oss-security - Re: [TLS] CVE-2009-3555 for TLS renegotiation MITM attacks

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Date: Sun, 08 Nov 2009 16:32:05 -0600
From: Marsh Ray <marsh@...endedsubset.com>
To: ArkanoiD <ark@...ex.net>
CC: oss-security@...ts.openwall.com, tls@...f.org
Subject: Re: [TLS] CVE-2009-3555 for TLS renegotiation MITM
 attacks

ArkanoiD wrote:
> BTW renegotiation handshake looks quite similar to initial handshake from
> the client point of view;

Yeah, currently it looks identical.

> is there a way to detect the attack on client side
> and drop the connection?

With draft-rescorla-tls-renegotiate, the new header comes back to the
client on Server Hello, and this notifies the client that the server
believes it's a re-negotation. Even better, it ties it strongly to the
previous session, so legit renegotiations are protected, too.

- Marsh

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.