3 ms·
Guard pages address lots of issues with really small overhead, nice. But if you know where to look they're not foolproof. Wondering what the cost of putting ea
by herf 13y ago
Guard pages address lots of issues with really small overhead, nice. But if you know where to look they're not foolproof.
Wondering what the cost of putting each primitive (e.g., RSA private signing + key) in a separate (child) process would be? Mailservers (qmail and postfix) seem to do designs like this.
You could also imagine a page type that would only be readable to certain code segments (would take CPU support to do it.)
- richardwhiuk 13y agoExpensive, and it's not clear that it would help. Context switching between applications is costly in terms of cache hit and CPU time. The other problem is you then have to IPC the sensitive data to the other process, which will mean putting in temporary memory, which would expose it to stack crash, or heap attacks. You've also got to worry about synchronizing the different processes.
- whoopdedo 13y ago> You could also imagine a page type that would only be readable to certain code segments (would take CPU support to do it.) Isn't this what TPM is supposed to provide? It received an unfavorable reputation because of its association with DRM, but it addresses the same problem.
- teacup50 13y agoIntel SGX would allow implementing this efficiently in-process: https://software.intel.com/en-us/blogs/2013/09/26/protecting-application-secrets-with-intel-sgx https://software.intel.com/en-us/blogs/2013/09/26/protecting...