L2TP/IPSEC cracking method and system based on high-performance computing

Abstract

The invention relates to the technical field of information security. The invention discloses an L2TP / IPSEC cracking method and system based on high-performance computing. The cracking method comprises the steps of cracking a pre-shared key, cracking a login password and realizing encryption information decryption in combination with data flow redirection. The cracking system comprises a traffic intercepting and forwarding module, a man-in-the-middle server management end and a man-in-the-middle server proxy end. According to the invention, man-in-the-middle attack is adopted firstly and thena violent cracking mode is adopted; the weakness of Diffie-Hellman is utilized to carry out man-in-the-middle attack for three times; the cracking of the pre-shared key is completed by the first man-in-the-middle attack; the second man-in-the-middle attack completes cracking of the login password, the third man-in-the-middle attack is combined with data flow redirection to achieve encryption information decryption, in the password cracking process, a user can normally access the Internet, and the method is a cracking method which is free of perception and does not have influence on the user touse the VPN.

Description

technical field [0001] The invention relates to the technical field of information security, in particular to a high-performance computing-based L2TP / IPSEC cracking method and system. Background technique [0002] At present, there are many types of VPNs on the Internet. The mixed use of L2TP and IPsec protocols forms an L2TP / IPsec VPN network with stronger performance. A widely used VPN. Log in to overseas servers through L2TP / IPsec encryption technology, bypassing the state's supervision of information networks, and bringing huge challenges to the intelligence acquisition and information forensics of national security agencies. [0003] The strongly encrypted L2TP / IPsec VPN adopts the IPsec security system based on the network layer in building an end-to-end secure link. The IPsec security system includes three basic protocols: AH protocol, ESP protocol and IKE protocol. The AH protocol provides information source verification and integrity assurance for IP packets, the ...

AI Technical Summary

Problems solved by technology

[0011] There are not many researches on L2TP / IPsec password cracking and L2TP / IPsec main mode encrypted information recovery at home and abroad. This may have a lot to do with the difficulty and sensitivity of this technology. At present, there are few public research results. Most of the known L2TP / IPsec attack-related articles are theoretical analysis and conclusions from the perspective of the protocol

Actual attack cases are mostly carried out from engineering aspects such as realizing code defects, and there are few research results on L2TP / IPsec main mode decryption from the aspects of cryptographic algorithm vulnerability analysis and password cracking, and the restoration of L2TP / IPsec main mode encrypted information The system is basically no

Images