Iqembu labaphenyi abavela eRuhr University eBochum (EJalimane) wethule inqubo yokuhlasela i-Revolte, lokho ivumela ukunqamula izingcingo zezwi ezibethelwe kumanethiwekhi weselula I-4G / LTE isetshenziselwa ukudlulisa ithrafikhi yezwi ngobuchwepheshe beVoLTE (Voice over the LTE).
Ukuvimbela izingcingo ukuthi zingabanjwa ku-VoLTE, isiteshi esiphakathi kwekhasimende kanye no-opharetha sibethelwa ngokususelwa ekubetheni okusakazwayo.
Incazelo ichaza ukwenziwa kokusakaza okukodwa okukodwa ngeseshini ngayinye, kepha njengoba abaphenyi bembula, iziteshi eziyi-12 kwezingu-15 ezivivinyiwe azihlangabezani nalesi simo futhi zisebenzisa futhi ukusakazwa kokhiye okufanayo kwezingcingo ezimbili ezilandelanayo esiteshini somsakazo esifanayo noma zisebenzisa izindlela ezilindelekile zokwenza ukulandelana okusha.
Ukusetshenziswa kabusha kwe-Keystream kuvumela umhlaseli ukuthi asuse ukubethela kwethrafikhi izingxoxo ezibhalwe ngemfihlo. Ukubhala ngemfihlo okuqukethwe yikholi yezwi, umhlaseli uqala abambe futhi agcine ithrafikhi yomsakazo ebethelwe phakathi kwesisulu kanye nesiteshi sesisekelo esisengozini.
Ngemuva kokuthi ucingo luphelile, umhlaseli ubiza isisulu emuva futhi uzama ukuqhubeka nengxoxo isikhathi eside ngangokunokwenzeka, ukuvimbela isisulu ekuvalweni kocingo. Ngesikhathi sale ngxoxo, ngaphezu kokuqoshwa kwethrafikhi yomsakazo ebethelwe, isiginali yomsindo engabetheliwe yoqobo nayo iyagcinwa.
I-Voice over LTE (i-VoLTE) iyisevisi esekela iphakethe esekwe ngokuphelele ku-Long Term Evolution (LTE) standard. Namuhla, bonke opharetha abakhulu bezokuxhumana ngocingo basebenzisa iVoLTE. Ukuvikela izingcingo, i-VoLTE ibethela idatha yezwi phakathi kwefoni nenethiwekhi ngokubethela okusakazwayo. Ukubethela kokusakaza kuzokhiqiza ukusakazwa kokhiye okwehlukile kukholi ngayinye ukugwema inkinga yokusebenzisa kabusha ukhiye wokusakaza.
Kwethulwa i-ReVoLTE, ukuhlasela okusebenzisa iphutha le-LTE lokuqalisa ukubuyisa okuqukethwe yikholi ye-VoLTE ebethelwe.
Lokhu kuvumela isitha ukuthi silalele izingcingo zeVoLTE. I-ReVoLTE isebenzisa ukusetshenziswa kabusha kwe-keystream okungaqagelwa, okutholwe yiRaza & Lu. Ekugcineni, ukusetshenziswa kabusha kokusakazwa kokhiye kuvumela isitha ukuthi sisuse ukubethela ikholi erekhodiwe ngezinsizakusebenza ezincane.
Ukubhala ngemfihlo ikholi yokuqala yesisulu, umhlaseli, ngokususelwa kuthrafikhi ebethelwe ebanjiwe ngesikhathi socingo lwesibili nedatha yezwi yoqobo erekhodwe ocingweni lomhlaseli, angakwazi ukubala inani lokusakazwa kokhiye, okunqunywa ukusebenza XOR phakathi kwedatha evulekile nebethelwe.
Njengoba ukusakaza kokhiye kusetshenziswa kabusha, ngokusebenzisa ukusakaza kokhiye okubalwe ikholi yesibili kudatha ebethelwe kusukela kukholi yokuqala, umhlaseli angathola ukufinyelela kokuqukethwe kwakhe koqobo. Uma ingxoxo yesibili phakathi komhlaseli nesisulu iqhubeka isikhathi eside, imininingwane eminingi evela kukholi yokuqala ingachithwa. Isibonelo, uma umhlaseli ekwazile ukwelula ingxoxo imizuzu engu-5, uzokwazi ukuqhekeza imizuzu emi-5.
Ukuthwebula ithrafikhi ebethelwe emoyeni evela kumanethiwekhi we-LTE, abacwaningi basebenzise i-AirScope signal analyzer nokuthola ukusakazwa kwezwi kwasekuqaleni ngesikhathi socingo lomhlaseli, basebenzise ama-smartphones e-Android alawulwa nge-ADB ne-SCAT.
Izindleko zemishini edingekayo ukwenza lokhu kuhlasela zilinganiselwa ku- $ 7,000.
Abakhiqizi beziteshi ze-Base baziswa ngale nkinga ngoDisemba odlule kanti iningi labo selivele likhiphe ama-patches ukulungisa ubungozi. Noma kunjalo, abanye opharetha kungenzeka bazishaye indiva izibuyekezo.
Ukuhlola ukuthambekela kwenkinga yamanethiwekhi we-LTE ne-5G, uhlelo lokusebenza olukhethekile lweselula selulungiselelwe ipulatifomu ye-Android 9 (ukuze isebenze, udinga ukufinyelela kwezimpande kanye ne-smartphone kuma-chips eQualcomm, afana neXiaomi Mi A3, One Plus 6T kanye neXiaomi Mix 3 5G).
Ngaphezu kokunquma ubukhona bokuba sengozini, uhlelo lokusebenza lungasetshenziselwa ukuthwebula ithrafikhi nokubuka imilayezo yesevisi. Ithrafikhi ebanjiwe igcinwa ngefomethi ye-PCAP futhi ingathunyelwa kuseva ye-HTTP ecaciswe umsebenzisi ukuze ihlaziyeke kabanzi ngamathuluzi ajwayelekile.
Umthombo: https://revolte-attack.net/
Siyabonga ngokwabelana ngalolu lwazi.