Vulnerabilities / Threats
12:08 PM

HTTPS Vulnerable To Crypto Attack

Security researchers have built a tool that exploits weaknesses in the SSL and TLS encryption protocol, used by millions of websites to secure communications.

The secure sockets layer (SSL) and transport layer security (TLS) encryption protocol, used by millions of websites to secure Web communications via HTTPS, is vulnerable to being decrypted by attackers.

In particular, security researchers Juliano Rizzo and Thai Duong have built a tool that's capable of decrypting and obtaining the authentication tokens and cookies used in many websites' HTTPS requests. "Our exploit abuses a vulnerability present in the SSL/TLS implementation of major Web browsers at the time of writing," they said.

The duo plan to detail their findings, which they characterize as a "fast block-wise chosen-plaintext attack against SSL/TLS," on Friday at the Ekoparty Security Conference in Argentina. They said websites using SSL version 3 and TLS version 1.0 and earlier are vulnerable. Although newer versions of TLS are available--and apparently not vulnerable to this attack--most sites still use TLS 1.0.

[Do you have an effective cyber attack response strategy? See 7 Lessons: Surviving A Zero-Day Attack.]

To illustrate the vulnerability they've discovered and automatically harvest authentication tokens and cookies, the researchers said they've also built a JavaScript-based tool dubbed BEAST, for Browser Exploit Against SSL/TLS. "It is worth noting that the vulnerability that BEAST exploits has been [present] since the very first version of SSL. Most people in the crypto and security community have concluded that it is non-exploitable, that's why it has been largely ignored for many years," Duong told Threatpost.

The researchers plan use BEAST during their Ekoparty presentation to decrypt PayPal authentication cookies and access a PayPal account, according to the Register.

While full details of the vulnerability haven't been publicly disclosed, browser developers don't appear to be running scared. "The researchers disclosed BEAST to browsers so I'm not going to comment in detail until public," said Google Chrome engineer Adam Langley in a Twitter post. "It's neat, but not something to worry about." Opera, however, has already released a related patch, and the researchers said they expect other browser makers to follow suit.

The HTTPS vulnerability is likely to accelerate calls for an overhaul of today's fragile SSL ecosystem. Such calls have intensified after the July 2011 exploit--not revealed publicly until last month--of Dutch certificate authority DigiNotar. As a result of that exploit, attackers were able to issue false credentials for hundreds of legitimate websites, including Gmail and Windows Update.

Interestingly, Rizzo and Duong are no strangers to vulnerability research. Rizzo is one of the founders and designers behind open source network security tool platform Netifera, while Duong is chief security officer for a large Vietnamese bank, and has led Black Hat workshops detailing practical attacks against cryptography.

Last year, notably, the pair detailed a previously unknown "padding oracle attack" (referring not to Oracle, but rather a cryptographic concept) against ASP.NET Web applications that could be used to "decrypt cookies, view states, form authentication tickets, membership password, user data, and anything else encrypted using the framework's API," they said. Exploiting the vulnerability, present in 25% of ASP Web applications, could allow attackers to access information or even compromise systems.

The vulnerability stemmed from how Microsoft implemented AES in ASP.NET. Notably, if an attacker altered the encrypted data contained in a cookie, ASP.NET returned semi-detailed error messages. After amassing enough of these, an attacker could make an educated guess about the encryption key being used.

That vulnerability disclosure led Microsoft to issue an emergency patch.

Security professionals often view compliance as a burden, but it doesn't have to be that way. In this report, we show the security team how to partner with the compliance pros. Download the report here. (Free registration required.)

Comment  | 
Print  | 
More Insights
Newest First  |  Oldest First  |  Threaded View
User Rank: Apprentice
10/13/2011 | 1:46:55 AM
re: HTTPS Vulnerable To Crypto Attack
Is this similar to what Mike Ridpath from IOActive and Moxie spoke on at Blackhat or these new vulnerabilities? HTTPS is taking a beating!
Register for Dark Reading Newsletters
White Papers
Current Issue
Five Emerging Security Threats - And What You Can Learn From Them
At Black Hat USA, researchers unveiled some nasty vulnerabilities. Is your organization ready?
Flash Poll
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
Published: 2015-10-15
The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) objects, which allows context-dependent attackers to cause a denial of service (memory consumption) via an application that processes graphics data, as demonstrated b...

Published: 2015-10-15
netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspecified vectors.

Published: 2015-10-15
Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary users for requests that execute PHP code.

Published: 2015-10-15
Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X (1) user or (2) guest account.

Published: 2015-10-15
Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SSH key, aka Bug ID CSCuw46076.

Dark Reading Radio
Archived Dark Reading Radio
According to industry estimates, about a million new IT security jobs will be created in the next two years but there aren't enough skilled professionals to fill them. On top of that, there isn't necessarily a clear path to a career in security. Dark Reading Executive Editor Kelly Jackson Higgins hosts guests Carson Sweet, co-founder and CTO of CloudPassage, which published a shocking study of the security gap in top US undergrad computer science programs, and Rodney Petersen, head of NIST's new National Initiative for Cybersecurity Education.