4 ms·
Wouldn't this scheme be entirely susceptible to an emulation-based attack? You'd need an emulator which could do the split TLB trick but it doesn't sound partic
by zik 12y ago
Wouldn't this scheme be entirely susceptible to an emulation-based attack? You'd need an emulator which could do the split TLB trick but it doesn't sound particularly hard.
- irixusr 12y agoMy thoughts exactly, unless they're using undocumented features of the CPU.
- korethr 12y agoWouldn't using said undocumented features make it easier to emulator devs to reverse engineer and implement those features in the emulator?
- geofft 12y agoThey say in the article that an attack that has the foresight to mess with the software from the beginning can win. The use case seems to be, load the key in while the system is uncompromised (just booted off fresh media), and then you don't have to worry about it being compromised later, after it's processed untrusted data from the internet.