ImperialViolet - Chrome and the BEAST
Thai Duong and Juliano Rizzo today demoed an attack against TLS 1.0's use of cipher block chaining (CBC) in a browser environment. The authors contacted browser vendors several months ago about this and so, in order not to preempt their demo, I haven't discussed any details until now. Contrary to several press reports, Duong and Rizzo have not found, nor do they claim, any new flaws in TLS. They h
gooビジãƒã‚¹EXサービス終了ã®ãŠçŸ¥ã‚‰ã›
æ—¥é ƒã‚ˆã‚Šãƒãƒ¼ã‚¿ãƒ«ã‚µã‚¤ãƒˆgooã€ãªã‚‰ã³ã«gooビジãƒã‚¹EXã‚’ã”利用ã„ãŸã ãèª ã«ã‚ã‚ŠãŒã¨ã†ã”ã–ã„ã¾ã™ã€‚ 「gooビジãƒã‚¹EXã€ã«ã¤ãã¾ã—ã¦ã€èª ã«å‹æ‰‹ãªãŒã‚‰2017å¹´3月21日（ç«æ›œæ—¥ï¼‰åˆå¾Œ2時をもã¡ã¾ã—ã¦ã€ã‚µãƒ¼ãƒ“スã®ã”æ供を終了ã•ã›ã¦ã„ãŸã ãã¾ã—ãŸã€‚ ã“ã‚Œã¾ã§ã”利用ã„ãŸã ãã¾ã—ãŸçš†æ§˜ã«ã¯æ·±ããŠè©«ã³ç”³ã—上ã’ã¾ã™ã¨ã¨ã‚‚ã«ã€ã€Œgooビジãƒã‚¹EXã€ã‚’ã”愛顧ã„ãŸã ãã¾ã—ãŸã“ã¨ã‚’é‹å–¶è€…一åŒå¿ƒã‚ˆã‚Šæ„Ÿè¬ã„ãŸã—ã¾ã™ã€‚
HTTPSã¸ã®BEAST攻撃ã®è¦ç´„ - ytoku’s diary
SSL/TLSã§ä¿è·ã•ã‚ŒãŸHTTPS通信を解èªã™ã‚‹ã¨è©±é¡Œã«ãªã£ãŸ Thai Duong 㨠Juliano Rizzo ã«ã‚ˆã‚‹BEAST攻撃ã«ã¤ã„ã¦èª¿ã¹ãŸã®ã§è‡ªåˆ†ã®ç†è§£ã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ãŠãã“ã¨ã«ã™ã‚‹ã€‚ å‚考文献 Security impact of the Rizzo/Duong CBC "BEAST" attack - Educated Guesswork Tor and the BEAST SSL attack | Tor Blog ImperialViolet - Chrome and the BEAST 攻撃対象ã¯SSL 3.0/TLS 1.0ã®ãƒ–ãƒãƒƒã‚¯æš—å·ã®CBCモードã§ã‚る。RC4を使用ã—ã¦ã„ã‚‹å ´åˆã¯ã‚¹ãƒˆãƒªãƒ¼ãƒ æš—å·ãªã®ã§å½±éŸ¿ã‚’å—ã‘ãªã„。 çµè«–ã‹ã‚‰è¨€ãˆã°HTTPSã«å¯¾ã—ã¦åºƒç¯„囲ã«ä½¿ãˆã‚‹æ”»æ’ƒã§ã¯ãªã•ãã†ã§ã‚る。攻撃をæˆåŠŸã•ã›ã‚‹ã«ã¯WebSocketã‚„Javaãªã©ã«ã‚ˆã£ã¦SSL/TL
BEAST攻撃ã¯ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆå´å¯¾ç–ã§è§£æ±ºã™ã‚‹ã®ã‹
