4 ms·
I don't think you even need timing attacks if you can read the zpool statistics; you can ask for a histogram of deduped blocks. Guessing one byte at a time is
by aidenn0 2y ago
I don't think you even need timing attacks if you can read the zpool statistics; you can ask for a histogram of deduped blocks.
Guessing one byte at a time is not possible though because dedupe is block-level in ZFS.
- beng-nl 2y agoGosh, you’re likely right, but what if comparing the blocks (to decide on deduping) is a byte at a time and somehow that can be detected (with a timing channel or a uarch side channel)? Zfs likely compares the hash, but I think KSM doesn’t use hashes but memcmp (or something in that spirit) to avoid collisions. So just maybe… just maybe GP is onto something.. interesting fantasy ;-)
- hhdhdbdb 2y agoThanks for putting meat on the (speculitive) bone I threw out! Very interesting.