COMMON ATTACK PATTERN ENUMERATION AND CLASSIFICATIONMITRE canlı kaydı

CAPEC-668

Key Negotiation of Bluetooth Attack (KNOB)

An adversary can exploit a flaw in Bluetooth key negotiation allowing them to decrypt information sent between two devices communicating via Bluetooth. The adversary uses an Adversary in the Middle setup to modify packets sent between the two devices during the authentication process, specifically the entropy bits. Knowledge of the number of entropy bits will allow the attacker to easily decrypt information passing over the line of communication.

Soyutlama

Standard

Tipik ciddiyet

High

Saldırı ihtimali

Low

Saldırıyı anla

Bu saldırı kalıbı nedir?

An adversary can exploit a flaw in Bluetooth key negotiation allowing them to decrypt information sent between two devices communicating via Bluetooth. The adversary uses an Adversary in the Middle setup to modify packets sent between the two devices during the authentication process, specifically the entropy bits. Knowledge of the number of entropy bits will allow the attacker to easily decrypt information passing over the line of communication.

Uygulama akışı

Saldırı adım adım nasıl ilerler?

1

Explore

Discovery

Using an established Person in the Middle setup, search for Bluetooth devices beginning the authentication process.

Kullanılan teknikler

  • Use packet capture tools.
2

Experiment

Change the entropy bits

Upon recieving the initial key negotiation packet from the master, the adversary modifies the entropy bits requested to 1 to allow for easy decryption before it is forwarded.
3

Exploit

Capture and decrypt data

Once the entropy of encryption is known, the adversary can capture data and then decrypt on their device.

Gereksinimler

Saldırının gerçekleşmesi için ne gerekir?

Ön koşullar

  • Person in the Middle network setup.

Gerekli beceri

  • Medium: Ability to modify packets.

Gerekli kaynak

  • Bluetooth adapter, packet capturing capabilities.

Etki

Başarılı saldırı neye yol açar?

Read Data

Etkilenen alanlar: Confidentiality

Bypass Protection Mechanism

Etkilenen alanlar: Confidentiality, Access Control, Authorization

Modify Data

Etkilenen alanlar: Integrity

Savunma

Nasıl önlenir ve etkisi azaltılır?

1
Newer Bluetooth firmwares ensure that the KNOB is not negotaited in plaintext. Update your device.

Gerçek dünya

MITRE örnek olayları

Örnek olay 1Detay
Given users Alice, Bob and Charlie (Charlie being the attacker), Alice and Bob begin to agree on an encryption key when connecting. While Alice sends a message to Bob that an encryption key with 16 bytes of entropy should be used, Charlie changes this to 1 and forwards the request to Bob and continues forwarding these packets until authentication is successful.