Kungiyar An saki masu bincike na Jami'ar Illinois sun bunkasa kwanan nan sabuwar hanyar kai hari ta hanyar fasaha wannan yana ba da izinin malalewar bayanai ta hanyar haɗin zobe na masu sarrafa Intel.
Game da wannan sabon nau'in harin an ba da shawarar amfani uku wanda zai baka damar yin wadannan:
- Dawo da ragin mutum mabuɗan ɓoye yayin amfani da aiwatarwar RSA da EdDSA waɗanda ke da saukin kai hare-hare ta tashar gefe (idan jinkirin lissafi ya dogara da bayanan da ake aiwatarwa). Misali, kwararar bayanan mutum tare da bayani game da EdDSA nonce vector vector ya isa ya yi amfani da hare-hare don dawo da duka madannan masu zaman kansu a jere. Harin yana da wahalar aiwatarwa a aikace kuma ana iya aiwatar dashi tare da adadi mai yawa. Misali, ana nuna aikin nasara ta hanyar katse SMT (HyperThreading) da rarraba cache na LLC tsakanin mahimmin CPU.
- Ayyade sigogi game da jinkiri tsakanin maɓallan maɓalli. Jinkirin ya dogara da matsayin mabuɗan kuma ya ba da izini, ta hanyar nazarin ƙididdiga, don sake ƙirƙirar bayanan da aka shigar daga mabuɗin tare da wataƙila (alal misali, yawancin mutane suna yawan buga "s" bayan "a" da sauri fiye da "g" sannan "s").
- Tsara tashar sadarwa ta ɓoye don canja wurin bayanai tsakanin aiwatarwa cikin saurin kusan megabits 4 a sakan ɗaya, wanda baya amfani da memorin da aka raba, cache processor, ko tsarin sarrafa abubuwa da takamaiman albarkatun CPU. An lura cewa hanyar da aka kirkira don ƙirƙirar tashar ɓoyayyiya tana da matukar wahalar toshewa ta hanyoyin da ake dasu na kariya daga kai hare-hare ta hanyar hanyoyin.
Masu binciken sun kuma bayar da rahoton cewa fa'idodin ba sa buƙatar gata mafi girma kuma masu amfani na yau da kullun suna iya amfani da su ba tare da gata ba, sun kuma ambaci harin iya yiwuwar daidaita shi don tsara ɓarkewar bayanai tsakanin injunan kama-da-wane, amma wannan matsalar ta wuce girman binciken kuma ba'a gwada tsarin kirkirar abubuwa ba.
An gwada lambar da aka gabatar akan Intel i7-9700 CPU a cikin Ubuntu 16.04 yanayi. Gabaɗaya, an gwada hanyar kai harin akan Intel Coffee Lake da Skylake masu sarrafa tebur, kuma yana iya aiki ga masu sarrafa uwar garken Broadwell Xeon.
Kayan fasahar Ring Interconnect ya bayyana a cikin masu sarrafawa bisa doron sandar Bridge microarchitecture kuma ya kunshi bas-bas da yawa wadanda ake amfani da su don hada kayan aikin lissafi da zane-zane, northbridge da cache. Mahimmancin hanyar kai harin shine saboda iyakantaccen bandwidth na motar bas na zobe, ayyukan ƙwaƙwalwar ajiya a cikin wani tsari suna jinkirta samun damar zuwa ƙwaƙwalwar wani aiki. Da zarar an aiwatar da cikakken bayani game da aiwatarwa, mai kai hari zai iya samar da lodi wanda zai haifar da jinkirin samun damar ƙwaƙwalwar ajiya a cikin wani tsari kuma yayi amfani da bayanan jinkiri azaman tashar gefe don samun bayanai.
Hare-hare kan motocin CPU na cikin gida suna fuskantar matsalar rashin bayanai game da gine-gine da hanyoyin aikin motar, da kuma hayaniyar da ke haifar da wahalar cire bayanai masu amfani. Zai yiwu a fahimci ƙa'idodin motar ta hanyar injiniyan baya na ladabi da aka yi amfani da su yayin canja wurin bayanai a kan bas ɗin. Don rarrabe bayanai mai amfani daga amo, an yi amfani da samfurin ƙididdigar bayanai bisa ga hanyoyin koyon na'ura.
Samfurin da aka gabatar ya ba da damar tsara sa ido kan jinkirin lissafi a cikin wani takamaiman tsari, a cikin yanayin da yawancin matakai lokaci guda ke samun damar ƙwaƙwalwar ajiya da wani ɓangare na bayanan da aka dawo daga ɗakunan sarrafawa.
A ƙarshe, idan kuna son ƙarin sani game da shi, kuna iya tuntuɓar takarda ta gaba.