diff options
author | Ingela Anderton Andin <[email protected]> | 2017-11-07 18:34:34 +0100 |
---|---|---|
committer | Ingela Anderton Andin <[email protected]> | 2017-11-22 18:49:41 +0100 |
commit | 3671344cf6aee0773636b98414e0c89a56939645 (patch) | |
tree | 06a90ae20b63c8919a47317e80d5f053ed6f432a /lib/ssl/src/ssl_connection.erl | |
parent | 5cf780148575f1ea4c460d7c9783831e6fbce9ff (diff) | |
download | otp-3671344cf6aee0773636b98414e0c89a56939645.tar.gz otp-3671344cf6aee0773636b98414e0c89a56939645.tar.bz2 otp-3671344cf6aee0773636b98414e0c89a56939645.zip |
ssl: Countermeasurements for Bleichenbacher attack
Back ported for security reasons.
Remove DTLS changes as DTLS is not at all working in OTP 18.
Diffstat (limited to 'lib/ssl/src/ssl_connection.erl')
-rw-r--r-- | lib/ssl/src/ssl_connection.erl | 21 |
1 files changed, 19 insertions, 2 deletions
diff --git a/lib/ssl/src/ssl_connection.erl b/lib/ssl/src/ssl_connection.erl index 0f0072ba34..4be59501e4 100644 --- a/lib/ssl/src/ssl_connection.erl +++ b/lib/ssl/src/ssl_connection.erl @@ -1157,8 +1157,25 @@ server_certify_and_key_exchange(State0, Connection) -> request_client_cert(State2, Connection). certify_client_key_exchange(#encrypted_premaster_secret{premaster_secret= EncPMS}, - #state{private_key = Key} = State, Connection) -> - PremasterSecret = ssl_handshake:premaster_secret(EncPMS, Key), + #state{private_key = Key, client_hello_version = {Major, Minor} = Version} = State, Connection) -> + + %% Countermeasure for Bleichenbacher attack always provide some kind of premaster secret + %% and fail handshake later.RFC 5246 section 7.4.7.1. + PremasterSecret = + try ssl_handshake:premaster_secret(EncPMS, Key) of + Secret when erlang:byte_size(Secret) == ?NUM_OF_PREMASTERSECRET_BYTES -> + case Secret of + <<?BYTE(Major), ?BYTE(Minor), _/binary>> -> %% Correct + Secret; + <<?BYTE(_), ?BYTE(_), Rest/binary>> -> %% Version mismatch + <<?BYTE(Major), ?BYTE(Minor), Rest/binary>> + end; + _ -> %% erlang:byte_size(Secret) =/= ?NUM_OF_PREMASTERSECRET_BYTES + make_premaster_secret(Version, rsa) + catch + #alert{description = ?DECRYPT_ERROR} -> + make_premaster_secret(Version, rsa) + end, calculate_master_secret(PremasterSecret, State, Connection, certify, cipher); certify_client_key_exchange(#client_diffie_hellman_public{dh_public = ClientPublicDhKey}, |