Tag Info

Hot answers tagged

114

TLS is the new name for SSL. Namely, SSL protocol got to version 3.0; TLS 1.0 is "SSL 3.1". TLS versions currently defined include TLS 1.1 and 1.2. Each new version adds a few features and modifies some internal details. We sometimes say "SSL/TLS". HTTPS is HTTP-within-SSL/TLS. SSL (TLS) establishes a secured bidirectional tunnel for arbitrary binary data ...


61

Overview First, I learned a lot of my information from a combination of my amateur radio experience and an awesome talk I sat in at DEFCON 18. The majority of satellite systems are simple repeaters. The signal that comes in on a transponder is cleaned, amplified, and retransmitted. If you know the location and input frequency, and you pump more effective ...


30

ECDHE suites use elliptic curve diffie-hellman key exchange, where DHE suites use normal diffie-hellman. This exchange is signed with RSA, in the same way in both cases. The main advantage of ECDHE is that it is significantly faster than DHE. This blog article talks a bit about the performance of ECDHE vs. DHE in the context of SSL.


27

SSL and TLS are protocols that aim to provide privacy and data integrity between two parties (see RFC 2246), designed to run over a reliable communication protocol (typically TCP). Although the TLS specification doesn't talk about sockets, the design of SSL/TLS was done so that applications could use them almost like traditional TCP sockets, for example ...


25

VPN means "Virtual Private Network". It is a generic concept which designates a part of a bigger network (e.g. the Internet at large) which is logically isolated from the bigger network through non-hardware means (that's what "virtual" means): it is not that we are using distinct cables and switches; rather, isolation is performed through use of ...


24

To add a bit of information on what @CodesInChaos says: When you use ECDHE instead of DHE, you may obtain the following advantages: Better performance. ECDHE is faster, for a given security level; @CodesInChaos points to an article which gives figures; see also this answer for why elliptic curve offer better performance. Smaller messages. An ECDH public ...


20

This behaviour is specified by RFC2617. The reason for the extra round trip is that the server can request different kinds of authentication: basic, digest, etc. If you know in advance that the server takes basic authentication, then as you say, you can save a round trip. But that isn't the default, and I think the .NET libraries are right to expose this as ...


19

What would be required to hack a satellite (in general terms, any hack really)? When it comes to satellites, the word general does not apply. Almost every satellite, with very few exceptions is custom. Even the currently orbiting GPS satellites are not all the same: there are GPS IIA, GPS IIR, GPS IIR-M, and GPS IIF. I would venture that even satellites ...


16

The native rsync protocol does not encrypt anything. It is meant only for trusted networks. To use rsync in a secure way, use it with SSH (see the "-e" command-line option) or over a VPN.


16

Details on Convergence are to be found in the Perspectives Project, notably the corresponding Usenix article. An attacker able to "hide" the server from all notaries (i.e. an attacker working over the local network of the server, mostly) is what the authors call the Lserver model. Ultimately, that attack "works" with default notaries, which use "network ...


15

Just to be clear, it's explicitly not an SSL replacement. It's a replacement for CAs, with the explicit design goal of not forcing some giant IPv6-like "change the world" rollout. It's based in large part on earlier work on solving the SSH Host Key validation problem - see http://www.usenix.org/event/usenix08/tech/full_papers/wendlandt/wendlandt_html/ In ...


14

Public/Private key crypto is used in a wide variety of protocols and data formats, which are implemented by a huge range of application and system software: SSL (https) protocol SSH (secure remote login, tunneling, etc) (public/private authn/authz is optional) Digitally signed PDF files (including attachments within the PDF) Signed Applets and jar archive ...


13

This is incomplete. But hopefully of some use. http://imfreedom.org/wiki/IMessage and https://github.com/meeee/pushproxy (especially the docs section) have done some reverse engineering of apple's proprietary protocol. Seems that every apple device has a SSL/TLS client-side cert for authentication that setup to be known to apple's push server. This is ...


13

DTLS is currently (version 1.2) defined in RFC 6347 by explaining the differences with TLS 1.2 (RFC 5246). Most of the TLS elements are reused with only the smallest differences. The context is that the client and the server want to send each other a lot of data as "datagrams"; they really both want to send a long sequence of bytes, with a defined order, ...


12

There are a few confusions in your post. First of all, HMAC is not a hash function. More about HMAC later on. Hash Functions A hash function is a completely public algorithm (no key in that) which mashes bit together in a way which is truly infeasible to untangle: anybody can run the hash function on any data, but finding the data back from the hash output ...


