1. / GRID RSA [1] NIST: National Institute for Standards and Technology 1 [2] NISC: National Information Security Center 2008 SHA-1 RSA1024 [3] [4] /

Size: px

Start display at page:

Download "1. / GRID RSA [1] NIST: National Institute for Standards and Technology 1 [2] NISC: National Information Security Center 2008 SHA-1 RSA1024 [3] [4] /"

ありかつかんけ
5 years ago
Views:

1 1,a) , SSL SSL A Method to Find Cryptographic Algorithms in Security Protocols A Security Measure against Cryptosystem Security Compromises Ryota Sato 1,a) Masayuki Kanda 1 Yoshiaki Seki 1 Kenichiro Muto 1 Sakae Chikara 1 Katsuhiko Yoshida 1 Shigeru Kayaguchi 1 Shinichi Hirata 1 Received: May 17, 2011, Accepted: November 7, 2011 Abstract: Encrypted communications are absolutely essential for the secure provision of services over the Internet. Compromises of the security of cryptosystems, however, have become a serious issue, as improved computer performance and the discovery of new attack methodologies gradually erode the strength of the cryptographic algorithms that underpin encrypted communications. Protecting against compromises of cryptosystem security is critical, particularly for service providers, not only from the perspective of assuring information security but also from the perspective of assuring connectivity with the devices that access their services. In this paper, we discuss the importance of the effective methods or tools which protect against compromises of cryptosystem security in unspecified users by researching existing studies. Following this, we confirm the importance of promoting the proactive implementation of cryptosystem security measures by service providers using the stakeholder classification and the findings of a study on the present state of cryptosystem security measures. From these findings, we propose a new straightforward method of determining the available cryptographic algorithms within a given security protocol to reduce the complexity of the identified steps. The proposed polling method is shown to simplify the determination of cryptographic algorithms by observing the cryptographic algorithm negotiation process between two parties, such as a server and client. Finally, we apply the proposed polling method to the SSL protocol implement an SSL cryptographic configuration verification tool, and demonstrate the polling method s effectiveness. Keywords: security, cryptosystem security compromise, security protocol c 2012 Information Processing Society of Japan 474

2 1. / GRID RSA [1] NIST: National Institute for Standards and Technology 1 [2] NISC: National Information Security Center 2008 SHA-1 RSA1024 [3] [4] / SSL/TLS [5] SSL: Secure Socket Layer 1 NTT NTT Information Sharing Platform Laboratories, NTT Corporation, Musashino, Tokyo , Japan a) sato.ryota@lab.ntt.co.jp TLS: Transport Layer Security SSL3.0 TLS1.0 IETF: The Internet Engineering Task Force SSL/TLS SSL RC4-MD5 [6] % SSL 2. Service Level Agreement SLA [7], [8] SLA SLA SSL Web InternetExplore IE SSL Cipher Suites c 2012 Information Processing Society of Japan 475

Web Web SSL SSL [9] SSL SSL Web SSL Cipher Suites IE Firefox Web Cipher Suites Web SSL Fortify [10] Calomel [11] Web SSL Web Web SSL Web Comodo [12] Web Web 3.

3 Web Web SSL SSL [9] SSL SSL Web SSL Cipher Suites IE Firefox Web Cipher Suites Web SSL Fortify [10] Calomel [11] Web SSL Web Web SSL Web Comodo [12] Web Web SSL SSL SSL [5] [13] AES256-SHA SSL2.0 RC4-MD5 [6] Fig. 1 1 Cryptographic settings on government/administrative servers. c 2012 Information Processing Society of Japan 476

2008 2009 2010 3 2 2009 MD5 with RSA 1,024 [bit] SHA1 with RSA 2,048 [bit] EV 3.3 3.

