New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing
-
Researchers have disclosed a new hardware attack dubbed DDRop that defeats memory protection in Intel and AMD confidential computing environments. The technique works by silently dropping writes to a server's memory, causing the processor to keep reading stale encrypted data as though it were still current.
According to the disclosure, carrying out the attack requires a specific starting position: the adversary must already control the server's software and be able to briefly access the machine in order to insert a small circuit. From there, the dropped writes undermine the integrity guarantees that confidential computing relies on.
Key points:
- DDRop targets memory protection in Intel and AMD confidential computing.
- The mechanism involves silently dropping writes to server memory.
- The processor then continues reading old encrypted data as if it were up to date.
- Prerequisites: existing control over the server's software and brief physical access to insert a small circuit.
Source: The Hacker News
Does your organization run Intel TDX or AMD SEV-SNP workloads, and if so, what compensating controls are you considering while more details emerge?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login