No VPN Needed? Cryptographic Attacks Against the OPC UA Protocol

Overview: OPC UA is a standardized communication protocol that is widely used in the areas of industrial automation and IoT. It is used within and between OT networks, but also as a bridge between IT and OT environments or to connect field systems with the cloud. Traditionally, VPN tunnels are used to secure connections between OT trust zones (especially when they cross the internet), but this is often considered not to be neccessary when using OPC UA because the protocol offers its own cryptographic auth

Key Topics: entication and transport security layer. This makes OPC UA a valuable target for attackers, because if they could hijack an OPC UA server they might be able to wreak havoc on whatever industrial systems are controlled by it. I decided to take a look at the cryptography used by the protocol, and managed to identify two protocol flaws which I could turn into practical authentication bypass attacks that worked against various implementations and configurations. These attacks involve signing oracles, signature spoofing padding oracles and turning "RSA-ECB" into a "timing side channel amplifier". In this talk, I will explore the protocols and the

Takeaways: ning two theoretical crypto flaws into highly practical exploits. References: - OPC UA Specifications, OPC Foundation, link - "Chosen ciphertext attacks against protocols based on the RSA encryption standard PKCS# 1.", Daniel Bleichenbacher, Advances in Cryptology—CRYPTO'98: 18th Annual International Cryptology Conference Santa Barbara, California - Prior OPC UA research work by the Claroty Research Team, link