Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vulnerabilities / Threats

'Dragonblood' Vulnerabilities Seep Into WPA3 Secure Wifi Handshake

A new set of vulnerabilities may put some early adopters of strong Wifi security at greater security risk.

In 2018, the Wi-Fi Alliance released the first major update to Wi-Fi Protected Access (WPA) in more than a decade: WPA3. WPA3 offers more robust encryption and privacy, as well as a simplified process for devices to log onto a secure network. According to a pair of researchers,  the login process also includes vulnerabilities that could render WPA3 far less secure than is promised.

The vulnerabilities were unearthed by Mathy Vanhoef of New York University Abu Dhabi—one of the researchers behind the October 2017 discovery of the KRACK vulns in WPA2—and Eyal Ronen of Tel Aviv University and KU Leuven.

Vanhoef and Ronen write in their recent paper that there are flaws in the handshake process that can allow efficient and low-cost attacks on the passwords used as part of network credentials.

In particular, they write that the existing standards that the WiFi alliance chose for WPA3 brought both timing and cache-based side-channel vulnerability issues to the Simultaneous Authentication of Equals (SAE) handshake that is a key piece of WPA3's improvement over WPA2.

The SAE handshake is commonly known as Dragonfly; the researchers have thus dubbed this new set of vulnerabilities Dragonblood.

Kevin Robinson, vice president of marketing for the Wi-Fi Alliance, is eager for people not to panic about the vulnerability. "Not all WPA3 personal devices are affected," he says, adding, "The small number of devices that are affected with these issues can all be patched through software updates without any impact on the devices' ability to work well together."

The devices vulnerable to the attacks presented by Vanhoef and Ronen are those that allow side-channel collection of data by attacking software that has been installed on the device, and those that use specific, unsuitable cryptographic elements as part of their hashing process.

The attack comes as part of the process that allows a legacy WPA2 device to attach to a WPA3-enabled access point; the resulting "downgrade" operation opens up the process to a brute-force dictionary attack on the passwords used for authentication.

"A WPA3 network that is not in transition mode [connecting a WPA2 device to the WPA3 access point] is not susceptible to the problems that the researcher highlighted," says Robinson. So, "…the best way is to get people over to the new security protocol." He points out that, "The Wi-Fi Alliance always intended for [transition mode] to be a temporary measure that would then ultimately be disabled once the network devices have moved over to WPA3."

Mitigating the vulnerability discovered by Vanhoef and Ronen boils down to two things: transitioning to a fully WPA3 network as rapidly as possible, and installing all patches and updates to WPA3-enabled equipment already installed.

What about transparency?

But the researchers also took aim at what they see as a root cause of the vulnerability: a flawed process for developing the WPA3 standard. "…we believe that our attacks could have been avoided if the Wi-Fi Alliance created the WPA3 certification in a more open manner."

"The Wi-Fi Alliance does follow the recommended practice of using existing security standards," says Robinson in response.

Explaining that the Wi-Fi Alliance does not itself develop basic authentication protocols, he says, "The IEEE has a robust standardization process and the IEEE introduced simultaneous authentication of equals for 802.11 in 2011, allowing significant time for broad, multi-stakeholder input." As for why the Wi-Fi Alliance chose to use the protocol, Robinson says, "No other protocol with similar benefits existed within 802.11 at the time the Wi-Fi Alliance was evaluating technologies."

Now, researchers like Vanhoef and Ronen are probing the implementations of WPA3 and that, says, Robinson, is how the process should work. "[Researchers are] finding issues and industry is responding in a very rapid and proactive manner," Robinson says, adding "and this is all a healthy dynamic."

Related content:

 

 

 

 

Join Dark Reading LIVE for two cybersecurity summits at Interop 2019. Learn from the industry's most knowledgeable IT security experts. Check out the Interop agenda here.

Curtis Franklin Jr. is Senior Editor at Dark Reading. In this role he focuses on product and technology coverage for the publication. In addition he works on audio and video programming for Dark Reading and contributes to activities at Interop ITX, Black Hat, INsecurity, and ... View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
The Security of Cloud Applications
Hillel Solow, CTO and Co-founder, Protego,  7/11/2019
US Mayors Commit to Just Saying No to Ransomware
Robert Lemos, Contributing Writer,  7/16/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Current Issue
Building and Managing an IT Security Operations Program
As cyber threats grow, many organizations are building security operations centers (SOCs) to improve their defenses. In this Tech Digest you will learn tips on how to get the most out of a SOC in your organization - and what to do if you can't afford to build one.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-13640
PUBLISHED: 2019-07-17
In qBittorrent before 4.1.7, the function Application::runExternalProgram() located in app/application.cpp allows command injection via shell metacharacters in the torrent name parameter or current tracker parameter, as demonstrated by remote command execution via a crafted name within an RSS feed.
CVE-2019-5222
PUBLISHED: 2019-07-17
There is an information disclosure vulnerability on Secure Input of certain Huawei smartphones in Versions earlier than Tony-AL00B 9.1.0.216(C00E214R2P1). The Secure Input does not properly limit certain system privilege. An attacker tricks the user to install a malicious application and successful ...
CVE-2019-1919
PUBLISHED: 2019-07-17
A vulnerability in the Cisco FindIT Network Management Software virtual machine (VM) images could allow an unauthenticated, local attacker who has access to the VM console to log in to the device with a static account that has root privileges. The vulnerability is due to the presence of an account w...
CVE-2019-1920
PUBLISHED: 2019-07-17
A vulnerability in the 802.11r Fast Transition (FT) implementation for Cisco IOS Access Points (APs) Software could allow an unauthenticated, adjacent attacker to cause a denial of service (DoS) condition on an affected interface. The vulnerability is due to a lack of complete error handling conditi...
CVE-2019-1923
PUBLISHED: 2019-07-17
A vulnerability in Cisco Small Business SPA500 Series IP Phones could allow a physically proximate attacker to execute arbitrary commands on the device. The vulnerability is due to improper input validation in the device configuration interface. An attacker could exploit this vulnerability by access...