TLS renegotiation MITM

[Steve Dispensa]

Hi,

A colleague and I have released details of a new attack against TLS in the
area of renegotiation. Information is here:

http://extendedsubset.com/?p=8

During the process of running this bug (and its proposed solution) to
ground, I implemented a patch to GNUTLS, attached. There are also two new
files that implement the extension that solves the problem.

There is lots of background in the above link, but the one missing part is
the Internet Draft that has been tentatively agreed on by most of the major
vendors (pending IETF action, of course). That draft is what I have
implemented, and you should see it posted to the TLS IETF list tomorrow
morning.

I'd be happy to help in any way I can.

Thanks.

 -Steve





_______________________________________________
Gnutls-devel mailing list
Gnutls-devel@...
http://lists.gnu.org/mailman/listinfo/gnutls-devel

[Nikos Mavrogiannopoulos]

Steve Dispensa wrote:

> Hi,
>
> A colleague and I have released details of a new attack against TLS in the
> area of renegotiation. Information is here:
>
> http://extendedsubset.com/?p=8
>
> During the process of running this bug (and its proposed solution) to
> ground, I implemented a patch to GNUTLS, attached. There are also two new
> files that implement the extension that solves the problem.
>
> There is lots of background in the above link, but the one missing part is
> the Internet Draft that has been tentatively agreed on by most of the major
> vendors (pending IETF action, of course). That draft is what I have
> implemented, and you should see it posted to the TLS IETF list tomorrow
> morning.

Hi thank you for the patch and for identifying the issue as well. I like
both your patch and the fix itself. Would you be interested in signing
the copyright assignment papers for FSF?

best regards,
Nikos


_______________________________________________
Gnutls-devel mailing list
Gnutls-devel@...
http://lists.gnu.org/mailman/listinfo/gnutls-devel

[Steve Dispensa]

Yes, I'd be glad to. It will take me a couple of days to get to a  
printer/scanner, but meanwhile, if an email can do this, take this as  
my official intent to assign copyright to fsf.

  -Steve

On Nov 5, 2009, at 3:03 PM, "Nikos Mavrogiannopoulos"  
<nmav@...> wrote:

> Steve Dispensa wrote:
>> Hi,
>>
>> A colleague and I have released details of a new attack against TLS  
>> in the
>> area of renegotiation. Information is here:
>>
>> http://extendedsubset.com/?p=8
>>
>> During the process of running this bug (and its proposed solution) to
>> ground, I implemented a patch to GNUTLS, attached. There are also  
>> two new
>> files that implement the extension that solves the problem.
>>
>> There is lots of background in the above link, but the one missing  
>> part is
>> the Internet Draft that has been tentatively agreed on by most of  
>> the major
>> vendors (pending IETF action, of course). That draft is what I have
>> implemented, and you should see it posted to the TLS IETF list  
>> tomorrow
>> morning.
>
> Hi thank you for the patch and for identifying the issue as well. I  
> like
> both your patch and the fix itself. Would you be interested in signing
> the copyright assignment papers for FSF?
>
> best regards,
> Nikos

_______________________________________________
Gnutls-devel mailing list
Gnutls-devel@...
http://lists.gnu.org/mailman/listinfo/gnutls-devel

[Simon Josefsson-2]

Steve Dispensa <dispensa@...> writes:

> Hi,
>
> A colleague and I have released details of a new attack against TLS in the
> area of renegotiation. Information is here:
>
> http://extendedsubset.com/?p=8
>
> During the process of running this bug (and its proposed solution) to
> ground, I implemented a patch to GNUTLS, attached. There are also two new
> files that implement the extension that solves the problem.
>
> There is lots of background in the above link, but the one missing part is
> the Internet Draft that has been tentatively agreed on by most of the major
> vendors (pending IETF action, of course). That draft is what I have
> implemented, and you should see it posted to the TLS IETF list tomorrow
> morning.
>
> I'd be happy to help in any way I can.

What GnuTLS version is your patch for?  We haven't used a configure.in
file in a long time.  Would you mind reworking it for GnuTLS 2.8.x
and/or 2.9.x?  Those are the latest stable and experimental branches.

Once the copyright paper issue has been resolved, we could integrate it.

/Simon


_______________________________________________
Gnutls-devel mailing list
Gnutls-devel@...
http://lists.gnu.org/mailman/listinfo/gnutls-devel

[Steve Dispensa]

Glad to. What's the best git tree? I thought I had the right one based  
on the site.

Thanks.

  -Steve

On Nov 6, 2009, at 5:36 AM, "Simon Josefsson" <simon@...>  
wrote:

> Steve Dispensa <dispensa@...> writes:
>
>> Hi,
>>
>> A colleague and I have released details of a new attack against TLS  
>> in the
>> area of renegotiation. Information is here:
>>
>> http://extendedsubset.com/?p=8
>>
>> During the process of running this bug (and its proposed solution) to
>> ground, I implemented a patch to GNUTLS, attached. There are also  
>> two new
>> files that implement the extension that solves the problem.
>>
>> There is lots of background in the above link, but the one missing  
>> part is
>> the Internet Draft that has been tentatively agreed on by most of  
>> the major
>> vendors (pending IETF action, of course). That draft is what I have
>> implemented, and you should see it posted to the TLS IETF list  
>> tomorrow
>> morning.
>>
>> I'd be happy to help in any way I can.
>
> What GnuTLS version is your patch for?  We haven't used a configure.in
> file in a long time.  Would you mind reworking it for GnuTLS 2.8.x
> and/or 2.9.x?  Those are the latest stable and experimental branches.
>
> Once the copyright paper issue has been resolved, we could integrate  
> it.
>
> /Simon

_______________________________________________
Gnutls-devel mailing list
Gnutls-devel@...
http://lists.gnu.org/mailman/listinfo/gnutls-devel

[Simon Josefsson-2]

"Steve Dispensa" <dispensa@...> writes:

> Glad to. What's the best git tree? I thought I had the right one based
> on the site.

What link did you find on our site?  I created a new page at
http://www.gnu.org/software/gnutls/devel.html with some information.

/Simon

> Thanks.
>
>  -Steve
>
> On Nov 6, 2009, at 5:36 AM, "Simon Josefsson" <simon@...>
> wrote:
>
>> Steve Dispensa <dispensa@...> writes:
>>
>>> Hi,
>>>
>>> A colleague and I have released details of a new attack against TLS
>>> in the
>>> area of renegotiation. Information is here:
>>>
>>> http://extendedsubset.com/?p=8
>>>
>>> During the process of running this bug (and its proposed solution) to
>>> ground, I implemented a patch to GNUTLS, attached. There are also
>>> two new
>>> files that implement the extension that solves the problem.
>>>
>>> There is lots of background in the above link, but the one missing
>>> part is
>>> the Internet Draft that has been tentatively agreed on by most of
>>> the major
>>> vendors (pending IETF action, of course). That draft is what I have
>>> implemented, and you should see it posted to the TLS IETF list
>>> tomorrow
>>> morning.
>>>
>>> I'd be happy to help in any way I can.
>>
>> What GnuTLS version is your patch for?  We haven't used a configure.in
>> file in a long time.  Would you mind reworking it for GnuTLS 2.8.x
>> and/or 2.9.x?  Those are the latest stable and experimental branches.
>>
>> Once the copyright paper issue has been resolved, we could integrate
>> it.
>>
>> /Simon

_______________________________________________
Gnutls-devel mailing list
Gnutls-devel@...
http://lists.gnu.org/mailman/listinfo/gnutls-devel