3 ms·
The first section on cache timing seems off. "The one which is being read is cached, and the exception will be raised much faster as a result." I only read th
by ikeboy 9y ago
The first section on cache timing seems off.
"The one which is being read is cached, and the exception will be raised much faster as a result."
I only read the project zero post, not the paper, but I don't recall it having anything to do with timing of exceptions. I don't see the point or relevance of this section.
Might be missing something.
Edit: mixed up Meltdown with Spectre, I'll take a closer look at this later
- kahnjw 9y agoThe attack relies on side channel attacks, specifically Flush+Reload, which uses timing to find accessed memory locations in another program, as stated in both the paper and this summary. It is definitely relevant.
- deleted 9y ago[deleted]
- captn3m0 9y agoThe "flush+reload" mentioned in the Project Zero blog[0] is a variant of cache-timing attacks. The original Flush+reload paper has more details[1], but I intentionally didn't delve into the specifics of Flush+Reload. The description I've used is more closer to Evict+Time actually. If you're interested, I recommend this presentation[2] for more details on the category of attacks. [0]: https://googleprojectzero.blogspot.in/2018/01/reading-privileged-memory-with-side.html https://googleprojectzero.blogspot.in/2018/01/reading-privil... [1]: https://eprint.iacr.org/2013/448.pdf https://eprint.iacr.org/2013/448.pdf [2]: https://conference.hitb.org/hitbsecconf2016ams/materials/D2T1%20-%20Anders%20Fogh%20-%20Cache%20Side%20Channel%20Attacks.pdf https://conference.hitb.org/hitbsecconf2016ams/materials/D2T... (Youtube: https://youtu.be/UH6dFbiX_hM https://youtu.be/UH6dFbiX_hM)