GnuTLS TLS 1.3 session resumption works without master key, allowing MITM

Posted by Sami_Lehtinen on Sunday June 07, 2020 @03:01PM
from the gitlab.com dept.

https://gitlab.com/gnutls/gnutls/-/issues/1011

( 5 comments | 18 points | on HN )

Re:GnuTLS TLS 1.3 session resumption works without master ke... by yourad_io on Sunday June 07, 2020 @03:54PM (#23450212)

Any ideas which software uses gnutls by default? I couldn't figure it out.

[ Parent | on HN ]

Re:GnuTLS TLS 1.3 session resumption works without master ke... by fardelian on Monday June 08, 2020 @08:01AM (#23455771)

https://en.wikipedia.org/wiki/GnuTLS#Deployment

>Software packages using GnuTLS include(d):

    GNOME
    CenterIM
    Exim
    Weechat
    Mutt
    Wireshark
    slrn
    Lynx
    CUPS
    gnoMint
    GNU Emacs
    Synology DiskStation Manager
    OpenConnect

[ Parent | on HN ]

Re:GnuTLS TLS 1.3 session resumption works without master ke... by chaz6 on Sunday June 07, 2020 @03:15PM (#23449862)

This seems to be in the GnuTLS implementation and not the specification itself as the title led me to believe.

[ Parent | on HN ]

Re:GnuTLS TLS 1.3 session resumption works without master ke... by bpfrh on Sunday June 07, 2020 @03:17PM (#23449890)

Agreed, would be better if the title would be changed to "MITM flaw in Gnutls implementation of TLS 1.2 & 1.3"

[ Parent | on HN ]

Re:GnuTLS TLS 1.3 session resumption works without master ke... by dang on Sunday June 07, 2020 @03:49PM (#23450176)

Fixed now. Submitted title was "TLS 1.3 session resumption works without master key, allowing MITM"

[ Parent | on HN ]