Tag Info

Hot answers tagged

74

TLS is the new name for SSL. Namely, SSL protocol got to version 3.0; TLS 1.0 is "SSL 3.1". TLS versions currently defined include TLS 1.1 and 1.2. Each new version adds a few features and modifies some internal details. We sometimes say "SSL/TLS". HTTPS is HTTP-within-SSL/TLS. SSL (TLS) establishes a secured bidirectional tunnel for arbitrary binary data ...


58

Overview First, I learned a lot of my information from a combination of my amateur radio experience and an awesome talk I sat in at DEFCON 18. The majority of satellite systems are simple repeaters. The signal that comes in on a transponder is cleaned, amplified, and retransmitted. If you know the location and input frequency, and you pump more effective ...


23

ECDHE suites use elliptic curve diffie-hellman key exchange, where DHE suites use normal diffie-hellman. This exchange is signed with RSA, in the same way in both cases. The main advantage of ECDHE is that it is significantly faster than DHE. This blog article talks a bit about the performance of ECDHE vs. DHE in the context of SSL.


22

SSL and TLS are protocols that aim to provide privacy and data integrity between two parties (see RFC 2246), designed to run over a reliable communication protocol (typically TCP). Although the TLS specification doesn't talk about sockets, the design of SSL/TLS was done so that applications could use them almost like traditional TCP sockets, for example ...


22

VPN means "Virtual Private Network". It is a generic concept which designates a part of a bigger network (e.g. the Internet at large) which is logically isolated from the bigger network through non-hardware means (that's what "virtual" means): it is not that we are using distinct cables and switches; rather, isolation is performed through use of ...


19

To add a bit of information on what @CodesInChaos says: When you use ECDHE instead of DHE, you may obtain the following advantages: Better performance. ECDHE is faster, for a given security level; @CodesInChaos points to an article which gives figures; see also this answer for why elliptic curve offer better performance. Smaller messages. An ECDH public ...


18

What would be required to hack a satellite (in general terms, any hack really)? When it comes to satellites, the word general does not apply. Almost every satellite, with very few exceptions is custom. Even the currently orbitng GPS satellites are not all the same: there are GPS IIA, GPS IIR, GPS IIR-M, and GPS IIF. I would venture that even satellites ...


16

Details on Convergence are to be found in the Perspectives Project, notably the corresponding Usenix article. An attacker able to "hide" the server from all notaries (i.e. an attacker working over the local network of the server, mostly) is what the authors call the Lserver model. Ultimately, that attack "works" with default notaries, which use "network ...


15

Just to be clear, it's explicitly not an SSL replacement. It's a replacement for CAs, with the explicit design goal of not forcing some giant IPv6-like "change the world" rollout. It's based in large part on earlier work on solving the SSH Host Key validation problem - see http://www.usenix.org/event/usenix08/tech/full_papers/wendlandt/wendlandt_html/ In ...


14

Public/Private key crypto is used in a wide variety of protocols and data formats, which are implemented by a huge range of application and system software: SSL (https) protocol SSH (secure remote login, tunneling, etc) (public/private authn/authz is optional) Digitally signed PDF files (including attachments within the PDF) Signed Applets and jar archive ...


13

This is incomplete. But hopefully of some use. http://imfreedom.org/wiki/IMessage and https://github.com/meeee/pushproxy (especially the docs section) have done some reverse engineering of apple's proprietary protocol. Seems that every apple device has a SSL/TLS client-side cert for authentication that setup to be known to apple's push server. This is ...


12

In lieu of waxing elequent in a topic that I am only briefly versed, I will defer my response to a DEFCON talk I saw last year that will do at least three things: Blow your mind Expose vulnerabilities in Sats Enlighten your knowledge on the subject in painstaking detail (see item one) Here is the archived talk with video. This is a very nice guy (Matt ...


11

This book is a very good resource on wireless security. This section explains the details of the four-way handshake, but you really need to read the whole chapter to understand it. Both WPA2-PSK and WPA2-EAP result in a Pairwise Master Key (PMK) known to both the supplicant (client) and the authenticator (AP). (In PSK the PMK is derived directly from the ...


11

@ewanm89 is entirely correct. Securing the connection between ground control and a plane should be no different from securing any regular connection. The main issue is that the protocol designers are relying on security by obscurity. Obscurity through the relatively unknown protocol being used. Obscurity through what used to be relatively difficult to ...


