- Security checks were implemented at the end of the development cycle - The earlier you solve security issues, the lower you cost - Secure design and its implementation may be a daunting task for developer shift app security to the left
- Security checks were implemented at the end of the development cycle - The earlier you solve security issues, the lower you cost - Secure design and its implementation may be a daunting task for developer shift app security to the left
Cross-platform Mobile Security at LINE in DevDay2020 - https://linedevday.linecorp.com/2020/en/sessions/8802/ - Strong customer authentication & biometrics using FIDO in DevDay2019 - https://linedevday.linecorp.com/jp/2019/sessions/D1-1 LINE Trusted Security Module
as cryptographic keys. - Hardcoded cryptographic key - Mitigation against the impact of unanticipated token leakage - Mitigation against API abuse - Account Takeover, Spamming, Phishing, DDOS, Fake Client - Key protection method against malicious code execution via XSS - No protection layer for End to End Encryption key in LINE Chrome - New web technologies have appeared over the last years - Web Cryptography API, IndexedDB API
- We assume that an attacker had total control over cryptographic operations and script execution - The goal of the attacker is to retrieve the secret key - The attacker could attempt to gain access to the secret key in memory or storage - Malware has access to the device storage may be able to take the secret key without script execution Secret Key Web Server Application Code Web Application Service Malicious code Malware Scope of Black-box Threat Model Scope of Gray-box Threat Model Scope of White-box Threat Model
key is not accessible to the Javascript environment - Provides an additional protection layer so that the key cannot be extracted and make it only works in legitimate operation - CryptoKey.extractable: true or false - CryptoKey.usages: encrypt, decrypt, sign, verify, wrapKey, unwrapKey, deriveKey, deriveBits - CryptoKey object can be directly stored in the IndexedDB
at the storage level - In key unwrapping, where could we put the unwrapping key? - Web Crypto API does not provide a key attestation - Web Crypto API doesn’t support curve25519 Secret key
it inherently difficult to extract - Keys are never revealed in plaintext form even in memory - Offer increased resistance to reverse engineering and dynamic binary instrumentation toolkit like Frida, PINTool and Valgrind - Purely software-based - Implementable custom cryptographic APIs across platforms
the key object - provide key itself with a layer of protection against direct access to the content of the key by the javascript code - Secure key provisioning - Hardcoded static key problems - Enables the protection of static key or dynamic key sent by the server - Allow to bind the key to the device
Rust in the browser at near-native speed - WebAssembly executes within a sandboxed environment separated from the host runtime - Provides other nice security features such as Memory Safety, Undefined Behavior Sanitizer, Address Sanitizer and Control-Flow Integrity
- Compiles the code to WASM module with Emscripten - Bind C++ functions and classes to JavaScript with Embind - LTSM_JS loaded in a sandboxed page in chrome extension, the sandboxed page will not have access to extension APIs WASM Module JS Binding Layer C++ source code (Sandboxed) HTML Via PostMessage( )
security features for E2EE - The private key in SecureKey is encrypted at all times in white box container - Even when it performs any operations with the private key, it does so without ever exposing the contents in plain form SecureKey SymmetricKey Curve25519Key HMAC Key Provisioning AES KDF Key Wrapping/ Unwrapping End to End Encryption E2EEKey
- Secure Storage Key(SSK) is provisioned from the server - The key object is only valid in a memory and non-extractable Chrome extension Local storage SSK Server Provisioning AES-256-GCM encrypt/decrypt
Text message, Location message, Audio/Video calls are encrypted on the LINE client before being sent - Based on ECDH key exchange algorithm over curve25519 - Each user holds on to their private key on the device. - White paper offers in-depth details to Letter Sealing https://scdn.line-apps.com/stf/linecorp/en/csr/line-encryption-whitepaper-ver2.1.pdf
arbitrary bytes of the key. - Mismatched padding algorithm in key wrapping - Curve25519 private key “Clamping” in key generation - White-box provides key utility to create a protected key blob from plain data - White-box provides special purpose algorithms in Key Derivation Function - Concat: derives a new key by concatenating two existing keys - Slice: takes an arbitrary substring of bytes from the input key and derives it as a new key
plain input data - This operation should be carried ou be done in trusted environment - Able to load the keyblob with SecureKey.importKey( ) Plain data Key Export Tool KeyBlob 4A 32 4D 72 39 33 33 6C 61 54 4E 6B 32 4D 4A 30 49 D8 AD DC 2B AE 89 D1 EE 67 D0 5F CB F3 5C 07 35 2D B4 93 F1 63 D8 51 DC 58 BB DA E0 9A 60 0B 12 15 DA E0 2D 2B AE D8 … SecureKey.importKey SecureKey
secret from a cryptographically safe source - The “Clamping” should be done to the private key before it is used - The clamping function looks like this: secret[0] & 248; secret[31] &= 127; secret[31] |= 64;
first and the last byte of the private key - LUTs generation code: - Creates these LUTs to white box protected exported key blobs using Key Export Tool for(x = 0; x < 256 ; x++) { lut00[256] = x & 248; lut31[256] = (x & 127) | 64; } Clamping on Curve25519 Private Key
The first byte manipulation CZUFT3BOEPN4FDVSF,FZ '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' '' - Takes 16bytes of the data starting at the 15th index using Slicing
concatenating, slicing LUT and key, but its implementation gets much more complicated - Developing some security features inside the security department and providing them to client team can be more efficient in building a security design - Implementing debug features helps to integrate white-box
is very difficult for software implementation - That is what white-box cryptography tries to achieve - With WebAssembly, white-box implementations can be integrated into more security features in web applications - White-box cryptography is not an all-in-one solution, and it is not a magic bullet that makes an insecure security design secure
techverse_2022
oracle4engineer
kitsuya0828
estie
4su_para
shimastripe
salaboy
kazzpapa3
bbrbbq
tenshoku_draft
ishikawa_satoru
tohutohu
csswizardry
destraynor
maggiecrowley
eileencodes
denniskardys
jrom
philhawksworth
sstephenson
tammyeverts
