Secure Encrypted Virtualization is Unsecure · HackerPapers discussions

Secure Encrypted Virtualization is Unsecure — mentioned by rstuart4133

Wed, 10 Mar 2021 02:04:01 GMT

We already have AMD's Secure Encrypted Virtualization (SEV). If you trust AMD, you can have a secure VM running on that CPU that's totally opaque to the person who owns the CPU. So even if the KGB could own the CPU, and the USA's president could use a VM on it in full confidence the KGB wouldn't know what calculations he's using it for. What's more it runs existing software, at full speed. Well, that's the theory anyway. In practice, researchers say modifying the encrypted memory, then running the program and seeing what happens next reveals something, enough to get them root in fact. [0] But…

Paper and discussion history. A mention is not an endorsement.

Secure Encrypted Virtualization is Unsecure — mentioned by frankjr

Tue, 14 Jul 2020 13:41:56 GMT

Another paper that mentions AES in the ECB mode is "Secure Encrypted Virtualization is Unsecure!" [0] [0] https://arxiv.org/pdf/1712.05090.pdf

Paper and discussion history. A mention is not an endorsement.

Secure Encrypted Virtualization is Unsecure — mentioned by ENOTTY

Tue, 09 Jun 2020 18:39:07 GMT

SEV has been subjected to its own share of attacks (and design/implementation fails), but note that it has a different threat model. * https://arxiv.org/pdf/1712.05090.pdf 2017 * https://arxiv.org/pdf/1612.01119.pdf 2017 * https://arxiv.org/pdf/1805.09604.pdf 2018 * https://ipads.se.sjtu.edu.cn/_media/publications/fidelius_hp... 2018 * https://seclists.org/fulldisclosure/2019/Jun/46 2019 * https://www3.cs.stonybrook.edu/~mikepo/papers/severest.asiac... 2019 * https://www.usenix.org/system/files/sec19-li-mengyuan_0.pdf 2019 * https://arxiv.org/pdf/1908.11680.pdf 2019 *…

Paper and discussion history. A mention is not an endorsement.