4 3 IE7 Windows XP Fig. 3 Cryptographic algorithms used with IE 7 (Windows XP). 2 Fig. 2 Ciphers used with server certificates on servers MD5 with RSA 1,024 [bit] SHA1 with RSA 2,048 [bit] EV Web SSL [5] IPA: Informationtechnology Promoting Agency OpenSSL [14] [15] 1 [2], [3] [4] 1 SSL Web 3 OS Windows XP IE7 IE7 Windows XP RC4-MD5 RC4-MD5 IE7 Windows XP IE7 Windows XP 3.4 c 2012 Information Processing Society of Japan 477

5 I-i I-ii I-iii II III II I-iii II I-i I-ii III 3 I-iii II 4.2 I-iii Cipher Suite CS SSL RSA DES SHA-1 SSH RSA DES SHA-1 CS CS Cipher Suites CSs CSs / CSs CS CSs CSs / CSs CSs 4 4 Cipher Suite E Cipher Suite B c 2012 Information Processing Society of Japan 478

5 Conceptual diagram of the security protocol negotiation process.

6 4 CS Fig. 4 Relationship between security protocols and cipher suits. Names in parentheses are examples of actual protocols. 5 Fig. 5 Conceptual diagram of the security protocol negotiation process. 2 CSs CSs CS Cipher Suite A Cipher Suite C Cipher Suite A CS 2 / CS 2 CSs CSs 2 1 CS CSs CS CS CS CS CS CS CS CS CS CSs 2 / CSs CSs CS / CS CSs CS CSs CSs 1 CSs c 2012 Information Processing Society of Japan 479

0 Netscape CSs [18] OpenSSL CSs OpenSSL SSL CSs Web CSs Web CSs [19] IE8 OS: Windows 7 IE8 OS: Windows XP IE7 OS: Windows XP Firefox3.

7 5. SSL SSL SSL SSL 4.2 II 5.1 SSL SSL SSL Web 6 SSL SSL CSs CSs [16] CSs CSs 1 CS SSL SSL OpenSSL [14] SSL 7 CSs OpenSSL CSs CS Web CSs CS CSs TLS1.0 SSL3.0 IANA Internet Assigned Numbers Authority CSs [17] SSL2.0 Netscape CSs [18] OpenSSL CSs OpenSSL SSL CSs Web CSs Web CSs [19] IE8 OS: Windows 7 IE8 OS: Windows XP IE7 OS: Windows XP Firefox3.6 OS: Windows 7 Chrome8 OS: Windows 7 Safari5 OS: MacOSX10.6 Opera11 OS: Windows 7 CSs CS CS I/F II I/F Microsoft Excel I/F 8 I/F URL URL 9 I/F SSL CS CS ON/OFF CS 3 [20] 10 Web CSs I/F Web CS Fig. 6 6 SSL The environment for the usage of the SSLtool. 7 SSL Fig. 7 The architecture of the SSLtool. c 2012 Information Processing Society of Japan 480

Fig. 8 8 SSL I/F A part of the image of input interface of the SSLtool. 9 Fig.

10 SSL Web CSs I/F Fig. 10 A part of the image of output interface of the SSLtool.

0 GB SSL OS: Windows7 CPU: Intel Core i7 1.2 GHz Mem: 4.

8 Fig. 8 8 SSL I/F A part of the image of input interface of the SSLtool. 9 Fig. 9 SSL CS I/F A part of the image of output interface of the SSLtool. 10 SSL Web CSs I/F Fig. 10 A part of the image of output interface of the SSLtool. 5.2 I-iii II SSL OS: CentOS 5.5 CPU: AMD Athlon 2.6 GHz Mem: 1.0 GB SSL OS: Windows7 CPU: Intel Core i7 1.2 GHz Mem: 4.0 GB 100BASE-TX LAN apache OpenSSL 0.9.8e CS OpenSSL CS [21] CS CS CS CS apache OpenSSL OpenSSL c 2012 Information Processing Society of Japan 481

