PhiAttack - Archive ouverte HAL Accéder directement au contenu
Communication Dans Un Congrès Année : 2022

PhiAttack

Résumé

Compiling Java Card applets is based on the assumption that export files used to translate Java class item to Java Card CAP tokens are legitimate. Bouffard et al. [2] reversed the translation mechanism. Based on malicious Application Programming Interface (API) embedded in a target, they succeeded in making a man-in-the-middle attack where cryptographic keys can leak. In this article, we disclose that, on a pool of legitimate export files, Java Card Virtual Machine (JCVM) implementations can be confused by a CAP file verified by the Java Card Bytecode Verifier (BCV). The disclosed vulnerability leads to Java Card class hierarchy rewriting. The introduced vulnerability is exploitable up to Java Card 3.0.5. Recently, Java Card 3.1.0 provides a new export file format which prevents this vulnerability.
Fichier principal
Vignette du fichier
DubreuilB21.pdf (175.93 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03823792 , version 1 (21-10-2022)

Identifiants

Citer

Jean Dubreuil, Guillaume Bouffard. PhiAttack: Rewriting the Java Card Class Hierarchy. CARDIS 2021 - 20th International Conference on Smart Card Research and Advanced Applications, Nov 2021, Lübeck, Germany. pp.275-288, ⟨10.1007/978-3-030-97348-3_15⟩. ⟨hal-03823792⟩
22 Consultations
123 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More