Boka re vaongorori kubva kuGraz University yeTekinoroji (Austria), kare inozivikanwa nekuvandudza nzira dzekurwisa ku MDS, NetSpectre, Throwhammer uye ZombieLoad, kuziviswa munguva pfupi yapfuura nhau dzekuti vanga vachigadzira nzira nyowani yechikamu yekurwisa nzira, codenamed "PLATYPUS".
Kurwisa inobvumira kuvakwazve kweakaverenga data zvichienderana neruzivo rwakatambirwa nemushandisi asina rukudzo kuburikidza neiyo RAPL simba rekutarisa interface yakapihwa pane yemazuva ano Intel (CVE-2020-8694, CVE-2020-8695) uye AMD (CVE-2020-12912) processor.
Nezve PLATYPUS
Vatsvakurudzi vakakwanisa kuratidzira kubviswa kweiyo Intel SGX enclave kubva kune yakavanzika RSA kiyi inoshandiswa kunyorera uchishandisa raibhurari yeTLS mbed, pamwe nemakiyi eAES anoshandiswa kuAES-NI kunyorera padanho reLinux kernel.
Uyewo, inoratidza kuti kurwisa kunogona kushandiswa kupfuura nzira dzekudzivirira uye kuona iyo kero nzvimbo randomization parameter (KASLR) panguva yekushandiswa kweakawanda kushushikana.
Kurwisa inoenderana nekuchinja-chinja kweCPU simba rekushandisa kana uchiita mimwe mirayiridzo yeprosesa, kugadzirisa akasiyana oparesheni, uye kutora data kubva mundangariro, iyo inobvumidza kutonga iyo mhando yeakaremerwa data. Kusiyana nedzimwe nzira dzekurwisa dzakagadzirwa kare dzinoongorora shanduko yemagetsi, PLATYPUS haidi kuwanikwa kwemuviri kumidziyo uye oscilloscope kubatana, asi inobvumidza kushandisa RAPL interface (Kumhanya Avhareji Simba Remagetsi) inowanikwa paIntel uye AMD processor, kutanga neSandy Bridge uye mhuri dzeZen.
Isu tinotora mukana wekusawana mukana kune iyo Intel RAPL interface nekufumura processor simba rekushandisa kupinza data uye kubvisa cryptographic makiyi.
Dambudziko rinosanganisirwa nenyaya yekuti simba rekusimudza simba rakawedzerwa kuLinux kernel inopa mukana weRAPL counters kune vasina-rombo vashandisi, zvichiita kuti zvikwanise kuteedzera CPU neDRAM kushandiswa. PaWindows uye macOS, kurwisa kunoda kuiswa kweIntel Power Gadget package (iyi pasuru inoda mukana wekupinda).
Kurwiswa kunokanganiswa neyakadzika kwazvo kuyerwa resolution, isingaenzaniswi neyakajeka inowanikwa neiyo oscilloscope. Kunyanya, RAPL inogona kutora kuverenga pa 20 kilohertz uye zviyero zvakaenzana, nepo oscilloscope inogona kutora zviyero pane akati wandei gigahertz. Nekudaro, iko iko kurongeka kweRAPL kwakaratidza kuve kwakaringana kuburitsa ruzivo kubva kune yakajairwa kuraira kuyerera pamusoro pekuitwa kwemirairo yakadzokororwa nedata rakasiyana kana oparesheni.
Makambani Intel ne AMD vakaburitsa yakagadziridzwa kodhi yekodhi yeLinux, umo mukana weRAPL unongorambidzwa kumushandisi wemidzi. Vagadziri veiyo Xen hypervisor vakaburitsawo mhinduro inovhara kupinda kweRAPL kubva kumasisitimu evashanyi.
Panguva imwecheteyo, mikana yekuwana haina kukwana kuvhara kurwiswa pane zvakapoteredzwa yeIntel SGX inogona kuitiswa nevanorwisa vakawana mukana wekuwana mukana.
Kuchengetedza kubva pakurwiswa uku, inintel yakaburitsa zvakare microcode kugadzirisa, iyo inogadzirisa zvakare kumwe kusagadzikana kunogona kutungamira mukutyorwa kwedata. Pakazara, Intel yaNovember inogadziridza 95 kushomeka mune zvakasiyana zvigadzirwa.
Iyo yakasarudzika yakatambanuka ye Intel desktop, nhare uye server processor, kutanga nemhuri yeSandy Bridge, inogona kurwiswa.
Pane AMD CPU-based masisitimu, iyo RAPL interface yanga iriko kubva kumhuri yeZen, asi maLinux kernel madhiraivha anongobvumira isina mukana kuwana mukana kune AMD Roma CPU manhamba.
Kurwiswa kwacho kunogona kuiswa kune maARM processors, ayo ane yavo masystem ekuunganidza metric pane simba shanduko, uye iyo Marvell neAmpere chip vatongi vanopa isina mukana mukana kune ma sensors, asi yakadzama ongororo yemukana wekushandisa kurwisa kweakadai madhizaini. .
Pakupedzisira, kana iwe uchifarira kuziva zvakawanda nezvazvo nezve iyo nyowani yekurwisa mhando «PLATYPUS», unogona kutarisa iwo madhisheni Mune inotevera chinongedzo.