Anzeige
Erschienen in:
2017 | OriginalPaper | Buchkapitel
The OpenWRT’s Random Number Generator Designed Like /dev/urandom and Its Vulnerability
verfasst von : Dongchang Yoo, Yongjin Yeom
Erschienen in: Advances in Computer Science and Ubiquitous Computing
Verlag: Springer Singapore
Aktivieren Sie unsere intelligente Suche, um passende Fachinhalte oder Patente zu finden.
Wählen Sie Textabschnitte aus um mit Künstlicher Intelligenz passenden Patente zu finden. powered by
Markieren Sie Textabschnitte, um KI-gestützt weitere passende Inhalte zu finden. powered by
Abstract
OpenWRT is an open source router firmware based on embedded Linux that uses a dedicated random number generator for the WPA/WPA2 authentication protocol. Its main purpose is to generate a nonce that can be used in a WPA/WPA2 handshake. If the output of the random number generator can be predicted by an attacker, the relevant protocol will not be able to authenticate securely. According to previous studies on Linux, it is well known that a random number generator implemented in an embedded Linux environment does not collect sufficient entropy from noise sources. The lack of entropy increases the potential vulnerability for the random number generator and the Linux protocol. Therefore, we analyzed the WPA/WPA2 authentication protocol and its random number generator. In our results, we point out some potential cryptographic weaknesses and vulnerabilities of the OpenWRT random number generator.