{"id":600,"date":"2015-10-19T08:31:41","date_gmt":"2015-10-19T08:31:41","guid":{"rendered":"http:\/\/www.dogoodsoft.com\/blog\/?p=600"},"modified":"2024-12-23T07:58:59","modified_gmt":"2024-12-23T07:58:59","slug":"the-nsa-may-have-been-able-to-crack-so-much-encryption-thanks-to-a-simple-mistake","status":"publish","type":"post","link":"https:\/\/www.dogoodsoft.com\/blog\/the-nsa-may-have-been-able-to-crack-so-much-encryption-thanks-to-a-simple-mistake-600\/","title":{"rendered":"The NSA may have been able to crack so much encryption thanks to a simple mistake"},"content":{"rendered":"

\"The<\/a><\/p>\n

The NSA could have gained a significant amount of its access to the world\u2019s encrypted communications thanks to the high-tech version of reusing passwords, according to a report from two US academics.<\/p>\n

Computer scientists J Alex Halderman and Nadia Heninger argue that a common mistake made with a regularly used encryption protocol leaves much encrypted traffic open to eavesdropping from a well-resourced and determined attacker such as the US national security agency.<\/p>\n

The information about the NSA leaked by Edward Snowden in the summer of 2013 revealed that the NSA broke one sort of encrypted communication, virtual private networks (VPN), by intercepting connections and passing some data to the agency\u2019s supercomputers, which would then return the key shortly after. Until now, it was not known what those supercomputers might be doing, or how they could be returning a valid key so quickly, when attacking VPN head-on should take centuries, even with the fastest computers.<\/p>\n

The researchers say the flaw exists in the way much encryption software applies an algorithm called Diffie-Hellman key exchange, which lets two parties efficiently communicate through encrypted channels.<\/p>\n

A form of public key cryptography, Diffie-Hellman lets users communicate by swapping \u201ckeys\u201d and running them through an algorithm which results in a secret key that both users know, but no-one else can guess. All the future communications between the pair are then encrypted using that secret key, and would take hundreds or thousands of years to decrypt directly.<\/p>\n

But the researchers say an attacker may not need to target it directly. Instead, the flaw lies in the exchange at the start of the process. Each person generates a public key \u2013 which they tell to their interlocutor \u2013 and a private key, which they keep secret. But they also generate a common public key, a (very) large prime number which is agreed upon at the start of the process.<\/p>\n

\"The<\/a><\/p>\n

Since those prime numbers are public anyway, and since it is computationally expensive to generate new ones, many encryption systems reuse them to save effort. In fact, the researchers note, one single prime is used to encrypt two-thirds of all VPNs and a quarter of SSH servers globally, two major security protocols used by a number of businesses. A second is used to encrypt \u201cnearly 20% of the top million HTTPS websites\u201d.<\/p>\n

The problem is that, while there\u2019s no need to keep the chosen prime number secret, once a given proportion of conversations are using it as the basis of their encryption, it becomes an appealing target. And it turns out that, with enough money and time, those commonly used primes can become a weak point through which encrypted communications can be attacked.<\/p>\n

In their paper, the two researchers, along with a further 12 co-authors, describe their process: a single, extremely computationally intensive \u201cpre-calculation\u201d which \u201ccracks\u201d the chosen prime, letting them break communications encrypted using it in a matter of minutes.<\/p>\n

How intensive? For \u201cshorter\u201d primes (512 bits long, about 150 decimal digits), the precalcuation takes around a week \u2013 crippling enough that, after it was disclosed with the catchy name of \u201cLogjam\u201d, major browsers were changed to reject shorter primes in their entirety. But even for the gold standard of the protocol, using a 1024-bit prime, a precalculation is possible, for a price.<\/p>\n

The researchers write that \u201cit would cost a few hundred million dollars to build a machine, based on special purpose hardware, that would be able to crack one Diffie-Hellman prime every year.\u201d<\/p>\n

\"The<\/a><\/p>\n

\u201cBased on the evidence we have, we can\u2019t prove for certain that NSA is doing this. However, our proposed Diffie-Hellman break fits the known technical details about their large-scale decryption capabilities better than any competing explanation.\u201d<\/p>\n

There are ways around the problem. Simply using a unique common prime for each connection, or even for each application, would likely reduce the reward for the year-long computation time so that it was uneconomical to do so. Similarly, switching to a newer cryptography standard (\u201celliptic curve cryptography\u201d, which uses the properties of a particular type of algebraic curve instead of large prime numbers to encrypt connections) would render the attack ineffective.<\/p>\n

But that\u2019s unlikely to happen fast. Some occurrences of Diffie-Hellman literally hard-code the prime in, making it difficult to change overnight. As a result, \u201cit will be many years before the problems go away, even given existing security recommendations and our new findings\u201d.<\/p>\n

\u201cIn the meantime, other large governments potentially can implement similar attacks, if they haven\u2019t already.\u201d<\/p>\n","protected":false},"excerpt":{"rendered":"

The NSA could have gained a significant amount of its access to the world\u2019s encrypted communications thanks to the high-tech version of reusing passwords, according to a report from two US academics. Computer scientists J Alex Halderman and Nadia Heninger argue that a common mistake made with a regularly used encryption protocol leaves much encrypted … Continue reading The NSA may have been able to crack so much encryption thanks to a simple mistake<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8],"tags":[246,52,95],"class_list":["post-600","post","type-post","status-publish","format-standard","hentry","category-news","tag-edward-snowden","tag-encryption","tag-nsa"],"_links":{"self":[{"href":"https:\/\/www.dogoodsoft.com\/blog\/wp-json\/wp\/v2\/posts\/600","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dogoodsoft.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dogoodsoft.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dogoodsoft.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dogoodsoft.com\/blog\/wp-json\/wp\/v2\/comments?post=600"}],"version-history":[{"count":1,"href":"https:\/\/www.dogoodsoft.com\/blog\/wp-json\/wp\/v2\/posts\/600\/revisions"}],"predecessor-version":[{"id":604,"href":"https:\/\/www.dogoodsoft.com\/blog\/wp-json\/wp\/v2\/posts\/600\/revisions\/604"}],"wp:attachment":[{"href":"https:\/\/www.dogoodsoft.com\/blog\/wp-json\/wp\/v2\/media?parent=600"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dogoodsoft.com\/blog\/wp-json\/wp\/v2\/categories?post=600"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dogoodsoft.com\/blog\/wp-json\/wp\/v2\/tags?post=600"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}