SEVurity: No Security Without Integrity -- Breaking Integrity-Free Memory Encryption with Minimal Assumptions · HackerPapers discussions

SEVurity: No Security Without Integrity -- Breaking Integrity-Free Memory Encryption with Minimal Assumptions — mentioned by ENOTTY

Tue, 14 Jul 2020 17:57:31 GMT

AMD SEV's mode has changed over time (as AMD moved from SEV, to SEV-ES, to SEV-SNP). Each time, some academic has managed to reverse engineer the mode. This paper (published 2020) has documented the developments and reverse engineered the mode in SEV-ES. https://arxiv.org/pdf/2004.11071.pdf

Paper and discussion history. A mention is not an endorsement.

SEVurity: No Security Without Integrity -- Breaking Integrity-Free Memory Encryption with Minimal Assumptions — mentioned by lima

Tue, 09 Jun 2020 22:13:23 GMT

Yes - in a recent paper by Wilke et al[0], they nicely demonstrate how the lack of integrity checking can be exploited. SEV is a very new technology and its current (and previous) iterations have known weaknesses. The next generation of SEV will likely have SEV-SNP[1], which will prevent the host from writing guest memory/messing with the guest's page mappings. Will probably take a few more iterations to stabilize. At that point, it should provide decent security guarantees. Current-gen SGX has much stronger guarantees (conceptually, at least) with full memory integrity checking and less…

Paper and discussion history. A mention is not an endorsement.

SEVurity: No Security Without Integrity -- Breaking Integrity-Free Memory Encryption with Minimal Assumptions — mentioned by ENOTTY

Tue, 09 Jun 2020 18:39:07 GMT

SEV has been subjected to its own share of attacks (and design/implementation fails), but note that it has a different threat model. * https://arxiv.org/pdf/1712.05090.pdf 2017 * https://arxiv.org/pdf/1612.01119.pdf 2017 * https://arxiv.org/pdf/1805.09604.pdf 2018 * https://ipads.se.sjtu.edu.cn/_media/publications/fidelius_hp... 2018 * https://seclists.org/fulldisclosure/2019/Jun/46 2019 * https://www3.cs.stonybrook.edu/~mikepo/papers/severest.asiac... 2019 * https://www.usenix.org/system/files/sec19-li-mengyuan_0.pdf 2019 * https://arxiv.org/pdf/1908.11680.pdf 2019 *…

Paper and discussion history. A mention is not an endorsement.