3 ms·
FWIW, SGX is in Skylake and later. Time for AMD to shine I guess
by jotm 7y ago
FWIW, SGX is in Skylake and later. Time for AMD to shine I guess
- baq 7y agothe paper mentions TrustZone has (had?) similar issues: > In 2017, Tang et al. [65] discovered a software-based fault attack, dubbed CLK screw. They discovered that ARM processors allow configuration of the dynamic frequency scaling feature, i.e., overclocking, by system software. Tang et al. show that overclocking features may be abused to jeopardize the integrity of computations for privileged adversaries in a Trusted Execution Environment (TEE). Based on this observation, they were able to attack cryptographic code running in TrustZone. They used their attack to extract cryptographic keys from a custom AES software implementation and to overcome RSA signature checks and subsequently execute their own program in the TrustZone of the System-on-Chip (SoC) on a Nexus 6 device. it further notes though: > However, their attack is specific to TrustZone on a certain ARM SoC and not directly applicable to SGX on Intel processors. (ARM TrustZone is what AMD has in their chips)
- antpls 7y agoI did a quick search on the paper, didn't find "google" nor "titan", which is the secure chip made by Google. Would it be vulnerable too?
- qiqitori 7y ago> (ARM TrustZone is what AMD has in their chips) Well, I'll be damned: "The PSP itself is an ARM core inserted on the main CPU.[6]" (https://en.wikipedia.org/wiki/AMD_Platform_Security_Processor https://en.wikipedia.org/wiki/AMD_Platform_Security_Processo...) I'd imagine that the ARM core on the AMD CPU doesn't support changing the clock rate or anything much though.
- AstralStorm 7y agoEven if it does, you cannot execute unattested code on it and the voltage is pegged to CPU IO voltage. Undervolting that risks big fat immediate system crash, unlike undervolting a core.