Re: SKIP: TLS bug in gnu/javax/net/ssl/provider

--Apple-Mail=_FE5AA1E8-A231-454C-8D02-EC296C3D4B9A
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=windows-1252

Hi,

Any progress on this? I=92d like to report the plan in our research =
paper.

Best,
Karthik

On 06 Mar 2015, at 14:40, Andrew Hughes <[email protected]> wrote:

> ----- Original Message -----
>> Hi,
>>=20
>> We=92ve been testing TLS implementations for state machine violations =
and found
>> a number of unexpected behaviours.
>> See: http://www.smacktls.com
>> I am writing to report a bug in classpath=92s TLS implementation at
>> gnu/javax/net/ssl/provider
>>=20
>> Both the client and server in classpath=92s TLS library allow the =
peer to skip
>> the ChangeCipherSpec message, hence disabling encryption.
>> That is, they will accept a Finished message in the handshake even if =
they
>> have not received a ChangeCipherSpec message.
>> The easy fix is to require CCS before finished, *and* to ensure that =
no
>> messages are received between CCS and Finished.
>>=20
>> The bug allows the peer to downgrade any TLS connection to plaintext.
>> This is worrying in itself, but also opens up more serious attacks.
>> For example, see the attacks on Java in
>> http://http://www.smacktls.com/smack.pdf
>>=20
>> I=92d be happy to discuss this bug in more details with whoever=92s =
working on
>> that bit of the code.
>> We have tests and demos and would be happy to help test patches.
>>=20
>> Best,
>> Karthik
>>=20
>>=20
>>=20
>> _______________________________________________
>> Bug-classpath mailing list
>> [email protected]
>> https://lists.gnu.org/mailman/listinfo/bug-classpath
>>=20
>=20
> Funnily enough, I was just reading the site this morning and realising
> that we'd patched this in OpenJDK in January.
>=20
> I'll take a look at fixing this in the GNU Classpath code and would
> be interested in any tests/demos you have to help. Is the web server
> mentioned on smacktls.com still operational?
>=20
> Thanks,
> --
> Andrew :)
>=20
> Free Java Software Engineer
> Red Hat, Inc. (http://www.redhat.com)
>=20
> PGP Key: ed25519/35964222 (hkp://keys.gnupg.net)
> Fingerprint =3D 5132 579D D154 0ED2 3E04  C5A0 CFDA 0F9B 3596 4222
>=20
> PGP Key: rsa4096/248BDC07 (hkp://keys.gnupg.net)
> Fingerprint =3D EC5A 1F5E C0AD 1D15 8F1F  8F91 3B96 A578 248B DC07


--Apple-Mail=_FE5AA1E8-A231-454C-8D02-EC296C3D4B9A
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail

-----BEGIN PGP SIGNATURE-----
Comment: GPGTools - https://gpgtools.org

iQEcBAEBCgAGBQJU/0QNAAoJEB/WSo9veuUKbdEH/3jQ4HqikavIJQVvTtbEhu0M
NQpk8eLvP3FIt3qnbEFxVtbGMfnG2vvu7vtJoNsQao3u/q+pqPMbSN7Kgx5xBZRz
6/maQsqm8t7NKotFSYMYszJ6r2zKI8cewO0fISAS+2lKhQYlESdpZisuK/Xal/nj
WmZllVT5bE90RW8mJE7607p+8qS0mdiI3zjHHZ2Tt2xThKsLZHsb0+p0z0S9KUuE
2QJC4dUQi6H0sYwRk8VGnuDJpiPL1ygLti/1wrqGiTbmOn8reXuV+9o9SnqVwru6
lnBOWz0ggAUtppfq99F5U4RFblOggcHMe/CQQAx29l5RD/DGiIIlpxpRWkF9mfY=
=tZa9
-----END PGP SIGNATURE-----

--Apple-Mail=_FE5AA1E8-A231-454C-8D02-EC296C3D4B9A--