10

There are a few confusions in your post. First of all, HMAC is not a hash function. More about HMAC later on. Hash Functions A hash function is a completely public algorithm (no key in that) which mashes bit together in a way which is truly infeasible to untangle: anybody can run the hash function on any data, but finding the data back from the hash output ...


10

I am trying to come up with a way to implement token-based authentication for a REST API without the need for SSL. Don't! Use SSL (well, TLS actually). nothing that isn't public already is going over the wire This is obviously not exact: the user name is captured; TLS would hide user name (I am not saying it is a serious still, but it is an ...


10

DTLS is currently (version 1.2) defined in RFC 6347 by explaining the differences with TLS 1.2 (RFC 5246). Most of the TLS elements are reused with only the smallest differences. The context is that the client and the server want to send each other a lot of data as "datagrams"; they really both want to send a long sequence of bytes, with a defined order, ...


9

To be precise, the "new attack" is an optimization of brute-force, by using a slightly faster way to check whether a key is correct or not, mainly through the knowledge of the first few bytes of plaintext. This offers a speed increase of 50% -- in other words, attacks which took 6 days can now be done in 4 days. To put things in perspective, using a PC from ...


9

I think that -Tfields -eframe.protocols would be the closest thing you'll get. The output looks something like this: eth:ip:tcp:http eth:ip:tcp eth:ip:tcp:http:media eth:ip:tcp eth:ip:udp:nbdgm:smb:browser eth:ip:tcp eth:arp eth:arp eth:ipv6:udp:http eth:ip:udp:http As it can be seen the information displayed will vary a bit depending on which protocol ...


9

Both have security issues if not configured correctly. But first lets start with some definitions: Cisco have a good definition of a VPN: VPN can take several forms. A VPN can be between two end systems, or it can be between two or more networks. A VPN can be built using tunnels or encryption (at essentially any layer of the protocol stack), or both, or ...


9

Let's start with, you keep the Private key for your use only, and the Public key for anyone else ;) Generally speaking, there are two main situations where you would use these: Assymetric Encryption You use Tom's public key to encrypt a message for him only; He would use his matching private key to decrypt it. He would then respond using your public key, ...


9

The Convergence project is based on the Perspectives Project by Carnegie Mellon University. The Perspectives Project has a bit more information on this. (See also their paper) If the attacker sits near the target system, that would be possible, but really hard to execute. From the paper: Lserver + k ยท nm Compromise: This attack is stronger than the ...


9

There's no way to easily automate this in any useful way, because protocols are designed by humans. As such, they don't really follow any set pattern or rules. You're going to have to put the brain-work in yourself to dissect them. However, there are some tricks: Use Wireshark to separate out individual conversations and identify the high-level ...


9

I see two conceptual paths for dealing with lag attacks: Punish lags. When an "artificial" lag is detected, evict the offender and enforce a ban period. This is hard to do in practice because there is a delicate balance to be found between people who cheat through lagging, and people who simply suffer from an occasional hiccup in their Internet connection. ...


8

The April 2009 "session fixation attack" is described here: http://oauth.net/advisories/2009-1/ and in more detail here: http://hueniverse.com/2009/04/explaining-the-oauth-session-fixation-attack/ Security means different things from different perspectives. As I keep repeating on this site, it all depends on your threat model. Application providers have a ...


8

Have you tried tshark -r test.cap -q -z io,phs It will give you a hierarchical list of protocols, not sure if it will suite you needs. =================================================================== Protocol Hierarchy Statistics Filter: frame frame frames:433 bytes:290520 eth ...


8

This page should clear things up: https://github.com/diaspora/diaspora/wiki/Prettygooddiaspora Short summary of the page: Diaspora is still a work in progress and they are not really sure how to proceed. What they would like to have is PGP-encrypted messages everywhere, but run into implementation problems and put that aside for now. What they now use is ...


7

First, of all, I'm not expert on hacking satellites, I don't know how to turn GPS repeater into Death Star. What I find interesting is space exploration, travelling into space and so... Everything I'll write here is just something I read somewhere and it's all hypothetical. Satelitte hacking (yeah, I know it's not quite the same as hijacking it) is ...


7

Is your issue that Bob leaked the data to Charlie? There isn't anything you can really do about this. If Bob can read the data, he can always share it with someone else. If symmetric key cryptography was used, Bob could just send the key itself to Charlie as well as the encrypted message. Better yet, he can still just the decrypted message. There is no way ...



Only top voted, non community-wiki answers of a minimum length are eligible