CERT/CC Vulnerability Note VU#536044
OpenSSL leaks ECDSA private key through a remote timing attack Vulnerability Note VU#536044 Original Release Date: 2011-05-17 | Last Revised: 2011-06-01 The OpenSSL ladder implementation for scalar multiplication of points on elliptic curves over binary fields is susceptible to a timing attack vulnerability. This vulnerability can be used to steal the private key of a TLS server that authenticates
RedHat ã® openssl ãŒã‚モㄠ- ã©ã•ã«ã£ã
2010å¹´3月4æ—¥(木) â– $GENERATE _ BIND ã§ä½¿ã†ã‚¾ãƒ¼ãƒ³ãƒ•ã‚¡ã‚¤ãƒ«ã®æ›¸å¼ã¯ BIND ãŒå‹æ‰‹ã«æ±ºã‚ãŸã‚ã‘ã§ã¯ãªãã€å®Ÿã¯ RFCã§è¦æ ¼åŒ–ã•ã‚Œã¦ã„ã‚‹(ãªã®ã§ã€BIND ã ã‘ã˜ã‚ƒãªã㦠NSD ã§ã‚‚åŒã˜æ›¸å¼ã€‚djbdns ã¯ç‹¬è‡ªå½¢å¼ã ã‘ã©)。 _ ã¨ã¯ã„ãˆã€BIND ã¯ãれを生ã®ã¾ã¾ä½¿ã£ã¦ã‚‹ã‚ã‘ã§ã¯ãªãã€å‹æ‰‹ãªæ‹¡å¼µã‚‚ã—ã¦ã„る。 $GENERATEã¨ã‹ã€‚ã“ã‚ŒãŒä½•ãƒ¢ãƒŽã‹ã¨ã„ã†ã¨ã€é€£ç•ªã‚’自動生æˆã™ã‚‹ãŸã‚ã®ã‚‚ã®ã€‚ $GENERATE 1-10 host-$ IN A 192.0.2.$ ↑ã¨â†“ã¯åŒç¾©ã€‚ host-1 IN A 192.0.2.1 host-2 IN A 192.0.2.2 host-3 IN A 192.0.2.3 ... host-10 IN A 192.0.2.10 ã¨ã£ã¦ã‚‚楽ã¡ã‚“。ãŸã ã—ã€$GENERATE ã¯ã‚ãã¾ã§ã‚¾ãƒ¼ãƒ³ãƒ•ã‚¡ã‚¤ãƒ«ã®è¨˜è¿°ã‚’簡略化ã™ã‚‹ã ã‘ã§ã€DNS
OpenSSLã§ã®è‡ªå·±èªè¨¼å±€(CA)ã¨è‡ªå·±è¨¼æ˜Žæ›¸ã®ä½œæˆ
OpenSSLを利用ã—ãŸã€è‡ªå·±èªè¨¼å±€(CA)ã®æ§‹ç¯‰ã¨ã€ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã®ä½œæˆæ‰‹é †ã¨Apache+mod_SSLã§ã®è¨å®šæ–¹æ³•ã«ã¤ã„ã¦ã‚‚ã”紹介ã—ã¾ã™ã€‚ Section.1ã§ã¯ã€é€šå¸¸ã®https通信をå¯èƒ½ã¨ã™ã‚‹ãŸã‚ã€ä»¥ä¸‹ã®æ‰‹é †ã‚’è¡Œã„ã¾ã™ã€‚ 1.自己èªè¨¼å±€(CA)ã®æ§‹ç¯‰ 2.サーãƒã®è¨¼æ˜Žæ›¸ã®ä½œæˆ 3.自己èªè¨¼å±€ã«ã‚ˆã‚‹ã‚µãƒ¼ãƒè¨¼æ˜Žæ›¸ã¸ã®ç½²å 4.Apache+mod_sslã®è¨å®šä¾‹ Section.2ã§ã¯ã€Section.1ã«åŠ ãˆã¦ã‚¯ãƒ©ã‚¤ã‚¢ãƒ³ãƒˆèªè¨¼ã«åˆ©ç”¨ã™ã‚‹è¨¼æ˜Žæ›¸ã®ç™ºè¡Œæ–¹æ³•ã¨Apacheã®è¨å®šä¾‹ã‚’示ã—ã¾ã™ã€‚ 1.クライアントèªè¨¼ç”¨è¨¼æ˜Žæ›¸ã®ä½œæˆ 2.Apache+mod_sslã§ã®è¨å®šä¾‹ 最åˆã«ã€è‡ªå·±èªè¨¼å±€(以下CA)ã®æ§‹ç¯‰ã‚’è¡Œã„ã¾ã™ã€‚ãªãŠã€CAã®æ§‹ç¯‰ã¯/usr/local/CAã«è¡Œã„ã¾ã™ã€‚ CAを作æˆã™ã‚‹ã«ã¯ã€OpenSSL付属ã®CA.shを利用ã—ã¾ã™ã€‚ (CA.shã¯ã€OpenSS
1
リリースã€éšœå®³æƒ…å ±ãªã©ã®ã‚µãƒ¼ãƒ“スã®ãŠçŸ¥ã‚‰ã›
最新ã®äººæ°—エントリーã®é…ä¿¡
処ç†ã‚’実行ä¸ã§ã™
j次ã®ãƒ–ックマーク
kå‰ã®ãƒ–ックマーク
lã‚ã¨ã§èªã‚€
eコメント一覧を開ã
oページを開ã
{{#tags}}- {{label}}
{{/tags}}