⌕ Поиск по атласу

IETF · RFC · RFC7627

RFC7627 · Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension

Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension

The Transport Layer Security (TLS) master secret is not cryptographically bound to important session parameters such as the server certificate. Consequently, it is possible for an active attacker to set up two sessions, one with a client and another with a server, such that the master secrets on the two sessions are the same. Thereafter, any mechanism that relies on the master secret for authentication, including session resumption, becomes vulnerable to a man-in-the-middle attack, where the attacker can simply forward messages back and forth between the client and server. This specification defines a TLS extension that contextually binds the master secret to a log of the full handshake that computes it, thus preventing such attacks.

Официальная английская аннотация

The Transport Layer Security (TLS) master secret is not cryptographically bound to important session parameters such as the server certificate. Consequently, it is possible for an active attacker to set up two sessions, one with a client and another with a server, such that the master secrets on the two sessions are the same. Thereafter, any mechanism that relies on the master secret for authentication, including session resumption, becomes vulnerable to a man-in-the-middle attack, where the attacker can simply forward messages back and forth between the client and server. This specification defines a TLS extension that contextually binds the master secret to a log of the full handshake that computes it, thus preventing such attacks.

Связи документа

obsoleted_by: RFC9846

updates: RFC5246

Официальный источник · 2015-09-01

Полные импортированные сведения карточки
{
  "id": "RFC7627",
  "number": 7627,
  "title_en": "Transport Layer Security (TLS) Session Hash and Extended Master Secret Extension",
  "title_ru": "",
  "summary_ru": "",
  "purpose_ru": "",
  "use_ru": "",
  "full_translation_path": "",
  "full_translation_checked_at": "",
  "full_translation_source_sha256": "",
  "architect_note_ru": "",
  "topics_ru": [],
  "translation_state": "not_prepared",
  "verification_level": "not_prepared",
  "verification_level_ru": "Русская выжимка не подготовлена",
  "verification_note_ru": "",
  "abstract_en": "The Transport Layer Security (TLS) master secret is not cryptographically bound to important session parameters such as the server certificate. Consequently, it is possible for an active attacker to set up two sessions, one with a client and another with a server, such that the master secrets on the two sessions are the same. Thereafter, any mechanism that relies on the master secret for authentication, including session resumption, becomes vulnerable to a man-in-the-middle attack, where the attacker can simply forward messages back and forth between the client and server. This specification defines a TLS extension that contextually binds the master secret to a log of the full handshake that computes it, thus preventing such attacks.",
  "authors": [
    "K. Bhargavan",
    "A. Delignat-Lavaud",
    "A. Pironti",
    "A. Langley",
    "M. Ray"
  ],
  "organizations": [],
  "publication_date": "2015-09-01",
  "current_status": "PROPOSED STANDARD",
  "current_status_ru": "Предлагаемый стандарт",
  "publication_status": "PROPOSED STANDARD",
  "publication_status_ru": "Предлагаемый стандарт",
  "lifecycle": "superseded",
  "lifecycle_ru": "Заменён",
  "stream": "IETF",
  "stream_ru": "IETF",
  "area": "sec",
  "area_ru": "Безопасность",
  "working_group": "tls",
  "source_draft": "draft-ietf-tls-session-hash-06",
  "page_count": 15,
  "doi": "10.17487/RFC7627",
  "keywords": [],
  "formats": [
    "TXT",
    "HTML"
  ],
  "relations": {
    "obsoletes": [],
    "obsoleted_by": [
      "RFC9846"
    ],
    "updates": [
      "RFC5246"
    ],
    "updated_by": [],
    "is_also": [],
    "see_also": []
  },
  "links": {
    "info": "https://www.rfc-editor.org/info/rfc7627/",
    "html": "https://www.rfc-editor.org/rfc/rfc7627.html",
    "txt": "https://www.rfc-editor.org/rfc/rfc7627.txt",
    "datatracker": "https://datatracker.ietf.org/doc/rfc7627/"
  }
}