Skip to main content

Intel’s SGX blown wide open by, you guessed it, a speculative execution attack

  • August 14, 2018
  • 3 replies
  • 0 views

Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54

Speculative execution attacks truly are the.gift that keeps on giving.

 
Peter Bright - 8/14/2018
 
Another day, another speculative execution-based attack. Data protected by Intel's SGX—data that's meant to be protected even from a malicious or hacked kernel—can be read by an attacker thanks to leaks enabled by speculative execution.
 Since publication of the Spectre and Meltdown attacks in January this year, security researchers have been taking a close look at speculative execution and the implications it has for security. All high-speed processors today perform speculative execution: they assume certain things (a register will contain a particular value, a branch will go a particular way) and perform calculations on the basis of those assumptions. It's an important design feature of these chips that's essential to their performance, and it has been for 20 years.
 

 
Full Article.

3 replies

TripleHelix
Moderator
Forum|alt.badge.img+63
  • Moderator
  • August 14, 2018


Jasper_The_Rasper
Moderator
Forum|alt.badge.img+54
August 15th, 2018 By Warwick Ashford
 

Businesses and consumers are advised to download security updates from Intel for new security flaws that could allow attackers to access protected data, but some cloud providers could see a performance impact

 
Intel has released firmware and software updates to mitigate newly discovered security flaws in all the company’s processors produced since 2015.
 
This is the third major security vulnerability in Intel processors to be discovered this year, after Meltdown and Spectre in January.
 
The chipmaker developed the security update after researchers reported a new attack, dubbed Foreshadow, which uses techniques similar to the Meltdown attack discovered seven months ago.
 
Full Article.

TripleHelix
Moderator
Forum|alt.badge.img+63
  • Moderator
  • August 15, 2018