Attacks/Breaches
9/3/2013
12:52 PM
Connect Directly
RSS
E-Mail
50%
50%

30-Second HTTPS Crypto Cracking Tool Released

BREACH testing tool reveals sites susceptible to attack that recovers plaintext information from encrypted traffic.

9 Android Apps To Improve Security, Privacy
9 Android Apps To Improve Security, Privacy
(click image for larger view)
Three researchers who discovered a crypto attack that can be used to grab sensitive information from HTTPS traffic in less than 30 seconds have released a tool to help website operators see if their systems are susceptible.

Details of the BREACH -- short for Browser Reconnaissance and Exfiltration via Adaptive Compression of Hypertext -- attack were first revealed last month at the Black Hat information security conference in Las Vegas by Salesforce.com lead product security engineer Angelo Prado, Square application security engineer Neal Harris, and Salesforce.com lead security engineer Yoel Gluck.

Their presentation triggered a Department of Homeland Security warning that "a sophisticated attacker may be able to derive plaintext secrets from the ciphertext in an HTTPS stream," and that all versions of the transport layer security (TLS) and secure sockets layer (SSL) protocols are vulnerable.

[ Here's what you can learn from the latest government security breach. Read Department Of Energy Cyberattack: 5 Takeaways. ]

The man-in-the-middle HTTPS crypto attack involves watching "the size of the cipher text received by the browser while triggering a number of strategically crafted requests to a target site," according to exploit details that the developers shared with DHS. "To recover a particular secret in an HTTPS response body, the attacker guesses character by character, sending a pair of requests for each guess. The correct guess will result in a smaller HTTPS response," said the DHS.

Prado has previously said that crafting a fix for HTTPS itself will be a "nontrivial" undertaking.

In the meantime, he and his fellow researchers this week released a tool for launching a BREACH attack for testing purposes. Their tool is available both in the form of source code and instructions, as well as a precompiled binary.

"This is intended for self-assessment only," according to the BREACH tool download page. "Don't do bad things."

To use the tool, "you will need a Windows computer or [virtual machine] to build and run the tool," Prado said in an email interview. Other requirements include the .NET 3.5+ Framework and Visual Studio 2010 or newer, for anyone who wants to modify the code, which is being hosted on GitHub. The tool has been tested with Windows 7.

When using the tool, no man-in-the-middle attack is required for testing a site. Instead, the developers recommended simply pointing the tool -- which emulates a Web client -- at encrypted HTTPS traffic, using a hosts file, which allows host names to be associated with IP addresses.

In addition to this "simple HTTP client that simulates browser behavior," the researchers promised they would release a more full-fledged, browser-based tool that website operators can use to test their susceptibility to a BREACH attack.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Mathew
50%
50%
Mathew,
User Rank: Apprentice
9/11/2013 | 9:28:17 AM
re: 30-Second HTTPS Crypto Cracking Tool Released
Tough to say, but when DHS issues an alert, the risk isn't zero. Likely, this vulnerability could be built on by attackers in the future, so that when paired with an intrusion, they'd be able to siphon away intercepted HTTPS data, which -- because it's being sent using HTTPS -- is more likely to contain sensitive information. So this is more like a warning of dangers to come, unless fixes get made.
David F. Carr
50%
50%
David F. Carr,
User Rank: Apprentice
9/4/2013 | 10:18:48 PM
re: 30-Second HTTPS Crypto Cracking Tool Released
So how dangerous is this really?
Mathew
50%
50%
Mathew,
User Rank: Apprentice
9/4/2013 | 10:34:46 AM
re: 30-Second HTTPS Crypto Cracking Tool Released
Excellent question, I should have referred to previous reporting that included that answer: The researchers have outlined a number of mitigation possibilities, such as separating secrets from user input, or masking secrets by making them random.

These are fixes that would likely need to be implemented by website server software developers, meaning it's not going to happen immediately, either on the development or subsequent implementation front.

One caveat with the vulnerability is that an attacker would first need to infiltrate a target network to then begin sniffing traffic.
David F. Carr
50%
50%
David F. Carr,
User Rank: Apprentice
9/3/2013 | 11:59:00 PM
re: 30-Second HTTPS Crypto Cracking Tool Released
What prevention or remediation steps are site providers supposed to take? Is it the web server that needs to be secured against attack or the applications that run on top of it?
Register for Dark Reading Newsletters
Partner Perspectives
What's This?
In a digital world inundated with advanced security threats, Intel Security seeks to transform how we live and work to keep our information secure. Through hardware and software development, Intel Security delivers robust solutions that integrate security into every layer of every digital device. In combining the security expertise of McAfee with the innovation, performance, and trust of Intel, this vision becomes a reality.

As we rely on technology to enhance our everyday and business life, we must too consider the security of the intellectual property and confidential data that is housed on these devices. As we increase the number of devices we use, we increase the number of gateways and opportunity for security threats. Intel Security takes the “security connected” approach to ensure that every device is secure, and that all security solutions are seamlessly integrated.
Featured Writers
White Papers
Cartoon
Current Issue
Dark Reading's October Tech Digest
Fast data analysis can stymie attacks and strengthen enterprise security. Does your team have the data smarts?
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2013-3304
Published: 2014-10-30
Directory traversal vulnerability in Dell EqualLogic PS4000 with firmware 6.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the default URI.

CVE-2013-7409
Published: 2014-10-30
Buffer overflow in ALLPlayer 5.6.2 through 5.8.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in a .m3u (playlist) file.

CVE-2014-3446
Published: 2014-10-30
SQL injection vulnerability in wcm/system/pages/admin/getnode.aspx in BSS Continuity CMS 4.2.22640.0 allows remote attackers to execute arbitrary SQL commands via the nodeid parameter.

CVE-2014-3584
Published: 2014-10-30
The SamlHeaderInHandler in Apache CXF before 2.6.11, 2.7.x before 2.7.8, and 3.0.x before 3.0.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted SAML token in the authorization header of a request to a JAX-RS service.

CVE-2014-3623
Published: 2014-10-30
Apache WSS4J before 1.6.17 and 2.x before 2.0.2, as used in Apache CXF 2.7.x before 2.7.13 and 3.0.x before 3.0.2, when using TransportBinding, does properly enforce the SAML SubjectConfirmation method security semantics, which allows remote attackers to conduct spoofing attacks via unspecified vect...

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
Follow Dark Reading editors into the field as they talk with noted experts from the security world.