Playback a TLS 1 point 3 story
Alfonso Alguacil and Murillo Moya presents playback a tls 1 point 3 story: TLS 1.3 is the new secure communication protocol that should be already with us.
Summary
Architecture and Background
TLS 1.3 is the new secure communication protocol that should be already with us.
Vulnerability Analysis
One of its new features is 0-RTT (Zero Round Trip Time Resumption) that could potentially allow replay attacks. This is a known issue acknowledged by the TLS 1.3 specification, as the protocol does not provide replay protections for 0-RTT data, but proposed countermeasures that would need to be implemented on other layers, not at the protocol level.
Exploitation and Demonstrations
Therefore, the applications deployed with TLS 1.3 support could end up exposed to replay attacks depending on the implementation of those protections. This talk will describe the technical details regarding the TLS 1.3 0-RTT feature and its associated risks.
Remediation and Defensive Strategies
It will include Proof of Concepts (PoC) showing real-world replay attacks against TLS 1.3 libraries and browsers. Finally, potential solutions or mitigation controls would be discussed that will help to prevent those attacks when deploying software using a library with TLS 1.3 support.
Related talks
Main Stage·41 min
Ian Haken
Ian Haken presents Automated Discovery of Deserialization Gadget Chains at DEF CON 26.
Main Stage·22 min
Zach · Alex
Zach and Alex presents infecting the embedded supply chain: With a surge in the production of internet of things (IoT) devices, embedded development tools are becoming commonplace and the software they run on is oft...
Main Stage·46 min
The Tarquin
The Tarquin presents weaponizing unicode homographs beyond idns: Most people are familiar with homograph attacks due to phishing or other attack campaigns using Internationalized Domain Names with look-alike charact...