-08-13T11:42:00","slug":"ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sv\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","title":{"rendered":"ReVoLTE-attacken, som m\u00f6jligg\u00f6r avlyssning av krypterade samtal i LTE","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

En grupp forskare fr\u00e5n Ruhr-universitetet i Bochum (Tyskland) har presenterat en attackteknik Re­VoL­TE<\/a><\/noindex> (PDF<\/a><\/noindex>), som m\u00f6jligg\u00f6r avlyssning av krypterade r\u00f6stsamtal i 4G\/LTE-n\u00e4tverk som anv\u00e4nder teknologin VoLTE f\u00f6r att \u00f6verf\u00f6ra r\u00f6sttrafik (Voice over LTE<\/a><\/noindex>).
\n.<\/p>\n

F\u00f6r att skydda telefonkonversationer fr\u00e5n avlyssning i VoLTE anv\u00e4nds kryptering baserad p\u00e5 str\u00f6mmande kryptering<\/a><\/noindex>. Specifikationen f\u00f6reskriver att en unik nyckelstr\u00f6m ska genereras f\u00f6r varje session, men som forskarna har uppt\u00e4ckt, s\u00e5 uppfyller 12 av 15 testade basstationer inte detta krav och \u00e5teranv\u00e4nder samma nyckelstr\u00f6m f\u00f6r tv\u00e5 p\u00e5 varandra f\u00f6ljande samtal \u00f6ver en och samma radiokanal eller anv\u00e4nder f\u00f6ruts\u00e4gbara metoder f\u00f6r att generera en ny sekvens.<\/p>\n

\u00c5teranv\u00e4ndningen av nyckelstr\u00f6mmen g\u00f6r det m\u00f6jligt f\u00f6r en angripare att dekryptera inspelad krypterad trafik med konversationen. F\u00f6r att genomf\u00f6ra dekrypteringen av inneh\u00e5llet i ett r\u00f6stanrop avlyssnar angriparen f\u00f6rst och sparar den krypterade radiotrafiken mellan offret och den s\u00e5rbara basstationen. Efter att samtalet har avslutats ringer angriparen tillbaka till offret och f\u00f6rs\u00f6ker h\u00e5lla konversationen s\u00e5 l\u00e4nge som m\u00f6jligt utan att l\u00e5ta offret l\u00e4gga p\u00e5. Under detta samtal spelas den krypterade radiotrafiken ocks\u00e5 in tillsammans med det okrypterade ursprungliga ljudsignalen.<\/p>\n

F\u00f6r att dekryptera det f\u00f6rsta samtalet fr\u00e5n offret kan angriparen, baserat p\u00e5 den krypterade trafik som avlyssnades under det andra samtalet och de ursprungliga r\u00f6stdata som spelades in p\u00e5 angriparens telefon, r\u00e4kna ut v\u00e4rdet av nyckelstr\u00f6mmen som best\u00e4ms genom XOR-operationen mellan de \u00f6ppna och krypterade data. Eftersom nyckelstr\u00f6mmen anv\u00e4nds igen, kan angriparen, genom att anv\u00e4nda den ber\u00e4knade nyckelstr\u00f6mmen f\u00f6r det andra samtalet p\u00e5 de krypterade uppgifterna fr\u00e5n det f\u00f6rsta samtalet, f\u00e5 tillg\u00e5ng till dess ursprungliga inneh\u00e5ll. Ju l\u00e4ngre den andra konversationen varade mellan angriparen och offret, desto mer information kan dekrypteras fr\u00e5n det f\u00f6rsta samtalet. Till exempel, om angriparen lyckades f\u00f6rl\u00e4nga samtalet i 5 minuter, kan han ocks\u00e5 dekryptera 5 minuter.<\/p>\n

F\u00f6r att f\u00e5nga den krypterade trafiken i luften i LTE-n\u00e4tverk anv\u00e4nde forskarna en signalsniffare AirScope<\/a><\/noindex>, och f\u00f6r att f\u00e5 den ursprungliga r\u00f6ststr\u00f6mmen under angreppet anv\u00e4ndes Android-smartphones som styrdes via ADB och SCAT<\/a><\/noindex>. Kostnaden f\u00f6r den utrustning som kr\u00e4vs f\u00f6r att genomf\u00f6ra angreppet uppskattas till 7000 dollar. <\/p>\n


