DROWN security threat - Revision history

JAL: wordsmithing and new link

2016-03-28T19:46:12Z

wordsmithing and new link

← Older revision		Revision as of 19:46, 28 March 2016
Line 3:		Line 3:
	DROWN (Decrypting RSA with Obsolete and Weakened eNcryption) allows an attacker to decrypt intercepted TLS connections by making specially crafted connections to an SSL V2 server that uses the same private key.		DROWN (Decrypting RSA with Obsolete and Weakened eNcryption) allows an attacker to decrypt intercepted TLS connections by making specially crafted connections to an SSL V2 server that uses the same private key.

	As stated in the detailed recommendations below, under Model 204 7.5 and later, ~~exposure to this DROWN attack is eliminated because~~ SSL V2 support is disabled. The best solution to the DROWN attack is to upgrade to the latest release, Model 204 7.6.		As stated in the detailed recommendations below, under Model 204 7.5 and later, SSL V2 support is disabled. The best solution to the DROWN attack is to upgrade to the latest release, Model 204 7.6.

	==Recommendations==		==Recommendations==
	The DROWN threat exploits a security vulnerability of SSL ports that use SSL V2. ~~In response~~, the Rocket M204 security team has the following recommendations:		The DROWN threat exploits a security vulnerability of SSL ports that use SSL V2. Based on the known characteristics of the DROWN attack and test results, the Rocket M204 security team has the following recommendations:

	===1. Disable SSL V2 (Model 204 7.4 and lower)===		===1. Disable SSL V2 (Model 204 7.4 and lower)===
Line 13:		Line 13:

	<li>On an older version of Model 204, set the Janus port parameter <var>[[SSLPROT (JANUS DEFINE parameter)\|SSLPROT]]</var> to X'1E' on all Janus SSL ports. This disables SSL V2. The <var>SSLPROT</var> default for these versions is X'07'. </li>		<li>On an older version of Model 204, set the Janus port parameter <var>[[SSLPROT (JANUS DEFINE parameter)\|SSLPROT]]</var> to X'1E' on all Janus SSL ports. This disables SSL V2. The <var>SSLPROT</var> default for these versions is X'07'. </li>
			<p>
			You can issue a <code>[[JANUS DISPLAY]]</code> command to view the <var>JANUS DEFINE</var> parameters explicitly defined for Janus ports for your Model 204 Online. </p>
	<p>		<p>
	It is also strongly recommended that you upgrade to Model 204 7.6 as soon as possible. </p></li>		It is also strongly recommended that you upgrade to Model 204 7.6 as soon as possible. </p></li>

JAL: /* 2. Disable SSL V3 (Model 204 7.5 and higher) */ reword heading

2016-03-25T17:18:34Z

2. Disable SSL V3 (Model 204 7.5 and higher): reword heading

← Older revision		Revision as of 17:18, 25 March 2016
Line 19:		Line 19:
	</ul>		</ul>

	===2. Disable SSL V3 (Model 204 ~~7.5 and higher~~)===		===2. Disable SSL V3 (all Model 204 versions)===
	While SSL V3 is not considered a major security exposure, Rocket Technical Support recommends also disabling SSL V3.		While SSL V3 is not considered a major security exposure, Rocket Technical Support recommends also disabling SSL V3.

JAL: /* 2. Disable SSL V3 (Model 204 7.5 and higher) */ add word

2016-03-24T22:38:56Z

2. Disable SSL V3 (Model 204 7.5 and higher): add word

← Older revision		Revision as of 22:38, 24 March 2016
Line 28:		Line 28:
	<li>Next best alternative: Set <var>SSLPROT</var> X'18', which disables TLS 1.0. </li>		<li>Next best alternative: Set <var>SSLPROT</var> X'18', which disables TLS 1.0. </li>

	<li>Or, set <var>SSLPROT</var> X'1C', which allows TLS 1.2, 1.1, and 1.0. </li>		<li>Or, set <var>SSLPROT</var> X'1C', which allows only TLS 1.2, 1.1, and 1.0. </li>
	</ul>		</ul>

JAL: link repair

2016-03-24T21:39:57Z

link repair

← Older revision		Revision as of 21:39, 24 March 2016
Line 1:		Line 1:
	[[~~Media:JansslrNew.pdf\|~~Janus Network Security]] customers should be aware of a security threat known as the "DROWN attack" (https://drownattack.com/). The DROWN threat exploits a security vulnerability of network SSL ports that use SSL V2.		[[Janus Network Security]] customers should be aware of a security threat known as the "DROWN attack" (https://drownattack.com/). The DROWN threat exploits a security vulnerability of network SSL ports that use SSL V2.

