Re: [TLS] fyi: paper on compelled, certificate creation attack and applicable appliance

Oh, where do I start.

1. This is not a new attack. If you can get a CA to issue a bad certificate, you can then use that certificate to impersonate the legitimate web site. Government co-ercion does not make this a new attack, and the results are no different from a CA employee being coerced or bribed by criminals.

2. Section 5 is entitled "evidence", and then goes on to present the evidence: a marketing brochure and something someone told him at a booth in a trade show.

3. Section 6 is ominously entitled "Some CAs Already Participate In Surveillance". I read that expecting more of a smoking gun than that guy in a trade show from section 5. Instead, we go straight to naming names, in section 6.1, "Verisign". Naming and shaming the biggest commercial CA? No. More like innuendo. The section begins with a description of Verisign's business dealings with telecoms and government, with the implication that they're "in bed" with the evil governments. So is the evidence coming next. No, and I'll quote:
  We have no evidence to suggest that the CA unit
  within VeriSign has ever been compelled by the US
  government to produce a certicate for use by in-
  telligence agencies. Likewise, we have no evidence
  to suggest that VeriSign has ever broken any laws,
  or improperly disclosed consumers' private data to
  government agencies.

4. Lastly there's the solution, which is entirely based on countries. If your Chinese bank all of a sudden has an American certificate, the browser kvetches. But the prominence of Verisign actually defeats this defense. A lot of companies from various countries buy certificates from Verisign, either through a local Verisign affiliate, or from Verisign US through a US branch or sales office.  Even my own company does that ( https://www.checkpoint.com )  This also does not solve the problem, only localizes it. If the government in Elbonia wants a certificate for anything, they will lean on the local branch of Verisign (or just bribe an employee) and get a certificate that chains back to Verisign (US). And criminals will do the same.

On Mar 24, 2010, at 2:08 PM, =JeffH wrote:

> 
> Abstract
> 
> This paper introduces a new attack, the
> compelled certificate creation attack, in which
> government agencies compel a certificate au-
> thority to issue false SSL certificates that are
> then used by intelligence agencies to covertly
> intercept and hijack individuals' secure Web-
> based communications. We reveal alarming ev-
> idence that suggests that this attack is in ac-
> tive use. Finally, we introduce a lightweight
> browser add-on that detects and thwarts such
> attacks.
> 
> 
> ------- Forwarded Message
> 
> Date:    Wed, 24 Mar 2010 15:34:27 -0400
> From:    Dave Farber <dave@farber.net>
> To:      "ip" <ip@v2.listbox.com>
> Subject: [IP] Surveillance via bogus SSL certificates
> 
> Begin forwarded message:
> 
>> From: Matt Blaze <mab@crypto.com>
>> Date: March 24, 2010 3:09:19 PM EDT
>> To: Dave Farber <dave@farber.net>
>> Subject: Surveillance via bogus SSL certificates
>> 
> 
>> Dave,
>> 
>> For IP if you'd like.
>> 
>> Over a decade ago, I observed that commercial certificate
>> authorities protect you from anyone from whom they are unwilling to
>> take money.  That turns out to be wrong; they don't even do that.
>> 
>> Chris Soghoian and Sid Stamm published a paper today that describes
>> a simple "appliance"-type box, marketed to law enforcement and
>> intelligence agencies in the US and elsewhere, that uses bogus
>> certificates issued by *any* cooperative certificate authority to
>> act as a "man-in-the-middle" for encrypted web traffic.
>> 
>> Their paper is available at http://files.cloudprivacy.net/ssl-mitm.pdf
>> 
>> What I found most interesting (and surprising) is that this sort of
>> surveillance is widespread enough to support fairly mature, turnkey
>> commercial products.    It carries some significant disadvantages
>> for law enforcement -- most particularly it can be potentially can
>> be detected.
>> 
>> I briefly discuss the implications of this kind of surveillance at http://www
> .crypto.com/blog/spycerts/
>> 
>> Also, Wired has a story here: http://www.wired.com/threatlevel/2010/03/packet
> - -forensics/
>> 
>> 
>> -matt
>> 
>> 
>> 
> 
> 
> 
> - -------------------------------------------
> Archives: https://www.listbox.com/member/archive/247/=now
> RSS Feed: https://www.listbox.com/member/archive/rss/247/
> Powered by Listbox: http://www.listbox.com
> 
> 
> ------- End of Forwarded Message
> _______________________________________________
> TLS mailing list
> TLS@ietf.org
> https://www.ietf.org/mailman/listinfo/tls
> 
> Scanned by Check Point Total Security Gateway.