SSLサーãƒãƒ¼è¨å®šã®ãƒ†ã‚¹ãƒˆç›®çš„ã§ä½¿ã£ã¦ã„る人も多ã„ã¨æ€ã† Qualus Security Labsã®è¨˜äº‹ https://community.qualys.com/blogs/securitylabs/2013/09/10/is-beast-still-a-threat ã§ã€SSL Checkerã‹ã‚‰BEAST脆弱性ã®åˆ¤å®š(TLS1.0以下ã§CBCモードを使ã£ã¦ã„ã‚‹)を外ã™ã€ã¨ã„ã†ã®ãŒæœ‰ã£ãŸã®ã§ãƒ¡ãƒ¢ã€‚ BEASTã¯æˆåŠŸã™ã‚‹ã¨æ•°åˆ†ã‹ã‚‰æ•°å秒程度ã§ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã®ã‚»ãƒƒã‚·ãƒ§ãƒ³ãŒè§£èªã•ã‚Œã‚‹ãŸã‚ã€éžå¸¸ã«å±é™ºãªã‚‚ã®ã¨è€ƒãˆã‚‰ã‚Œã¦ã„る（orãŸï¼‰ã€‚ TLSv1.0以å‰ã®ã®CBCモードã§ã¯ã€ã‚»ãƒƒã‚·ãƒ§ãƒ³ã‚’å†åˆ©ç”¨ã—ã¦ãƒªã‚¯ã‚¨ã‚¹ãƒˆã‚’é€ã‚‹éš›ã€æœ€å¾Œã«é€ä¿¡ã•ã‚ŒãŸæš—å·ãƒ–ãƒãƒƒã‚¯ãŒã€æ¬¡ã®HTTPリクエストã®æœ€åˆã®ãƒ–ãƒãƒƒã‚¯ã®IVã¨ã—ã¦ä½¿ã‚ã‚Œã¦ã„る。攻撃者ãŒé€ä¿¡æ¸ˆã¿ã®æœ€å¾Œã®æš—å·ãƒ–ãƒãƒƒã‚¯ã‚’å‚å—ã—ãŸå¾Œã§ã€ãƒªã‚¯ã‚¨ã‚¹ãƒˆã®å…ˆé ブãƒãƒƒã‚¯ã«ã‚ãŸã‚‹å¹³
Attack of the week: RC4 is kind of broken in TLS
Update: I’ve added a link to a page at Royal Holloway describing the new attack. Listen, if you’re using RC4 as your primary ciphersuite in SSL/TLS, now would be a great time to stop. Ok, thanks, are we all on the same page? No? I guess we need to talk about this a bit more. You see, these slides have been making the rounds since this morning. Unfortunately, they contain a long presentation aimed
SSL/TLSã®è„†å¼±æ€§ã‚’攻撃ã™ã‚‹Rizzo/Duong CBC "BEAST" attack - ã†ã•ãŽæ–‡å¦æ—¥è¨˜
話題ã®â€BEASTâ€ã§ã™ãŒã€Ekopartyã§ç™ºè¡¨ãŒã‚ã£ãŸã‚ˆã†ã§ã™ã。発表資料や論文ãªã©ã¯å…¬é–‹ã•ã‚Œã¦ã„ãªã„ã®ã‹ãªã€‚ 追記：論文ã¯ã“ã¡ã‚‰ï¼šhttp://insecure.cl/Beast-SSL.rar Tor and the BEAST SSL attack | The Tor Blog Security impact of the Rizzo/Duong CBC "BEAST" attack - Educated Guesswork èªã‚€ã ã‘ã§ç–²ã‚ŒãŸã€‚BEASTã®æ‰‹æ³•ã¯å¤§æ–¹ã®äºˆæƒ³é€šã‚Šã£ã¦ã¨ã“ã‚ã‹ã€‚WebSocket以外ã®ç’°å¢ƒã§å®Ÿç¾ã™ã‚‹ã®ã¯é›£ã—ãã†ã§ã™ã。
Security impact of the Rizzo/Duong CBC "BEAST" attack - Educated Guesswork
If you're familiar with network security and haven't been living under a rock you've probably seen the recent coverage of Rizzo and Duong's attack on SSL/TLS implementations. they've demoed the attack and information is starting to trickle out (the news articles above were written prior to release), we can begin evaluate the impact of this work. (See AGL's post on this). Unfortunately, there's no
