GnuTLS TLS 1.3 session resumption works without master key, allowing MITM

#1

Post by Sami_Lehtinen » Sun, Jun 07, 2020, 7:01 PM UTC

GnuTLS TLS 1.3 session resumption works without master key, allowing MITM
gitlab.com

Re: GnuTLS TLS 1.3 session resumption works without master key, allowing MITM

#2

Post by chaz6 » Sun, Jun 07, 2020, 7:15 PM UTC

This seems to be in the GnuTLS implementation and not the specification itself as the title led me to believe.

Re: GnuTLS TLS 1.3 session resumption works without master key, allowing MITM

#3

Post by bpfrh » Sun, Jun 07, 2020, 7:17 PM UTC

chaz6 wrote: post #2

This seems to be in the GnuTLS implementation and not the specification itself as the title led me to believe.

Agreed, would be better if the title would be changed to "MITM flaw in Gnutls implementation of TLS 1.2 & 1.3"

Re: GnuTLS TLS 1.3 session resumption works without master key, allowing MITM

#4

Post by dang » Sun, Jun 07, 2020, 7:49 PM UTC

chaz6 wrote: post #2

This seems to be in the GnuTLS implementation and not the specification itself as the title led me to believe.

Fixed now. Submitted title was "TLS 1.3 session resumption works without master key, allowing MITM"

Re: GnuTLS TLS 1.3 session resumption works without master key, allowing MITM

#5

Post by yourad_io » Sun, Jun 07, 2020, 7:54 PM UTC

Any ideas which software uses gnutls by default? I couldn't figure it out.

Re: GnuTLS TLS 1.3 session resumption works without master key, allowing MITM

#6

Post by fardelian » Mon, Jun 08, 2020, 12:01 PM UTC

yourad_io wrote: post #5

Any ideas which software uses gnutls by default? I couldn't figure it out.

https://en.wikipedia.org/wiki/GnuTLS#Deployment

>Software packages using GnuTLS include(d):

    GNOME
    CenterIM
    Exim
    Weechat
    Mutt
    Wireshark
    slrn
    Lynx
    CUPS
    gnoMint
    GNU Emacs
    Synology DiskStation Manager
    OpenConnect