7 ms·
No, the attack doesn't require Intel to sign the attacker's code. It works by abusing SGX's tamper detection, which hangs the machine if a forbidden memory regi
by ameliaquining 9y ago
No, the attack doesn't require Intel to sign the attacker's code. It works by abusing SGX's tamper detection, which hangs the machine if a forbidden memory region has been written to. If you can trigger such forbidden writes repeatedly (which is what Rowhammer does), you can DDoS a cloud provider.
- peoplewindow 9y agoThe paper makes several claims about SGX, but the part I quoted says it uses it to hide the attack from the operating system. The "DoS a cloud by making a hang" aspect is different.