4 ms·
SEV has been subjected to its own share of attacks (and design/implementation fails), but note that it has a different threat model. * https://arxiv.org/pdf/17
by ENOTTY 6y ago
SEV has been subjected to its own share of attacks (and design/implementation fails), but note that it has a different threat model.
* https://arxiv.org/pdf/1712.05090.pdf https://arxiv.org/pdf/1712.05090.pdf 2017
* https://arxiv.org/pdf/1612.01119.pdf https://arxiv.org/pdf/1612.01119.pdf 2017
* https://arxiv.org/pdf/1805.09604.pdf https://arxiv.org/pdf/1805.09604.pdf 2018
* https://ipads.se.sjtu.edu.cn/_media/publications/fidelius_hpca18.pdf https://ipads.se.sjtu.edu.cn/_media/publications/fidelius_hp... 2018
* https://seclists.org/fulldisclosure/2019/Jun/46 https://seclists.org/fulldisclosure/2019/Jun/46 2019
* https://www3.cs.stonybrook.edu/~mikepo/papers/severest.asiaccs19.pdf https://www3.cs.stonybrook.edu/~mikepo/papers/severest.asiac... 2019
* https://www.usenix.org/system/files/sec19-li-mengyuan_0.pdf https://www.usenix.org/system/files/sec19-li-mengyuan_0.pdf 2019
* https://arxiv.org/pdf/1908.11680.pdf https://arxiv.org/pdf/1908.11680.pdf 2019
* https://arxiv.org/pdf/2004.11071.pdf https://arxiv.org/pdf/2004.11071.pdf 2020
Any enclave technology will be reliant on the underlying security of the processor itself. Someone was going to have to go first. Intel happened to take greater risks in the name of performance, and all of their technologies (including their first-to-market enclave technology) are suffering reputational hits as a result.
I'll also just mention that CrossTalk is the more interesting vulnerability affecting SGX that was disclosed today.
- usmannk 6y agoOh huh, I see. Thanks for the papers. "Someone was going to have to go first. Intel happened to take greater risks in the name of performance, and all of their technologies (including their first-to-market enclave technology) are suffering reputational hits as a result." Very true, and a point worth making. Just curious, do you work closely with SGX/SEV? You were quick with the links!