4 ms·
OpenBSD MitM attack against WPA1/WPA2
- dogma1138 10y agoIf anyone has an AP in a repeater/client mode it might also be affected so better update.
- notaplumber 10y agoI mean, if you were relying on WPA for security.. you have more important problems. As someone else pointed out, MitM attacks can happen at any hop on the Internet.
- comboy 10y agoWEP yes, but AFAIK WPA/WPA2 with strong passphrase is still considered to be secure. Of course you need to have many security layers, but without described MITM, this layer doesn't seem to be broken.
- notaplumber 10y agoWPA? No. https://marc.info/?l=openbsd-cvs&m=148224048415556&w=2 https://marc.info/?l=openbsd-cvs&m=148224048415556&w=2 https://marc.info/?l=openbsd-cvs&m=148455931602152&w=2 https://marc.info/?l=openbsd-cvs&m=148455931602152&w=2
- bitwize 10y agoYour favorite crypto protocol/hash function/secure RNG is likely already broken -- it's just that no one has found an exploit yet.
- 0xcde4c3db 10y agoIf I'm reading things right, this sounds like a vulnerability in WPA itself kept open for backward compatibility. It's fixed by implementing the "4-way handshake", which a comment in the patch says is not in the standard. I'm pretty sure it is in 802.11i (published by IEEE), so maybe it's not in WPA (published by Wi-Fi Alliance)?. I don't know where to find the actual WPA version of the spec to check; maybe it was never public.
- gipsies 10y agoNo, the standard is secure. This is a vulnerability in the implementation. The comment in the code merely says that the explicit definition of the state machine behind a 4-way handshake implementation is not in the standard (but it's described in prose). Most standards don't provide explicit state machines. The 802.11i is the official standard. WPA1 is based on a draft of 802.11i, while WPA2 is based on the final version of 802.11i. All of them contain the 4-way handshake.
- 0xcde4c3db 10y agoOkay, thanks for the clarification. I guess my main point of confusion is why it would work (edit: that is, why an OpenBSD client would be able to connect pre-patch), but I guess if there's no actual state machine that makes it possible for an attacker to "skip to the end"?
- gipsies 10y agoExactly, since there is no state machine, an attacker can immediately send the last message. The client will try to check the integrity of this message. But it will use an uninitialized all-zero key to do this! So an attacker can spoof the last message. And once the client receives this message, it will accept all traffic.
- myowncrapulence 10y agoWould this compromise any consumer routers?
- Wheaties466 10y agoDoes anyone know any Vendors that use BSD an their underlying OS? most that I have experience with are some flavor of custom linux.
- 0xcde4c3db 10y agoJuniper Networks (the Junos operating system for their switches/routers) and Sony Interactive Entertainment (PlayStation 3 and PlayStation 4 operating systems) are the major ones I know of, both forking FreeBSD.
- tyingq 10y agoThere's a pretty good list here for FreeBSD: https://en.m.wikipedia.org/wiki/List_of_products_based_on_FreeBSD https://en.m.wikipedia.org/wiki/List_of_products_based_on_Fr... The exploit, though, is against OpenBSD. Edit: Commercial products based on OpenBSD: https://github.com/ligurio/openbsd-awesome/blob/master/README.md#openbsd-based-products https://github.com/ligurio/openbsd-awesome/blob/master/READM... One interesting item on the list is Mercedes Benz, but not sure what, exactly, they use it for.
- deleted 10y ago[deleted]
- xenophonf 10y agoHere's a list for OpenBSD: https://github.com/ligurio/openbsd-awesome/#openbsd-based-products https://github.com/ligurio/openbsd-awesome/#openbsd-based-pr...
- xenophonf 10y agoHere's a list for NetBSD: http://www.netbsd.org/gallery/products.html http://www.netbsd.org/gallery/products.html
- mrsteveman1 10y agoApple seems to use NetBSD as the base system for virtually all of the recent AirPort routers, and the Time Capsule.