	DROWN (Decrypting RSA with Obsolete and Weakened eNcryption) allows an attacker to decrypt intercepted TLS connections by making specially crafted connections to an SSL V2 server that uses the same private key.		DROWN (Decrypting RSA with Obsolete and Weakened eNcryption) allows an attacker to decrypt intercepted TLS connections by making specially crafted connections to an SSL V2 server that uses the same private key.
Line 37:		Line 37:
	Currently, when using the FireFox browser, if your connection requires SSL V3, you may get an error like the following:		Currently, when using the FireFox browser, if your connection requires SSL V3, you may get an error like the following:

	<p class="figure">[[File:Sslv3FF.png\|~~450px~~]]</p>		<p class="figure">[[File:Sslv3FF.png\|425px]]</p>

	The [https://support.mozilla.org/en-US/kb/what-do-sslv3-error-messages-mean-firefox discussion of this error] is found on the Mozilla support pages.		The [https://support.mozilla.org/en-US/kb/what-do-sslv3-error-messages-mean-firefox discussion of this error] is found on the Mozilla support pages.
Line 47:		Line 47:

	The message means that a client (probably a web browser) tried to connect to an SSL port, but it tried to use an SSL		The message means that a client (probably a web browser) tried to connect to an SSL port, but it tried to use an SSL
	protocol that is explicitly blocked by the <var>SSLPROT</var> parameter in the <var>[[JANUS DEFINE]]</var> command.		protocol that is explicitly blocked by the <var>SSLPROT</var> parameter in the <var>JANUS DEFINE</var> command.

	==See also==		==See also==

JAL: add graphic

2016-03-24T20:43:23Z

add graphic

← Older revision		Revision as of 20:43, 24 March 2016
Line 36:		Line 36:
	By default, some browsers may not support SSL V3.		By default, some browsers may not support SSL V3.
	Currently, when using the FireFox browser, if your connection requires SSL V3, you may get an error like the following:		Currently, when using the FireFox browser, if your connection requires SSL V3, you may get an error like the following:

			<p class="figure">[[File:Sslv3FF.png\|450px]]</p>

			The [https://support.mozilla.org/en-US/kb/what-do-sslv3-error-messages-mean-firefox discussion of this error] is found on the Mozilla support pages.

	===After SSL V3 is disabled===		===After SSL V3 is disabled===

JAL: wordsmithing and new content

2016-03-24T20:04:15Z

wordsmithing and new content

← Older revision		Revision as of 20:04, 24 March 2016
Line 1:		Line 1:
	Janus Network Security customers should be aware of a security threat known as the "DROWN attack" (https://drownattack.com/). DROWN (Decrypting RSA with Obsolete and Weakened eNcryption) allows an attacker to decrypt intercepted TLS connections by making specially crafted connections to an SSL V2 server that uses the same private key.		[[Media:JansslrNew.pdf\|Janus Network Security]] customers should be aware of a security threat known as the "DROWN attack" (https://drownattack.com/). The DROWN threat exploits a security vulnerability of network SSL ports that use SSL V2.

			DROWN (Decrypting RSA with Obsolete and Weakened eNcryption) allows an attacker to decrypt intercepted TLS connections by making specially crafted connections to an SSL V2 server that uses the same private key.

			As stated in the detailed recommendations below, under Model 204 7.5 and later, exposure to this DROWN attack is eliminated because SSL V2 support is disabled. The best solution to the DROWN attack is to upgrade to the latest release, Model 204 7.6.

	==Recommendations==		==Recommendations==
	The DROWN threat exploits a security vulnerability of SSL ports that use SSL V2. In response, the Rocket M204 security team has the following recommendations:		The DROWN threat exploits a security vulnerability of SSL ports that use SSL V2. In response, the Rocket M204 security team has the following recommendations:

	===1. Disable SSL V2===		===1. Disable SSL V2 (Model 204 7.4 and lower)===
	<ul>		<ul>
	<li>On Model 204 7.5 and later, SSL V2 support is already disabled~~. This eliminates exposure to the DROWN attack~~. </li>		<li>On Model 204 7.5 and later, SSL V2 support is already disabled. </li>

	<li>On an older version of Model 204, set the Janus port parameter <var>[[SSLPROT (JANUS DEFINE parameter)\|SSLPROT]]</var> to X'1E' on all Janus SSL ports. This disables SSL V2. The <var>SSLPROT</var> default for these versions is X'07'. </li>		<li>On an older version of Model 204, set the Janus port parameter <var>[[SSLPROT (JANUS DEFINE parameter)\|SSLPROT]]</var> to X'1E' on all Janus SSL ports. This disables SSL V2. The <var>SSLPROT</var> default for these versions is X'07'. </li>
Line 12:		Line 16:
	It is also strongly recommended that you upgrade to Model 204 7.6 as soon as possible. </p></li>		It is also strongly recommended that you upgrade to Model 204 7.6 as soon as possible. </p></li>

	<li>Make sure that Janus ports do not share certificates with any ports that support SSL V2. Even ports that do not support SSL V2 are vulnerable to the DROWN attack if they share certificates with ports that do. </li>		<li>Make sure that Janus ports do not share certificates with any other ports that support SSL V2. Even ports that do not support SSL V2 are vulnerable to the DROWN attack if they share certificates with ports that do. </li>
	</ul>		</ul>

	===2. Disable SSL V3~~===~~		===2. Disable SSL V3 (Model 204 7.5 and higher)===
	~~For customers running~~ Model 204 7.5 and ~~later, while~~ SSL V3 is not considered a major security exposure, Rocket Technical Support recommends also disabling SSL V3.		While SSL V3 is not considered a major security exposure, Rocket Technical Support recommends also disabling SSL V3.

