TUTCRIS - Tampereen teknillinen yliopisto

TUTCRIS

Amplifying Side Channels Through Performance Degradation

Tutkimustuotosvertaisarvioitu

Yksityiskohdat

AlkuperäiskieliEnglanti
OtsikkoProceedings of the 32nd Annual Conference on Computer Security Applications
KustantajaACM
Sivut422-435
Sivumäärä14
ISBN (painettu)978-1-4503-4771-6
DOI - pysyväislinkit
TilaJulkaistu - 5 joulukuuta 2016
OKM-julkaisutyyppiA4 Artikkeli konferenssijulkaisussa
TapahtumaANNUAL COMPUTER SECURITY APPLICATIONS CONFERENCE -
Kesto: 1 tammikuuta 1900 → …

Conference

ConferenceANNUAL COMPUTER SECURITY APPLICATIONS CONFERENCE
Ajanjakso1/01/00 → …

Tiivistelmä

Interference between processes executing on shared hardware can be used to mount performance-degradation attacks. However, in most cases, such attacks offer little benefit for the adversary. In this paper, we demonstrate that software-based performance-degradation attacks can be used to amplify side-channel leaks, enabling the adversary to increase both the amount and the quality of information captured.

We identify a new information leak in the OpenSSL implementation of the ECDSA digital signature algorithm, albeit seemingly unexploitable due to the limited granularity of previous trace procurement techniques. To overcome this imposing hurdle, we combine the information leak with a microarchitectural performance-degradation attack that can slow victims down by a factor of over 150. We demonstrate how this combination enables the amplification of a side-channel sufficiently to exploit this new information leak. Using the combined attack, an adversary can break a private key of the secp256k1 curve, used in the Bitcoin protocol, after observing only 6 signatures---a four-fold improvement over all previously described attacks.

Julkaisufoorumi-taso