RA-TLS Challenge Certificate Relay in Privasys rustls

Executive Summary

Privasys rustls is a modified version of the rustls TLS library that supports RA-TLS challenge and channel-binding. Before version privasys-v0.8.1, it created RA-TLS challenge certificates where the quote ReportData was linked to the certificate public key and client nonce but not to the active TLS session. This allowed an attacker with an enclave TLS private key to replay a genuine quote on another connection, tricking a relying party into accepting a connection terminated by the attacker as a legitimate attested enclave.

Useful 0 Not Useful 0

Detection Guidance

This vulnerability affects Privasys rustls versions prior to v0.8.1. Detection involves checking the installed version of Privasys rustls. If the version is below v0.8.1, the system is vulnerable. No specific commands are provided in the context to detect active exploitation.

Useful 0 Not Useful 0

Impact Analysis

If you rely on RA-TLS for secure enclave attestation, an attacker could impersonate an attested enclave by replaying a valid quote. This could lead to unauthorized access to sensitive data or systems, as the attacker's connection would appear legitimate. Systems using older versions of privasys rustls are at risk until updated.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could undermine compliance with GDPR, HIPAA, and other regulations requiring secure authentication and data protection. By allowing unauthorized connections to appear legitimate, it may lead to data breaches or unauthorized access, violating confidentiality and integrity requirements.

Useful 0 Not Useful 0

Mitigation Strategies

Update privasys rustls to version 0.8.1 or later to address the RA-TLS challenge certificate issue. Ensure all enclave TLS private keys are rotated and revoked if compromised.

Useful 0 Not Useful 0