Attacks/Breaches
9/3/2013
12:52 PM
50%
50%

30-Second HTTPS Crypto Cracking Tool Released

BREACH testing tool reveals sites susceptible to attack that recovers plaintext information from encrypted traffic.

9 Android Apps To Improve Security, Privacy
9 Android Apps To Improve Security, Privacy
(click image for larger view)
Three researchers who discovered a crypto attack that can be used to grab sensitive information from HTTPS traffic in less than 30 seconds have released a tool to help website operators see if their systems are susceptible.

Details of the BREACH -- short for Browser Reconnaissance and Exfiltration via Adaptive Compression of Hypertext -- attack were first revealed last month at the Black Hat information security conference in Las Vegas by Salesforce.com lead product security engineer Angelo Prado, Square application security engineer Neal Harris, and Salesforce.com lead security engineer Yoel Gluck.

Their presentation triggered a Department of Homeland Security warning that "a sophisticated attacker may be able to derive plaintext secrets from the ciphertext in an HTTPS stream," and that all versions of the transport layer security (TLS) and secure sockets layer (SSL) protocols are vulnerable.

[ Here's what you can learn from the latest government security breach. Read Department Of Energy Cyberattack: 5 Takeaways. ]

The man-in-the-middle HTTPS crypto attack involves watching "the size of the cipher text received by the browser while triggering a number of strategically crafted requests to a target site," according to exploit details that the developers shared with DHS. "To recover a particular secret in an HTTPS response body, the attacker guesses character by character, sending a pair of requests for each guess. The correct guess will result in a smaller HTTPS response," said the DHS.

Prado has previously said that crafting a fix for HTTPS itself will be a "nontrivial" undertaking.

In the meantime, he and his fellow researchers this week released a tool for launching a BREACH attack for testing purposes. Their tool is available both in the form of source code and instructions, as well as a precompiled binary.

"This is intended for self-assessment only," according to the BREACH tool download page. "Don't do bad things."

To use the tool, "you will need a Windows computer or [virtual machine] to build and run the tool," Prado said in an email interview. Other requirements include the .NET 3.5+ Framework and Visual Studio 2010 or newer, for anyone who wants to modify the code, which is being hosted on GitHub. The tool has been tested with Windows 7.

When using the tool, no man-in-the-middle attack is required for testing a site. Instead, the developers recommended simply pointing the tool -- which emulates a Web client -- at encrypted HTTPS traffic, using a hosts file, which allows host names to be associated with IP addresses.

In addition to this "simple HTTP client that simulates browser behavior," the researchers promised they would release a more full-fledged, browser-based tool that website operators can use to test their susceptibility to a BREACH attack.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Mathew
50%
50%
Mathew,
User Rank: Apprentice
9/11/2013 | 9:28:17 AM
re: 30-Second HTTPS Crypto Cracking Tool Released
Tough to say, but when DHS issues an alert, the risk isn't zero. Likely, this vulnerability could be built on by attackers in the future, so that when paired with an intrusion, they'd be able to siphon away intercepted HTTPS data, which -- because it's being sent using HTTPS -- is more likely to contain sensitive information. So this is more like a warning of dangers to come, unless fixes get made.
David F. Carr
50%
50%
David F. Carr,
User Rank: Apprentice
9/4/2013 | 10:18:48 PM
re: 30-Second HTTPS Crypto Cracking Tool Released
So how dangerous is this really?
Mathew
50%
50%
Mathew,
User Rank: Apprentice
9/4/2013 | 10:34:46 AM
re: 30-Second HTTPS Crypto Cracking Tool Released
Excellent question, I should have referred to previous reporting that included that answer: The researchers have outlined a number of mitigation possibilities, such as separating secrets from user input, or masking secrets by making them random.

These are fixes that would likely need to be implemented by website server software developers, meaning it's not going to happen immediately, either on the development or subsequent implementation front.

One caveat with the vulnerability is that an attacker would first need to infiltrate a target network to then begin sniffing traffic.
David F. Carr
50%
50%
David F. Carr,
User Rank: Apprentice
9/3/2013 | 11:59:00 PM
re: 30-Second HTTPS Crypto Cracking Tool Released
What prevention or remediation steps are site providers supposed to take? Is it the web server that needs to be secured against attack or the applications that run on top of it?
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2015-5084
Published: 2015-08-02
The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, which allows physically approximate attackers to obtain sensitive information via unspecified vectors.

CVE-2015-5352
Published: 2015-08-02
The x11_open_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refusal deadline for X connections, which makes it easier for remote attackers to bypass intended access restrictions via a connection outside of the permitted time ...

CVE-2015-5537
Published: 2015-08-02
The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a different vulnerability than CVE-2014-3566.

CVE-2015-5600
Published: 2015-08-02
The kbdint_next_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-interactive devices within a single connection, which makes it easier for remote attackers to conduct brute-force attacks or cause a denial of service (CPU consumptio...

CVE-2015-1009
Published: 2015-07-31
Schneider Electric InduSoft Web Studio before 7.1.3.5 Patch 5 and Wonderware InTouch Machine Edition through 7.1 SP3 Patch 4 use cleartext for project-window password storage, which allows local users to obtain sensitive information by reading a file.

Dark Reading Radio
Archived Dark Reading Radio
What’s the future of the venerable firewall? We’ve invited two security industry leaders to make their case: Join us and bring your questions and opinions!