12

In lieu of waxing elequent in a topic that I am only briefly versed, I will defer my response to a DEFCON talk I saw last year that will do at least three things: Blow your mind Expose vulnerabilities in Sats Enlighten your knowledge on the subject in painstaking detail (see item one) Here is the archived talk with video. This is a very nice guy (Matt ...


12

There have been some discussions about mitigating issues with some record splitting. Namely, what makes Poodle efficient is that padding may use up to a full block (8 bytes with 3DES or RC2, 16 bytes with AES). When this happens, only the last byte of the block is checked by the recipient, which is why the alteration from the attacker gets through with ...


11

This book is a very good resource on wireless security. This section explains the details of the four-way handshake, but you really need to read the whole chapter to understand it. Both WPA2-PSK and WPA2-EAP result in a Pairwise Master Key (PMK) known to both the supplicant (client) and the authenticator (AP). (In PSK the PMK is derived directly from the ...


11

@ewanm89 is entirely correct. Securing the connection between ground control and a plane should be no different from securing any regular connection. The main issue is that the protocol designers are relying on security by obscurity. Obscurity through the relatively unknown protocol being used. Obscurity through what used to be relatively difficult to ...


11

To complement the answer from @raz, one must be aware of Protocol Downgrade Attacks. Browsers like IE send their maximum supported version, and then the server chooses (in your case, IE says "I know up to TLS 1.2" and the server responds with "we will do TLS 1.0"). However, browsers know that there exist buggy servers out there, that will simply have an ...


10

I am trying to come up with a way to implement token-based authentication for a REST API without the need for SSL. Don't! Use SSL (well, TLS actually). nothing that isn't public already is going over the wire This is obviously not exact: the user name is captured; TLS would hide user name (I am not saying it is a serious still, but it is an ...


10

Competition is a good thing, and so is redundancy/diversity. While Heartbleed affected a lot of systems and services due to how widespread OpenSSL is, it certainly didn't effect 100% of systems. Having redundancy in software in general is good, if you have a problem with one piece of software you can fail over to another or mitigate the risk by spreading ...


9

There's no way to easily automate this in any useful way, because protocols are designed by humans. As such, they don't really follow any set pattern or rules. You're going to have to put the brain-work in yourself to dissect them. However, there are some tricks: Use Wireshark to separate out individual conversations and identify the high-level ...


9

Let's start with, you keep the Private key for your use only, and the Public key for anyone else ;) Generally speaking, there are two main situations where you would use these: Assymetric Encryption You use Tom's public key to encrypt a message for him only; He would use his matching private key to decrypt it. He would then respond using your public key, ...


9

I think that -Tfields -eframe.protocols would be the closest thing you'll get. The output looks something like this: eth:ip:tcp:http eth:ip:tcp eth:ip:tcp:http:media eth:ip:tcp eth:ip:udp:nbdgm:smb:browser eth:ip:tcp eth:arp eth:arp eth:ipv6:udp:http eth:ip:udp:http As it can be seen the information displayed will vary a bit depending on which protocol ...


9

Both have security issues if not configured correctly. But first lets start with some definitions: Cisco have a good definition of a VPN: VPN can take several forms. A VPN can be between two end systems, or it can be between two or more networks. A VPN can be built using tunnels or encryption (at essentially any layer of the protocol stack), or both, or ...


9

The Convergence project is based on the Perspectives Project by Carnegie Mellon University. The Perspectives Project has a bit more information on this. (See also their paper) If the attacker sits near the target system, that would be possible, but really hard to execute. From the paper: Lserver + k ยท nm Compromise: This attack is stronger than the ...


9

To be precise, the "new attack" is an optimization of brute-force, by using a slightly faster way to check whether a key is correct or not, mainly through the knowledge of the first few bytes of plaintext. This offers a speed increase of 50% -- in other words, attacks which took 6 days can now be done in 4 days. To put things in perspective, using a PC from ...


9

I see two conceptual paths for dealing with lag attacks: Punish lags. When an "artificial" lag is detected, evict the offender and enforce a ban period. This is hard to do in practice because there is a delicate balance to be found between people who cheat through lagging, and people who simply suffer from an occasional hiccup in their Internet connection. ...



Only top voted, non community-wiki answers of a minimum length are eligible