back

What de.fac2? Attacking an opensource U2F device in 30 minutes or less

If you suspend your transcription on amara.org, please add a timestamp below to indicate how far you progressed! This will help others to resume your work!

Please do not press “publish” on amara.org to save your progress, use “save draft” instead. Only press “publish” when you're done with quality control.

Video duration
00:29:00
Language
English
Abstract
Hardware FIDO U2F tokens are security devices which are meant to defend user second factor keys from physical and remote attacks.
In this presentation different security features and implemented by FIDO U2F tokens and how they are meant to protect a user from various attack scenarios.
We will focus on the open source implementation of FIDO U2F token developed and Common Criteria certified by Federal Office for Information Security (BSI).
Having access not only to the source code of the token applet, but the certification documents as well gives a unique opportunity of
Finally, a design flaw in the solution is discussed (CVE-2022-33172) and an attack on hardware token security feature will be presented, which could allow an attacker in control of user PC to fake user presence and execute a number of unauthorized sensitive operations.

De.fac2 is a Common Criteria (CC) and FIDO certified FIDO U2F Java Card applet developed and certified by Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik).
This solutions gives a unique opportunity to look at the internals of a FIDO U2F token as well as certification claims and product security features.

The presentation introduces the process of identification of the design flaw in the product in under an hour as well as the testing of a vulnerability without access to the actual physical device.

The vulnerability was disclosed to the Bundesamt für Sicherheit in der Informationstechnik and addressed in the updated commit
https://github.com/BSI-Bund/de.fac2

The acknowledged bug was addressed by the developer with the following statement:

The following attack scenario was reported to us by Sergei Volokitin: A reset command send by the reader to the card circumvents the user presence check.
For example, malware on the host PC / smartphone could send a reset command to the reader programmatically.
It is not possible for the card to distinguish if the reader sent a reset command or if it was physically removed from the reader.
With reference to this scenario, the Guidance Documentation (AGD) and the Security Target (ST) were updated in July 2022 in a "Assurance Maintenance".

Talk ID
camp2023-57244
Event:
camp2023
Day
1
Room
Milliways
Start
2:30 p.m.
Duration
00:45:00
Track
Milliways
Type of
Talk
Speaker
Sergei Volokitin
Talk Slug & media link
camp2023-57244-what_de_fac2_attacking_an_opensource_u2f_device_in_30_minutes_or_less
English
0.0% Checking done0.0%
0.0% Syncing done0.0%
0.0% Transcribing done0.0%
100.0% Nothing done yet100.0%
  

Work on this video on Amara!

English: Transcribed until

Last revision: 8 months ago