4 ms·
Is it feisable to make privilege escalation of this sort impossible, by shifting cryptographic verification to dedicated hardware?
by snthd 7y ago
Is it feisable to make privilege escalation of this sort impossible, by shifting cryptographic verification to dedicated hardware?
- waz0wski 7y agoIntel hardware has SGX, the concept of a secure enclave for sensitive data ... which is also vulnerable to the same class of speculative execution exploits on hardware generations prior to Cascade Lake Specifically it was a trio of vulnerabilities colloquially known as 'Foreshadow / L1TF': CVE-2018-3615, CVE-2018-3620, and CVE-2018-3646, https://en.wikipedia.org/wiki/Foreshadow_(security_vulnerability) https://en.wikipedia.org/wiki/Foreshadow_(security_vulnerabi...
- Maakuth 7y agoIt's not really a privilege escalation, but a method for completely bypassing memory protection. So keeping cryptographic verification outside the CPU is not enough, if you end up having your sensitive data in the RAM anyway.