4 ms·
Between lack of a a nonce and an asserted exposure to code injection and replay attacks, the issues in the letter imply a week of vulnerability research could y
by motohagiography 7y ago
Between lack of a a nonce and an asserted exposure to code injection and replay attacks, the issues in the letter imply a week of vulnerability research could yield a complete takedown of the product - which would suck because an Apple sign-in experience using their TEE is really valuable.
I could see someone making the choice where they would elect not to manage a nonce because its permuting effect was achieved by other parts of the protocol. Apple also has keys in a TEE, and a nonce generated and synchronized outside of that could have been interpreted as creating additional attack surface.
If the OpenID letter is correct, there are exploitable vulnerabilities in Apples implementation that could be demonstrated. If they are not correct, they could just be angry Apple is leveraging its TEE to assert it doesn't need governance from this standards body because the standard is written for products without a separate hardware keystore.
- empath75 7y agoI don’t think they said there’s a lack of a nonce, it seems to be saying that they’re not allowing the client to set the nonce.
- phs318u 7y agoIf the second part of your sentence is true, could “allowing the client to set the nonce” be considered an increase in the possible attack surface?
- TJSomething 7y agoThe entire point of the nonce is that it can't be predicted by anyone but the client, proving that the client initiated the transaction. This is done by having the client send it over TLS and having the identity provider sign the nonce as cryptographic proof. Also, by my reading, the problem is that the standard requires the nonce parameter to do something and Apple ignores it.
- johnjonesyc 7y agoexactly, this looks like the protocol has been intentionally weakened to provide on the wire access. (state actors / telco) The excuse that they dont want to sign up to the Terms and Conditions holds no water If they are serious about security adopt OpenID in full (they dont have to join just pass the tests) and put fido2 security key functionality on every Apple device Apple have made some smart moves but now the marketing dept need to do the right thing for security standards.
- ggg2 7y agojust like Duo Managed?
- 6gvONxR4sf7o 7y agoI couldn't find the acronym TEE by googling around. What's it mean here?
- adamschwartz 7y agoTrusted Execution Environment
- hackcasual 7y agoTrusted Execution Environment, a secure enclave on the CPU
- 6gvONxR4sf7o 7y agoThank you :)