DMCA
Cache Games – Bringing Access-Based Cache Attacks on AES to Practice (2011)
| Venue: | 2011 IEEE SYMPOSIUM ON SECURITY AND PRIVACY |
| Citations: | 43 - 0 self |
BibTeX
@MISC{Gullasch11cachegames,
author = {David Gullasch and Endre Bangerter and Stephan Krenn},
title = {Cache Games – Bringing Access-Based Cache Attacks on AES to Practice},
year = {2011}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Side channel attacks on cryptographic systems exploit information gained from physical implementations rather than theoretical weaknesses of a scheme. In recent years, major achievements were made for the class of so called access-driven cache attacks. Such attacks exploit the leakage of the memory locations accessed by a victim process. In this paper we consider the AES block cipher and present an attack which is capable of recovering the full secret key in almost realtime for AES-128, requiring only a very limited number of observed encryptions. Unlike previous attacks, we do not require any information about the plaintext (such as its distribution, etc.). Moreover, for the first time, we also show how the plaintext can be recovered without having access to the ciphertext at all. It is the first working attack on AES implementations using compressed tables. There, no efficient techniques to identify the beginning of AES rounds is known, which is the fundamental assumption underlying previous attacks. We have a fully working implementation of our attack which is able to recover AES keys after observing as little as 100 encryptions. It works against the OpenSSL 0.9.8n implementation of AES on Linux systems. Our spy process does not require any special privileges beyond those of a standard Linux user. A contribution of probably independent interest is a denial of service attack on the task scheduler of current Linux systems (CFS), which allows one to observe (on average) every single memory access of a victim process.
Keyphrases
ieee symposium previous attack victim process cryptographic system exploit information aes round full secret key spy process standard linux user abstract side channel attack special privilege side channel task scheduler aes block cipher observed encryption theoretical weakness independent interest linux system physical implementation major achievement access-driven cache attack aes implementation compressed table service attack access-based cache attack fundamental assumption memory location recent year single memory access first time aes key current linux system limited number