Archived MSDN and TechNet Blogs
If you were looking for MSDN or TechNet blogs, please know that MSDN and TechNet blog sites have been retired, and blog content has been migrated and archived here. How to use this site Archived blogs are grouped alphabetically by the initial letter of the blog name. Select the initial letter from the TOC to see the full list of the blogs. You can also type the name of the blog or the title of the
Apacheã®SSLCipherSuiteã«RC4ã‚’è¨å®šã™ã¹ãã§ã¯ãªã„ - Qiita
Apacheã«é™ã‚‰ãªã„ãŒã€æš—å·åŒ–æ–¹å¼ã¨ã—ã¦RC4æš—å·ãŒæœ€å„ªå…ˆã«è¨å®šã•ã‚Œã¦ã„ã‚‹ã“ã¨ãŒã¾ã¾ã‚る。 ã“ã‚Œã¯å¿…ãšã—ã‚‚ã„ã„ã¨ã¯è¨€ãˆãªã„・・・ã®ã§ã€ãã®ç†ç”±ã‚’ã¾ã¨ã‚ã¦ã¿ãŸã€‚ ãã‚‚ãã‚‚RC4ãŒã‚ˆãè¨å®šã•ã‚Œã¦ã„ã‚‹ã®ã«ã¯ç†ç”±ãŒã‚る。 éŽåŽ»BEASTã¨ã„ã†æ”»æ’ƒæ–¹æ³•ãŒç™ºè¦‹ã•ã‚ŒCBCæš—å·(Cipher Block Chaining：一定ã®é•·ã•ã”ã¨ã«æš—å·åŒ–ã‚’è¡Œã†æ–¹å¼)ã¯å…¨éƒ¨å±ãªã„ï¼ï¼Ÿã¨ã„ã†æ„Ÿã˜ã«ãªã£ãŸã€‚ãã“ã§ç™»å ´ã—ãŸã®ãŒã‚¹ãƒˆãƒªãƒ¼ãƒ æš—å·ã®ä»£è¡¨æ ¼RC4ã§ã‚ã‚Šã€ã“ã‚Œã«è¨å®šã™ã‚Œã°ï¼¯ï¼«ã€ã¨ã„ã†æµã‚ŒãŒä»Šã«ã‚‚至ã£ã¦ã„ã‚‹ã®ã 。 BEAST攻撃ã«ã¤ã„㦠ãŸã 当時ã¨ã¯çŠ¶æ³ãŒå¤‰ã‚ã‚Šã€RC4ã‚’è¨å®šã™ã‚‹ã®ãŒæœ€é©ã¨ã¯è¨€ãˆãªããªã£ã¦ããŸã€‚ ç†ç”±1 RC4ã¯éžæŽ¨å¥¨ã¨ãªã£ãŸ ã¾ãšæœ‰æ¨©è€…ã«è¨´ãˆãŸã„ã®ã¯ã€ç¾åœ¨RC4ã¯è„†å¼±æ€§ãŒç™ºè¦‹ã•ã‚Œã€ã€Œé›»å政府ã«ãŠã‘る調é”ã®ãŸã‚ã«å‚ç…§ã™ã¹ãæš—å·ã®ãƒªã‚¹ãƒˆï¼ˆCRYPTRECæš—å·ãƒªã‚¹ãƒˆï¼‰ã€ã«ã¦æŽ¨å¥¨ã•ã‚Œãªã„é‹ç”¨ç›£è¦–æš—å·ã®å¯¾è±¡ã«
JVNDB-2011-002305 - JVN iPedia - 脆弱性対ç–æƒ…å ±ãƒ‡ãƒ¼ã‚¿ãƒ™ãƒ¼ã‚¹
SSL プãƒãƒˆã‚³ãƒ« ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 3.0 TLS プãƒãƒˆã‚³ãƒ« ãƒãƒ¼ã‚¸ãƒ§ãƒ³ 1.0 TLS 1.1 ãŠã‚ˆã³ TLS 1.2 ã¯ã€æœ¬è„†å¼±æ€§ã®å½±éŸ¿ã‚’å—ã‘ãªã„ã¨ã®ã“ã¨ã§ã™ã€‚ SSL ãŠã‚ˆã³ TLS を使用ã™ã‚‹è¤‡æ•°ã®ãƒ™ãƒ³ãƒ€è£½å“ãŒå½±éŸ¿ã‚’å—ã‘ã‚‹å¯èƒ½æ€§ãŒã‚ã‚Šã¾ã™ã€‚ Google Google Chrome Mozilla Foundation Mozilla Firefox Opera Software ASA Opera VMware VMware ESX 3.5 VMware ESX 4.0 VMware ESX 4.1 VMware vCenter 4.0 (Windows) VMware vCenter 4.1 (Windows) VMware vCenter 5.0 (Windows) VMware VirtualCenter 2.5 (Windows) アップル Apple TV 4.0 ã‹ã‚‰Â
