Variants of Bleichenbacher’s Low-Exponent Attack on PKCS#1 RSA Signatures

Kühn, Ulrich; Pyshkin, Andrei; Tews, Erik; Weinmann, Ralf-Philipp

Variants of Bleichenbacher’s Low-Exponent Attack on PKCS#1 RSA Signatures

dc.contributor.author	Kühn, Ulrich
dc.contributor.author	Pyshkin, Andrei
dc.contributor.author	Tews, Erik
dc.contributor.author	Weinmann, Ralf-Philipp
dc.contributor.editor	Alkassar, Ammar
dc.contributor.editor	Siekmann, Jörg
dc.date.accessioned	2019-04-03T13:29:17Z
dc.date.available	2019-04-03T13:29:17Z
dc.date.issued	2008
dc.description.abstract	We give three variants and improvements of Bleichenbacher’s low-exponent attack from CRYPTO 2006 on PKCS#1 v1.5 RSA signatures. For each of these three variants the fake signature representatives are accepted as valid by a flawed implementation. Our attacks work against much shorter keys as Bleichenbacher’s original attack, i.e. even for usual 1024 bit RSA keys. The first two variants can be used to break a certificate chain for vulnerable im- plementations, if the CA uses a public exponent of 3. Such CA certificates are indeed deployed in many browsers like Mozilla, Opera and Konqueror. The third attack works against the Netscape Security Services only, and requires the public exponent 3 to be present in a site’s certificate, not the CA certificate. Using any of these attack vectors, an active adversary can mount a full man-in-the- middle attack on any SSL connection initiated by a vulnerable client.	en
dc.identifier.isbn	978-3-88579-222-2
dc.identifier.pissn	1617-5468
dc.identifier.uri	https://dl.gi.de/handle/20.500.12116/21520
dc.language.iso	en
dc.publisher	Gesellschaft für Informatik e. V.
dc.relation.ispartof	SICHERHEIT 2008 – Sicherheit, Schutz und Zuverlässigkeit. Beiträge der 4. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft für Informatik e.V. (GI)
dc.relation.ispartofseries	Lecture Notes in Informatics (LNI) - Proceedings, Volume P-128
dc.title	Variants of Bleichenbacher’s Low-Exponent Attack on PKCS#1 RSA Signatures	en
dc.type	Text/Conference Paper
gi.citation.endPage	109
gi.citation.publisherPlace	Bonn
gi.citation.startPage	97
gi.conference.date	2.- 4. April 2008
gi.conference.location	Saarbrücken
gi.conference.sessiontitle	Regular Research Papers

Dateien

Originalbündel

1 - 1 von 1

Name:: 97.pdf
Größe:: 1.51 MB
Format:: Adobe Portable Document Format

Herunterladen

Sammlungen

P128 - Sicherheit 2008 – Sicherheit, Schutz und Zuverlässigkeit. Beiträge der 4. Jahrestagung des Fachbereichs Sicherheit der Gesellschaft für Informatik e.V. (GI)