Iyo nyowani yeForeshadow kurwisa inokanganisa maIntel, AMD, IBM uye maARM processor

Boka re vaongorori kubva kuGraz University yeTekinoroji muAustria uye iyo Helmholtz Center yeKuchengetedza Ruzivo (CISPA), vaona nyowani yeForeshadow yekurwisa vector (L1TF), iyo inobvumidza iwe kuti utore dhata kubva mundangariro yeIntel SGX enclaves, SMMs, ndangariro nzvimbo dzeinoshanda system kernel, uye chaiwo michina mune virtualization masisitimu.

Kusiyana neyekutanga Foreshadow kurwisa, Iyo misiyano mitsva haina kunangana neIntel processors uye inokanganisa CPU kubva kune vamwe vagadziri vakaita se ARM, IBM uye AMD. Uyezve, iyo sarudzo nyowani haidi kushanda kwepamusoro uye kurwisa kwacho kunogona kuitiswa kunyangwe nekumhanyisa JavaScript neWebAssembly muwebhu browser.

Foreshadow inotora mukana wekuti kana ndangariro ikawanikwa pane chaiyo kero, iyo inogadzira yakasarudzika (terminal peji kutadza), processor inofungidzira kuverenga kero yepanyama uye inotakura iyo data kana iri mune iyo L1 cache.

Kufungidzira kuwana kunoitwa iteration isati yapera yetafura peji yekurangarira uye zvisinei nemamiriro eiyo yekurangarira peji tafura (PTE) yekupinda, ndiko kuti, usati waongorora kuti iyo data iri mune yemuviri ndangariro uye inoverengwa.

Mushure mekupedza memory yekuwanikwa cheki, mukushaikwa kwechiratidziro Chiripo muPTE, mashandiro araswa, asi iyo data yakachengetwa uye inogona kudzorerwa uchishandisa nzira kuona cache yezvinhu kuburikidza nemativi ematanho (nekuongorora shanduko munguva yekuwana kune yakachengetwa uye isina-cached data).

Vatsvakurudzi vakaratidza , que nzira dziripo dzekuzvidzivirira kubva paForeshadow hadzishandi uye zvinoitwa nedudziro isiriyo yedambudziko.

Iyo yekufananidzira inodzivirirwa inogona kuburitswa zvisinei nekushandiswa kwemaitiro ekudzivirira muiyo kernel izvo zvakambofungidzirwa zvakakwana.

Semagumo, Vatsvagiri vakaratidza mukana wekuti vaite yekufananidzira kurwisa pane masisitimu ane tsanga dzakare, umo mune dzese dzinowanikwa nzira dzekudzivirira dzeForeshadow inogoneswa, pamwe neiyo tsanga nyowani, umo chete Specter-v2 dziviriro yakaremara (uchishandisa iyo Linux kernel sarudzo nospectre_v2).

Iyo preetch mhedzisiro yakawanikwa isingaenderane nesoftware preetch mirairo kana Hardware preetch mhedzisiro panguva yekuwana ndangariro, asi zvinobva mukufungidzira kwekufungidzira kweanoshandisa nzvimbo marejista mune kernel.

Uku kusanzwisiswa kwechikonzero chekushushikana pakutanga kwakatungamira mukufungidzira kuti kudonhedza dhata muForeshadow kunogona kungoitika kuburikidza neL1 cache, nepo kuvepo kwemamwe makodhi mapikicha (zvigadzirwa zvekutanga) mune kernel kunogona kubatsira mukudonha kwedata kunze kweL1 cache, semuenzaniso muL3 Cache.

Chinhu chakaratidzwa chinovhurawo mikana yekugadzira kurwisa kutsva. inoitirwa kushandura chaiwo maadresi kune chaiwo mazita munzvimbo dzejecha rebhokisi uye kuona makero nedata rakachengetwa mumarejista eCUU.

Sezvo madhemoni, vaongorori vakaratidza iko kugona kushandisa yakaziviswa mhedzisiro ku bvisa dhata kubva kune imwe nzira kuenda kune imwe nekuburitsa kweanosvika gumi bits pasekondi pane system ine Intel Core i7-6500U CPU.

Iko mukana wekusefa zvirimo zvemarekodhi zvinoratidzwa zvakare Intel SGX yakavharirwa (zvakatora maminetsi gumi neshanu kuona 15-bit kukosha yakanyorwa kune rejista ye32-bit).

Kuvhara kurwisa kwaForeshadow kuburikidza neL3 cache, nzira yekudzivirira yeSpecter-BTB (Bazi Target Buffer) inoitwa mu retpoline chigamba seti inoshanda.

Naizvozvo, vaongorori vanofunga kuti zvakakosha kusiya retpoline yakagoneswa kunyangwe pamasystem ane maCPU matsva, ayo anotova nedziviriro kubva kunjodzi dzinozivikanwa mune yekufungidzira yekushandisa mashandiro eCPU mirairo.

Kune rumwe rutivi, Vamiriri veIntel vakati havana kuronga kuwedzera mamwe matanho ekudzivirira inopesana neForeshadow kune maprosesa uye vanoona seyakakwana kugonesa kudzivirirwa kuSpecter V2 uye L1TF (Foreshadow) kurwisa.

mabviro: https://arxiv.org


Iva wekutanga kutaura

Siya yako yekutaura

Your kero e havazobvumirwi ichibudiswa. Raida minda anozivikanwa ne *

*

*

  1. Inotarisira iyo data: Miguel Ángel Gatón
  2. Chinangwa cheiyo data: Kudzora SPAM, manejimendi manejimendi.
  3. Legitimation: Kubvuma kwako
  4. Kutaurirana kwedata
  5. Dhata yekuchengetedza: Dhatabhesi inobatwa neOccentus Networks (EU)
  6. Kodzero: Panguva ipi neipi iwe unogona kudzora, kupora uye kudzima ruzivo rwako