SSL broken. (TLS 1.0 cryptographic attack that works. Not just fake certs.) | Hacker News
I happen to know the details of this attack since I work on Chrome's SSL/TLS stack.The linked article is sensationalist nonsense, but one should give the authors the benefit of the doubt because the press can be like that. Fundamentally there's nothing that people should worry about here. Certainly it's not the case that anything is 'broken'. But http://eprint.iacr.org/2006/136 sure looks like a r
Hackers break SSL encryption used by millions of sites
Researchers have discovered a serious weakness in virtually all websites protected by the secure sockets layer protocol that allows attackers to silently decrypt data that's passing between a webserver and an end-user browser. The vulnerability resides in versions 1.0 and earlier of TLS, or transport layer security, the successor to the secure sockets layer technology that serves as the internet's
ã‚»ã‚ュリティホール memo - 2011.09
》 プライãƒã‚·ä¿è·å›£ä½“ãŒFacebook新機能ã«ç•°è°ã€FTCã¸èª¿æŸ»è¦è«‹ (日経 IT Pro, 9/30)。EPIC ã®è¦è«‹ã€‚ 》 Operation Shady RATã®å…¨è²Œ (マカフィー) 》 国内ã®æˆ¦é—˜æ©Ÿç”Ÿç”£ãŒ55å¹´ã¶ã‚Šã«é€”絶 航空機産æ¥ç•ŒãŒè¦‹å®ˆã‚‹ï¼¦ï¼¸ï¼ˆæ¬¡æœŸä¸»åŠ›æˆ¦é—˜æ©Ÿï¼‰ã®è¡Œæ–¹ (週刊ダイヤモンド, 9/30) é’木æ°ã«ã‚ˆã‚Œã°ã€ã€Œï¼¦-15後継機をé¸ã¶æ®µéšŽã§ã‚‚ã€æ—¥æœ¬ãŒèª¿é”å¯èƒ½ãªæˆ¦é—˜æ©Ÿã®é¡”ã¶ã‚Œã¯ç¾åœ¨ã¨å¤‰ã‚ã£ã¦ãŠã‚‰ãšã€ä»Šå›žã¨åŒã˜3機種ãŒå€™è£œã«æŒ™ãŒã‚‹å¯èƒ½æ€§ãŒé«˜ã„ã€ã€‚ç´„200æ©ŸãŒé…å‚™ã•ã‚Œã¦ã„るＦ-15ã®å¾Œç¶™æ©Ÿã¨ãªã‚‹ã¨ãƒ“ジãƒã‚¹ãƒãƒ£ãƒ³ã‚¹ã‚‚大ããã€ä»®ã«ãã“ã¾ã§ã‚’ç¨ã‚“ã§ãƒãƒƒã‚ード・マーãƒãƒ³ãŒï¼©ï¼°ã§æ—¥æœ¬ä¼æ¥ã«æœ‰åˆ©ãªæ案をã—ã¦ã„るよã†ãªã‚‰ã€ï¼¦-35ã®ãƒãƒ£ãƒ³ã‚¹ãŒåºƒãŒã£ã¦ãる。 æ£ç›´ã€ç¾æ™‚点ã§ãã‚Œã¯ãªã„ã¨æ€ã†ã‘ã©ãªã‚。 》 TOMOYO Linux 1.8.3 / AKARI 1.0.20 ãŒå…¬é–‹ã•ã‚Œã¾ã—ãŸã€‚
SSL/TLSã®è„†å¼±æ€§ã‚’攻撃ã™ã‚‹â€BEASTâ€ã‚’防ãä¿®æ£ã‚’ChromeãŒè¿½åŠ - ã†ã•ãŽæ–‡å¦æ—¥è¨˜
