Adi Shamir

A cache-based side channel in the GnuTLS implementation allows for plain text recovery in a cross-VM attack setting. An attacker can use a combination of "Just in Time" Prime+probe attack and Lucky-13 attack with crafted packets to recover plain text.

Name of the Vulnerable Software and Affected Versions: GnuTLS (affected versions not specified) Description: The issue is related to the GnuTLS implementation of HMAC-SHA-256, which is vulnerable to a Lucky thirteen style attack. Remote attackers could exploit this flaw to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data using crafted packets. The vulnerability is associated with errors in the implementation of the cryptographic algorithm, allowing an attacker to exploit it and perform attacks such as plaintext-recovery attacks using specially crafted packets. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: GnuTLS (affected versions not specified) Description: The issue is related to the GnuTLS implementation of HMAC-SHA-384, which is vulnerable to a Lucky thirteen style attack. This allows remote attackers to conduct distinguishing attacks and plain text recovery attacks via statistical analysis of timing data using crafted packets. The vulnerability is due to errors in the implementation of the cryptographic algorithm, enabling an attacker to exploit it and perform attacks such as plain text recovery. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

The issue is related to a local synchronization problem during RSA decryption in Mbed TLS, allowing a local unprivileged attacker to recover the plaintext of RSA decryption. This affects RSA-without-(EC)DH(E) cipher suites. The vulnerability can be exploited to gain access to protected information.

The issue allows attackers to extract RSA keys via a chosen-ciphertext attack and acoustic cryptanalysis during decryption. This can be exploited remotely and may lead to a violation of the confidentiality and integrity of protected information. The vulnerability is related to the generation of RSA keys using sequences of introductions with certain patterns, which introduces a side channel.

The issue is related to the SHA-1 algorithm not being collision resistant, making it easier for attackers to conduct spoofing attacks. This has been demonstrated by attacks on the use of SHA-1 in TLS 1.2. The SHA-1 algorithm is likely present in a large number of products across the entire IT sector.