3 ms·
AMD EPYC processors already support AES encryption of memory (https://developer.amd.com/sev/ https://developer.amd.com/sev/) where VMs themselves cannot know th
by matja 5y ago
AMD EPYC processors already support AES encryption of memory (https://developer.amd.com/sev/ https://developer.amd.com/sev/) where VMs themselves cannot know the key. Interesting that I didn't see that mentioned in the paper as a possible mitigation.
- guerrilla 5y agoWhy do you believe this would help? Have you seen the attack from the BlackHat?[1] It doesn't require being able to read any plain text and it doesn't matter how the data is stored, only that it's near. You don't even have to have any access to the target memory or even know where it is, only the ability to cause something else to read it predictably. 1. https://www.blackhat.com/docs/us-15/materials/us-15-Seaborn-Exploiting-The-DRAM-Rowhammer-Bug-To-Gain-Kernel-Privileges-wp.pdf https://www.blackhat.com/docs/us-15/materials/us-15-Seaborn-...