今週ã®Ekoparty security conference ã§ç™ºè¡¨ã•ã‚Œã‚‹äºˆå®šã®ã€SSL/TLSã«ã‚ˆã‚‹æš—å·åŒ–ã®è„†å¼±æ€§ã‚’攻撃ã™ã‚‹PoC â€BEASTâ€ã®æ”»æ’ƒã‹ã‚‰ã®é˜²å¾¡ç–ã‚’ChromeブラウザãŒæ載ã™ã‚‹ã‚ˆã†ã§ã™ã€‚ Googleã¯Chromeブラウザã®ã‚¢ãƒƒãƒ—デートã®æº–å‚™ãŒå®Œäº†ã—ã¦ã„るよã†ã§ã€ã™ã§ã«é–‹ç™ºè€…ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã«ã¯è¿½åŠ 済ã¿ã¨ã®ã“ã¨ã€‚ Google preps Chrome fix to slay SSL-attacking BEAST • The Register BEASTã¯ã€SSLã‚„TLSã«å¯¾ã—ã¦AESæš—å·ã«å¯¾ã™ã‚‹é¸æŠžå¹³æ–‡æ”»æ’ƒã‚’仕掛ã‘ã¾ã™ã€‚å‰ã®å¹³æ–‡ãƒ–ãƒãƒƒã‚¯ã‚’æš—å·åŒ–ã—ãŸçµæžœã‚’ã€æ¬¡ã®ãƒ–ãƒãƒƒã‚¯ã®å¹³æ–‡ã«XOR演算ã—ã¦ã€ãã®çµæžœã«å¯¾ã—ã¦æš—å·åŒ–ã‚’è¡Œã†â€æš—å·æ–‡ãƒ–ãƒãƒƒã‚¯é€£éŽ–モード(CBC：Cipher Block Chaining)â€ã«å¯¾ã—ã¦ã®æ”»æ’ƒã®ã‚ˆã†ã§ã™ã€‚ Chromeã¯ã“ã®æ”»æ’ƒã‚’防ããŸã‚ã«æ”»æ’ƒè€…ãŒ
ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ ã‚»ã‚ュリティ サービス（NSS）
ニュースグループ： netscape.public.mozilla.crypto メイン テクニカル コンタクト： Bob Relyea 管ç†äººï¼šWan-Teh Chang ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ ã‚»ã‚ュリティ サービス （Network Security Services： NSS）ã¨ã¯ã€ã‚»ã‚ュリティ強化å¯èƒ½ãªã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆã‚„サーãƒã‚¢ãƒ—リケーションã®ã‚¯ãƒã‚¹ãƒ—ラットフォーム開発を支æ´ã™ã‚‹ã‚ˆã†ã«è¨è¨ˆã•ã‚ŒãŸãƒ©ã‚¤ãƒ–ラリーã®ä¸€å¼ã§ã™ã€‚NSS ã¨å…±ã«ãƒ“ルドã•ã‚ŒãŸã‚¢ãƒ—リケーションã¯ã€ SSL v2 ãŠã‚ˆã³ v3〠TLS〠PKCS #5〠PKCS #7〠PKCS #11〠PKCS #12〠S/MIME〠X.509 v3 証明書〠ãã®ä»–ã®ã‚»ã‚ュリティè¦æ ¼ã‚’サãƒãƒ¼ãƒˆã—ã¾ã™ã€‚サãƒãƒ¼ãƒˆã•ã‚Œã¦ã„ã‚‹è¦æ ¼ã«ã¤ã„ã¦ã®è©³ç´°æƒ…å ±ã¯ã€NSS 概観 ã‚’ã”覧ãã ã•ã„。 NSS 㯠Mozill
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
https://www.jnsa.org/seminar/2013/0607/data/2E-3_pki_suga.pdf
Security of CBC Ciphersuites in SSL/TLS: Problems and Countermeasures
httpsã ã‹ã‚‰ã¨ã„ã†ã ã‘ã§å®‰å…¨ï¼Ÿèª¿ã¹ãŸã‚‰æ€–ããªã£ã¦ããŸSSLã®è©±!？ - Qiita
TLS æš—å·åŒ–通信ã«å¯¾ã™ã‚‹æ”»æ’ƒã® Firefox ã¸ã®å½±éŸ¿ | Mozilla Japan ブãƒã‚°
https://josefsson.org/talks/secheads-tls-stream.pdf
{{#tags}}- {{label}}
{{/tags}}