	To do this, specify one of the following settings on all Janus SSL ports:		To do this, specify one of the following settings on all Janus SSL ports:
	<ul>		<ul>
	<li>Recommended, if possible in your environment: Set <var>SSLPROT</var> X'10', which only allows TLS 1.2. (~~This~~ approach ~~could be problematic, however, as there are still~~ quite a few SSL clients ~~that~~ do not support TLS 1.2.) </li>		<li>Recommended, if possible in your environment: Set <var>SSLPROT</var> X'10', which only allows TLS 1.2. (The drawback to this approach is that quite a few SSL clients still do not support TLS 1.2.) </li>

	<li>Next best alternative: Set <var>SSLPROT</var> X'18', which disables TLS 1.0. </li>		<li>Next best alternative: Set <var>SSLPROT</var> X'18', which disables TLS 1.0. </li>

	<li>Or, set <var>SSLPROT</var> X'1C'. </li>		<li>Or, set <var>SSLPROT</var> X'1C', which allows TLS 1.2, 1.1, and 1.0. </li>
	</ul>		</ul>

			==The problem with SSL V3==
			SSL V3 has been known to be a security risk since 2014 (see [https://security.googleblog.com/2014/10/this-poodle-bites-exploiting-ssl-30.html Google Security Blog article]).

			By default, some browsers may not support SSL V3.
			Currently, when using the FireFox browser, if your connection requires SSL V3, you may get an error like the following:

			===After SSL V3 is disabled===
			If an application needs SSL V3 and a Janus port has disabled it,
			Model 204 will reject the connection and return the following error to the browser:
			<p class="code">MSIR.0573 SSL client trying to use unsupported protocol: <i>protocol</i></p>

			The message means that a client (probably a web browser) tried to connect to an SSL port, but it tried to use an SSL
			protocol that is explicitly blocked by the <var>SSLPROT</var> parameter in the <var>[[JANUS DEFINE]]</var> command.

	==See also==		==See also==

JAL: 3/23/16 draft of DROWN notice

2016-03-24T18:22:00Z

3/23/16 draft of DROWN notice

New page

Janus Network Security customers should be aware of a security threat known as the "DROWN attack" (https://drownattack.com/). DROWN (Decrypting RSA with Obsolete and Weakened eNcryption) allows an attacker to decrypt intercepted TLS connections by making specially crafted connections to an SSL V2 server that uses the same private key.

==Recommendations==
The DROWN threat exploits a security vulnerability of SSL ports that use SSL V2. In response, the Rocket M204 security team has the following recommendations:

===1. Disable SSL V2===
<ul>
<li>On Model 204 7.5 and later, SSL V2 support is already disabled. This eliminates exposure to the DROWN attack. </li>

<li>On an older version of Model 204, set the Janus port parameter <var>[[SSLPROT (JANUS DEFINE parameter)|SSLPROT]]</var> to X'1E' on all Janus SSL ports. This disables SSL V2. The <var>SSLPROT</var> default for these versions is X'07'. </li>
<p>
It is also strongly recommended that you upgrade to Model 204 7.6 as soon as possible. </p></li>

<li>Make sure that Janus ports do not share certificates with any ports that support SSL V2. Even ports that do not support SSL V2 are vulnerable to the DROWN attack if they share certificates with ports that do. </li>
</ul>

===2. Disable SSL V3===
For customers running Model 204 7.5 and later, while SSL V3 is not considered a major security exposure, Rocket Technical Support recommends also disabling SSL V3.

To do this, specify one of the following settings on all Janus SSL ports:
<ul>
<li>Recommended, if possible in your environment: Set <var>SSLPROT</var> X'10', which only allows TLS 1.2. (This approach could be problematic, however, as there are still quite a few SSL clients that do not support TLS 1.2.) </li>

<li>Next best alternative: Set <var>SSLPROT</var> X'18', which disables TLS 1.0. </li>

<li>Or, set <var>SSLPROT</var> X'1C'. </li>
</ul>

==See also==
For more technical information about the DROWN attack, see: https://drownattack.com/drown-attack-paper.pdf

If you have further questions about this DROWN issue, contact Rocket Technical Support at [mailto:Support@RocketSoftware.com Support@RocketSoftware.com].