\n
\r\n \"Spela\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Tillverkarna av basstationer informerades om problemet i december f\u00f6rra \u00e5ret och de flesta har redan publicerat patchar f\u00f6r att \u00e5tg\u00e4rda s\u00e5rbarheten. Trots detta kan vissa operat\u00f6rer ha ignorerat uppdateringarna. F\u00f6r att kontrollera s\u00e5rbarheten i LTE- och 5G-n\u00e4tverk f\u00f6rberedd<\/a><\/noindex> ett specialiserat mobilapp f\u00f6r Android 9-plattformen (kr\u00e4ver root-\u00e5tkomst och smartphone med Qualcomm-chip, som Xiaomi Mi A3, One Plus 6T och Xiaomi Mix 3 5G). F\u00f6rutom att best\u00e4mma om s\u00e5rbarheten finns, kan appen \u00e4ven anv\u00e4ndas f\u00f6r att f\u00e5nga trafik och visa systemmeddelanden. Den f\u00e5ngade trafiken sparas i PCAP-format och kan skickas till en anv\u00e4ndardefinierad HTTP-server f\u00f6r efterf\u00f6ljande analys med vanliga verktyg. <\/p>\n

\"ReVoLTE-attacken,<\/a><\/noindex><\/center><\/p>\n

<\/a><\/noindex><\/p>\n

K\u00e4lla: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Re­VoL­TE (PDF), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 \u0441\u0435\u0442\u044f\u0445 \u0441\u043e\u0442\u043e\u0432\u043e\u0439 \u0441\u0432\u044f\u0437\u0438 4G\/LTE, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0449\u0438\u0445 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u0434\u0430\u0447\u0438 \u0433\u043e\u043b\u043e\u0441\u043e\u0432\u043e\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e VoLTE (Voice over LTE). . \u0414\u043b\u044f \u0437\u0430\u0449\u0438\u0442\u044b \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u043d\u044b\u0445 \u0437\u0432\u043e\u043d\u043a\u043e\u0432 \u043e\u0442 \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0430 \u0432 VoLTE \u0434\u043b\u044f \u043a\u0430\u043d\u0430\u043b\u0430 \u043c\u0435\u0436\u0434\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u043c \u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u043e\u0442\u043e\u043a\u043e\u0432\u043e\u0433\u043e \u0448\u0438\u0444\u0440\u0430. \u0421\u043f\u0435\u0446\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91430,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-91429","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47ReVoLTE-attacken som m\u00f6jligg\u00f6r avlyssning av krypterade samtal i LTE | ProHoster","description":"En grupp forskare fr\u00e5n Ruhr-universitetet i Bochum (Tyskland) har presenterat en angreppsteknik kallad ReVoL\u00adTE (","canonical_url":"https:\/\/prohoster.info\/sv\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sv_SE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0410\u0442\u0430\u043a\u0430 ReVoLTE, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u0435\u0440\u0435\u0445\u0432\u0430\u0442\u0438\u0442\u044c \u0437\u0430\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0435 \u0437\u0432\u043e\u043d\u043a\u0438 \u0432 LTE | ProHoster","og:description":"\u0413\u0440\u0443\u043f\u043f\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0420\u0443\u0440\u0441\u043a\u043e\u0433\u043e \u0443\u043d\u0438\u0432\u0435\u0440\u0441\u0438\u0442\u0435\u0442\u0430 \u0432 \u0411\u043e\u0445\u0443\u043c\u0435 (\u0413\u0435\u0440\u043c\u0430\u043d\u0438\u044f) \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0442\u0435\u0445\u043d\u0438\u043a\u0443 \u0430\u0442\u0430\u043a\u0438 Re\u00adVoL\u00adTE (","og:url":"https:\/\/prohoster.info\/sv\/blog\/news\/ataka-revolte-pozvolyayushhaya-perehvatit-zashifrovannye-zvonki-v-lte","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-13T11:42:00+00:00","article:modified_time":"2020-08-13T11:42:00+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91429","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:28:26","updated":"2022-09-30 10:24:43","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/91429","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/comments?post=91429"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/posts\/91429\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media\/91430"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/media?parent=91429"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/categories?post=91429"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sv\/wp-json\/wp\/v2\/tags?post=91429"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}