9 Table 1 1 Cost and performance of the proposal method. SSLCipherSuite openssl ciphers -v SSLCipherSuite [21] II CS CS IE CS 1 URL NW 1 CS SSLCipherSuite t1 openssl t2 t3 CS t4 t [ ] t1 t3 60 [ ] URL 6. SSL CSs CSs 1 1 SSL c 2012 Information Processing Society of Japan 482

[1] Vol.54, No.3, pp.155 160 (2009). [2] Elaine, B., William, B., William, B., et al.: Recommendation on Key Management SP800-57-Part-1-revised2, NIST (online), available from http://csrc.nist.

pdf 2011-05-13 [4] WHITE PAPER 2010 https://www.verisign.co.jp/cgi-bin/ mf.cgi?n=wp2010i 2011-05-13 [5] SCIS2009, 4E2-4 (2009). [6] IEICE Fundamentals Review, Vol.4, No.1, pp.57 67 http://w2.

[10] Fortify: SSL Encryption Check, Fortify (online), available from https://www.fortify.net/sslcheck.html (accessed 2011-08-24).

10 [1] Vol.54, No.3, pp (2009). [2] Elaine, B., William, B., William, B., et al.: Recommendation on Key Management SP Part-1-revised2, NIST (online), available from publications/nistpubs/800-57/ sp part1-revised2 Mar pdf (accessed ). [3] SHA-1 RSA1024 NISC crypto pl.pdf [4] WHITE PAPER mf.cgi?n=wp2010i [5] SCIS2009, 4E2-4 (2009). [6] IEICE Fundamentals Review, Vol.4, No.1, pp gakkai-web.net/gakkai/ieice/vol4no1pdf/ vol4no1 57.pdf [7] Vol.51, No.5, p.528 (2010). [8] SLA Vol.48, No.1, pp (2007). [9] SSL SSL Vol CSEC-46, No.44, pp.1 7 (2009). [10] Fortify: SSL Encryption Check, Fortify (online), available from (accessed ). [11] Calomel: Calomel SSL Validation, Mozilla (online), available from addon/calomel-ssl-validation/ (accessed ). [12] Comodo: COMODO SSL Analyzer, Comodo (online), available from (accessed ). [13] SSL LOIS (ISEC ), pp (2010). [14] The OpenSSL Project: The Open Source Toolkit for SLL/TLS, OpenSSL (online), available from (accessed ). [15] IPA 2010 IPA (2010). [16] Alan, O.F., Philip, K. and Paul, C.K.: The SSL Protocol Ver.3.0, Internet Draft (online), available from hornak/adatbiz/ssl3/ ssl-toc.html (accessed ). [17] IANA: Transport Layer Security (TLS) Parameters, IANA (online), available from assignments/tls-parameters/tls-parameters.txt (accessed ). [18] Mozilla: Network Security Services (NSS), Mozilla (online), available from security/pki/nss/fips/nss-source/mozilla/security/ nss/lib/ssl/sslcon.c.html (accessed ). [19] IE Vista SSL INTERNET Watch iw2009/ html [20] LOIS (ISEC ), pp (2010). [21] The OpenSSL Project: OpenSSL Documents ciphers(1), OpenSSL (online), available from org/docs/apps/ciphers.html (accessed ) NTT 2011 FIT 1993 NTT 2009 IPA CRYPTREC FIT IEICE JSSM 1985 NTT 2011 FIT JASI ACM IEEE c 2012 Information Processing Society of Japan 483

11 NTT 1990 NTT 2011 FIT NTT 2011 FIT 1989 AP NTT 2011 FIT NTT 2011 FIT c 2012 Information Processing Society of Japan 484

21 Key Exchange method for portable terminal with direct input by user

21 Key Exchange method for portable terminal with direct input by user 1110251 2011 3 17 Diffie-Hellman,..,,,,.,, 2.,.,..,,.,, Diffie-Hellman, i Abstract Key Exchange method for portable terminal with