RADIUS protocol susceptible to forgery attacks(blastradius.fail)
blastradius.fail
RADIUS protocol susceptible to forgery attacks
https://www.blastradius.fail/
9 comments
Mitigation:
> Our recommended short-term mitigation for implementers and vendors is to mandate that clients and servers always send and require Message-Authenticator attributes for all requests and responses. For Access-Accept or Access-Reject responses, the Message-Authenticator should be included as the first attribute. Patches implementing this mitigation have been implemented by all RADIUS implementations that we are aware of. This guidance is being put into an upcoming RADIUS RFC.
Paper:
> "Radius/UDP Considered Harmful" Sharon Goldberg, Miro Haller, Nadia Heninger, Mike Milano, Dan Shumow, Marc Stevens, and Adam Suhl
> https://www.blastradius.fail/pdf/radius.pdf
> Our recommended short-term mitigation for implementers and vendors is to mandate that clients and servers always send and require Message-Authenticator attributes for all requests and responses. For Access-Accept or Access-Reject responses, the Message-Authenticator should be included as the first attribute. Patches implementing this mitigation have been implemented by all RADIUS implementations that we are aware of. This guidance is being put into an upcoming RADIUS RFC.
Paper:
> "Radius/UDP Considered Harmful" Sharon Goldberg, Miro Haller, Nadia Heninger, Mike Milano, Dan Shumow, Marc Stevens, and Adam Suhl
> https://www.blastradius.fail/pdf/radius.pdf
That's quite an excellent author list.
I’m not familiar with these authors. Could you elaborate more for the folks who aren’t as deep in this space?
Some work they are known for:
Sharon Goldberg: Attacking the Network Time Protocol: https://eprint.iacr.org/2015/1020
Miro Haller: MEGA: Malleable Encryption Goes Awry: https://mega-awry.io/
Nadia Heninger: Mining your Ps and Qs: https://factorable.net/
Dan Shumow: On the Possibility of a Back Door in the NIST SP800-90 Dual EC PRNG: https://rump2007.cr.yp.to/15-shumow.pdf
Marc Stevens: MD5 considered harmful today: https://www.win.tue.nl/hashclash/rogue-ca/
Adam Suhl: On the Possibility of a Backdoor in the Micali-Schnorr Generator: https://eprint.iacr.org/2023/440
Sharon Goldberg: Attacking the Network Time Protocol: https://eprint.iacr.org/2015/1020
Miro Haller: MEGA: Malleable Encryption Goes Awry: https://mega-awry.io/
Nadia Heninger: Mining your Ps and Qs: https://factorable.net/
Dan Shumow: On the Possibility of a Back Door in the NIST SP800-90 Dual EC PRNG: https://rump2007.cr.yp.to/15-shumow.pdf
Marc Stevens: MD5 considered harmful today: https://www.win.tue.nl/hashclash/rogue-ca/
Adam Suhl: On the Possibility of a Backdoor in the Micali-Schnorr Generator: https://eprint.iacr.org/2023/440
Sharon Goldberg is active in the research areas of Internet Security, such as BGP and such.
Nadia Heningner is active in cryptography and network security, I first heard about her from her work on factorable.net.
Marc Stevens has been attacking cryptographic hash implementations for ages and has done profound work, see shattered.io although before that he was attacking MD5 I believe.
Nadia Heningner is active in cryptography and network security, I first heard about her from her work on factorable.net.
Marc Stevens has been attacking cryptographic hash implementations for ages and has done profound work, see shattered.io although before that he was attacking MD5 I believe.
Write up on the Cloudflare blog: https://blog.cloudflare.com/radius-udp-vulnerable-md5-attack
[deleted]
For wireless 802.1x, use clients certs; managed campus APs may still need a tunnel to a RADIUS box, but that's okay.