Return Of Bleichenbacher’s Oracle Threat (ROBOT)

on YouTube ↗24m

" summary

Large-scale scans of TLS servers find real Bleichenbacher oracles: almost a third of the top 100 domains and many in an Alexa Top 1M sweep are affected. Vulnerable products span nine vendors (F5, Citrix, Radware, Palo Alto Networks, IBM, Cisco, …). New side-channels include TCP resets and timeouts and duplicated alert messages. Practical exploitation signs include successfully signing a message with facebook.com’s private key, proving remote RSA PKCS#1 v1.5 decryption/signing is feasible.

AI-written summary · about

" chapters (12)

1. 0:00Intro
2. 0:11Recent Attacks on TLS
3. 1:49TLS Protocol (High Level Overview)
4. 2:30TLS RSA Handshake
5. 4:51Bleichenbacher's Attack
6. 7:02Creating Bleichenbacher's Oracle
7. 8:05TLS Countermeasure
8. 12:14Let's Start Scanning
9. 13:12Alexa Top 1 Million Scan
10. 17:58Test Tools
11. 18:42Future Work
12. 19:33Conclusions

" related talks

• 44mThe DROWN AttackSebastian Schinzel · RuhrSec 2016
• 41mZombie POODLE, GOLDENDOODLE, and How TLSv1.3 Can Save Us AllCraig Young · Black Hat Asia 2019
• 25mDROWN: Breaking TLS Using SSLv2David Adrian, Sebastian Schinzel, Luke Valenta, Juraj Somorovsky, Shaanan Cohney, J. Alex Halderman, Nimrod Aviram, Nadia Heninger, Maik Dankel, Jens Steube, Viktor Dukhovni, Emilia Käsper, Susanne Engels, Christof Paar, Yuval Shavitt · USENIX Security '16
• 44mCryptography in the age of HeartbleedMatthew Green · AppSecUSA 2016
• 51mA Retrospective on the Use of Export CryptographyDavid Adrian · Black Hat USA 2016
• 24mA Decade After Bleichenbacher '06, RSA Signature Forgery Still WorksSze Yiu Chau · Black Hat USA 2019
• 46mInfiltrating Corporate Intranet Like NSA - Pre-auth RCE on Leading SSL VPNsOrange Tsai, Meh Chang · Black Hat USA 2019
• 29mLike Lightning From the Cloud: Finding RCEs in an Embedded TLS LibraryNiels Buchmann, Thomas Kemmer · Black Hat Asia 2022