DUHK Crypto Attack Recovers Encryption Keys, Exposes VPN Connections, More

[LASER_oneXM]

After last week we had the KRACK and ROCA cryptographic attacks, this week has gotten off to a similarly "great" start with the publication of a new crypto attack known as DUHK (Don't Use Hard-coded Keys).

The issue at the heart of the DUHK attack is a combination of two main factors.

The first is the usage of the ANSI X9.31 Random Number Generator (RNG). This is an algorithm that takes random data and generates encryption keys used to secure VPN connections, browsing sessions, and other encrypted traffic/data.

The second factor needed for a DUHK attack is when hardware vendors use a hardcoded "seed key" for the ANSI X9.31 RNG algorithm. Normally, vendors should generate a random seed key at device startup or before launching the ANSI X9.31 algorithm.

This means that when you have hardware/software products that combine ANSI X9.31 and deploy a hardcoded seed key, attackers can decrypt encrypted communications carried out through that device. This includes communications passing over VPN connections or encrypted web sessions that carry out login credentials, payment information, Intranet information, private enterprise data, and more.

Old Fortinet FortiGate devices vulnerable to DUHK attacks
The DUHK attack was discovered by two researchers from the University of Pennsylvania and one researcher from Johns Hopkins University.

In a research paper they published today — entitled "Practical state recovery attacks against legacy RNG implementations" — researchers reveal they were able to recover encrypted traffic from Fortinet FortiGate devices used by companies across the world as firewalls or to create private VPN networks

DUHK attack takes up to 4 mins/connection

The attack is not trivial, but researchers say it's practical as an attacker using a modern computer can recover the encryption key in around four minutes per connection.


There is no user interaction needed to carry out a DUHK attack, as all the threat actor needs is a position to observe traffic coming from a vulnerable device. Because this is a passive network attack, victims cannot detect when someone uses a DUHK attack against them.


The research team also warns that other hardware and software products may also be affected by DUHK attacks. Researchers also published a list of products where they found hard-coded ANSI X9.31 seed keys.

ANSI X9.31 was a very popular RNG algorithm

This is because ANSI X9.31 is very widespread. Up until January 2016, the algorithm was on the list of US government (FIPS) approved RNG algorithms.

ANSI X9.31 remained on the list until 2016, even if US NIST deprecated the algorithm in 2011, and scientists warned that the algorithm could be broken if the seed key ever leaked way back in 1998.

"If your product was certified after January 2016, then it is not vulnerable," the research team says. "If it was certified for the X9.31 RNG at any time, FIPS certification does not prevent this implementation vulnerability."

This is because vendors could have FIPS-compliant ANSI X9.31 implementations, but if they left a hard-coded seed key in the firmware, they automatically backdoored their own device's encryption.

More details about the DUHK attack are available on this dedicated homepage, and in a blog post by Matthew Green, one of the researchers.

 

[frogboy]

Not sure what is going on here but I posted this earlier. Weired as my post has gone.

 

[ForgottenSeer 58943]

Anyone running FortiOS 4X deserves to get compromised. That firmware series is about 8 years old and was designed for old B series Fortigates.

Anyone running 4.0X is missing about 2,300 security fixes alone. LOL

 

[Jake Miguel]

Not sure what is going on here but I posted this earlier. Weired as my post has gone.

Yeah I think I saw your post too

 

[Jake Miguel]

This is a mess. Cyber Attacks are getting more frequent. Every major domain is writing on this. KRACK and then this. KRACK happened a week ago only. Weird.

 

[frogboy]

Yeah I think I saw your post too

Thanks.

 

[Jake Miguel]

Wow, I just read "The attacker using a latest system can recover the encryption key within four minutes per connection" that is very quick!

source: DUHK Crypto Attack Exposes VPN Connections by Recovering Encryption Keys

 

[Jake Miguel]

Thanks.

Haha np bud!

 

[zzz00m]

Wow! Just what we needed!

The next big question is how do we determine if we are impacted?

 

[Arequire]

I've emailed Windscribe and asked if they're is vulnerable to this attack. I'll report back when I receive an answer.

 

[Jake Miguel]

Another outbreak. Bad Rabbit. I just read about it.

Bad Rabbit Ransomware Outbreak Hits Eastern Europe

 

[zzz00m]

I've emailed Windscribe and asked if they're is vulnerable to this attack. I'll report back when I receive an answer.

I did the same and got a reply from the Windscribe founder, "we're not affected". They use open source OpenVPN.

 

[Arequire]

I did the same and got a reply from the Windscribe founder, "we're not affected". They use open source OpenVPN.

Got the exact same reply just forgot to post it. :notworthy: