UNSOLVED
AES Encryption is Not Secure
To anyone out there using AES encryption, here is some information you may or may not know:
When NetWorker backs up the Bootstrap, it does not encrypt it even if you have turned on AES encryption for the NetWorker server. This in itself isn't too bad except that the boostrap includes the AES Encryption Key!!! (from the Datazone Phass Phrase parameter).
So you can recover the bootstrap without knowing your encryption key which will in effect allow you to read any encrypted data as recovery of the bootstrap recovers the encryption key.
I discovered this issue (which I believe is a major security breach) when I was testing our disaster recovery procedures. It's hard for me to believe, given the almost daily reports of lost tapes and data privacy breaches, that Legato would either a) not encrypt the bootstrap, or b) not include the Datazone Pass Phrase in the bootstrap backups. Either one would effectively close this loophole.
I am making this post in the hopes that other NetWorker users who are using AES encryption have this knowledge that their data may not be as secure as they think. I also hope that more people will raise this issue with Legato to get them to change how NetWorker performs it's bootstrap backup.
When NetWorker backs up the Bootstrap, it does not encrypt it even if you have turned on AES encryption for the NetWorker server. This in itself isn't too bad except that the boostrap includes the AES Encryption Key!!! (from the Datazone Phass Phrase parameter).
So you can recover the bootstrap without knowing your encryption key which will in effect allow you to read any encrypted data as recovery of the bootstrap recovers the encryption key.
I discovered this issue (which I believe is a major security breach) when I was testing our disaster recovery procedures. It's hard for me to believe, given the almost daily reports of lost tapes and data privacy breaches, that Legato would either a) not encrypt the bootstrap, or b) not include the Datazone Pass Phrase in the bootstrap backups. Either one would effectively close this loophole.
I am making this post in the hopes that other NetWorker users who are using AES encryption have this knowledge that their data may not be as secure as they think. I also hope that more people will raise this issue with Legato to get them to change how NetWorker performs it's bootstrap backup.
716
0
Posted July 10th, 2007 08:00
Hi dk,
Yes, I had opened a support case with EMC support regarding this. Below is their final response on this issue:
"In reference to RFE LGTsc06934 ¿ bootstrap not encrypted, I heard back from the engineer. The reason that the bootstrap isn¿t encrypted is because if you are doing a mmrecov to recover your Networker server, it is assumed that there isn¿t a NetWorker server available to confirm the credentials. It is assumed that you would be running in Evaluation mode which has no restrictions."
This doesn't make a lot of sense to me as in order to run mmrecov you need to first do an install of NetWorker server to start with! At any rate, it would still be an easy fix to just not inculde the Datazone Phass Phrase in the bootstrap.
But based on their response, it doesn't sound like they are going to change anything unless more of the user community brings up the issue.
Joel716
0
Posted July 10th, 2007 12:00
Bugtraq and Full-Disclosure are the most famous among many others.716
0
Posted July 10th, 2007 12:00
I had the same thought. I think getting some more publicity is the only way they will change this behavior. Any ideas on which one(s) would be most interested in something like this? You can e-mail me at JFuller@ibew110.org if you don't want to post publicly.716
0
Posted July 10th, 2007 12:00
The answer of the customer support does not sound very satisfying - particularly with regard to EMC's recent acquisitions on the security sector.
Perhaps publishing this issue one of the major security mailing lists would assert Networker the publicity EMC is looking for716
0
Posted July 16th, 2007 12:00
Hm, to me that explanation from engineering does make sense. And besides, if you have situation where someone can restore your bootstrap then you have far bigger problem I think.
I think it is much bigger problem that datazone key itself is not encrypted:C:\Program Files\Legato\nsr\res\nsrdb>grep -i datazone */* 02/02006414928c81460a18080f:datazone pass phrase: blento;
Since datazone is part of resource db it makes sense to have it in bootstrap backup. However if EMC is using weak and cracked years ago XORing of password filed they could at least XOR this too.
Now to get this info you need:
- root (aka evil admin)
- access to your bootstrap records
I think it is slightly unfair to blame application for security breach in case someone can get root or access to your bootstrap data. I think best solution would be for EMC to come up with some algorithm to encrypt data like passwords or datazone pass phrase (instead of hacked XORing) and that would make everyone happy.716
0
Posted December 17th, 2007 09:00
Does anyone know if EMC has done anything about this ?716
0
Posted December 20th, 2007 17:00
AFAIK nothing has been done, and I don't think anything will change until maybe whatever version comes out after 7.4 (7.5?).
I've done a bit of research on this, as we are just about to enable encryption for a number of our sites, it occured to me that this might be an issue so I had a look around and found others had come to the same conclusion.
Although, its not all bad. If your backups consume multiple tapes then a thief will need the tape that the bootstap is on before he could recover anything.
You could also work around this problem by deliberatly having the bootstrap go to seperate tapes and keeping them in storage seperatly, but in our case, this would not be practical, as some of our sites only have a single tape drive with no auto-changer.625
0
Posted September 14th, 2008 16:00
Hi,
I am using v7.4.2.... and we have implemented AES Encryption ... but now I come to know that bootstrap backup contains the passphrase in clear text.... it a big problem...
How to remove bootstrap backup from groups and schedules.... pls help ... as I don't want bootstrap backup...684
0
Posted September 15th, 2008 10:00
John Speranza said...
AFAIK nothing has been done, and I don't think anything will change until maybe whatever version comes out after 7.4 (7.5?).
I've done a bit of research on this, as we are just about to enable encryption for a number of our sites, it occured to me that this might be an issue so I had a look around and found others had come to the same conclusion.
Although, its not all bad. If your backups consume multiple tapes then a thief will need the tape that the bootstap is on before he could recover anything.
You could also work around this problem by deliberatly having the bootstrap go to seperate tapes and keeping them in storage seperatly, but in our case, this would not be practical, as some of our sites only have a single tape drive with no auto-changer.
If I'm reading right, it wouldn't matter if the thief got your tape even with the bootstrap on it, since the tape is itself encrypted.
They would need access to your server and the bootstrap printout.
If that happens, they deserve whatever they get for poor security on the server box.
dk3
163 Posts
716
0
Posted July 9th, 2007 12:00
thanks for sharing this information here. I agree that this is a major security threat. Did you contact EMC or your support on this issue? I'd like to know if it will be fixed in future Networker releases or how the vendor thinks about handling this problem...