Hirdetés
- Szemez az Intel gyártósoraival a Qualcomm
- OLED TV topic
- VR topik (Oculus Rift, stb.)
- Milyen billentyűzetet vegyek?
- AMD K6-III, és minden ami RETRO - Oldschool tuning
- Gaming notebook topik
- Milyen egeret válasszak?
- Nem okoz az adattárolón hibát a Windows 11 augusztusi frissítése
- Milyen alaplapot vegyek?
- Házimozi belépő szinten
Új hozzászólás Aktív témák
-
S_x96x_S
addikt
SEV: "elméletileg" egy gonosz - belsős rendszergazda ki tudja kódolni a titkosításott adatokat.
A HN ( Hacker news-os linken, legalul ) - bővebb - laikusabb infó is van.One Glitch to Rule Them All: Fault Injection Attacks Against AMD's Secure Encrypted Virtualization
"AMD Secure Encrypted Virtualization (SEV) offers protection mechanisms for virtual machines in untrusted environments through memory and register encryption. To separate security-sensitive operations from software executing on the main x86 cores, SEV leverages the AMD Secure Processor (AMD-SP). This paper introduces a new approach to attack SEV-protected virtual machines (VMs) by targeting the AMD-SP. We present a voltage glitching attack that allows an attacker to execute custom payloads on the AMD-SPs of all microarchitectures that support SEV currently on the market (Zen 1, Zen 2, and Zen 3). The presented methods allow us to deploy a custom SEV firmware on the AMD-SP, which enables an adversary to decrypt a VM's memory. Furthermore, using our approach, we can extract endorsement keys of SEV-enabled CPUs, which allows us to fake attestation reports or to pose as a valid target for VM migration without requiring physical access to the target host. Moreover, we reverse-engineered the Versioned Chip Endorsement Key (VCEK) mechanism introduced with SEV Secure Nested Paging (SEV-SNP). The VCEK binds the endorsement keys to the firmware version of TCB components relevant for SEV. Building on the ability to extract the endorsement keys, we show how to derive valid VCEKs for arbitrary firmware versions. With our findings, we prove that SEV cannot adequately protect confidential data in cloud environments from insider attackers, such as rouge administrators, on currently available CPUs."
https://arxiv.org/abs/2108.04575
HN https://news.ycombinator.com/item?id=28153523
Új hozzászólás Aktív témák
- LENOVO IdeaPad L340-17IRH - 17,3"FHD IPS - i7-9750H - 16GB - 1TB - Win10 - GTX 1650 - MAGYAR
- Konzol felvásárlás!! Xbox Series S, Xbox Serries X
- Gamer PC-Számítógép! Csere-Beszámítás! I5 10500T / RTX 3050 / 32GB DDR4 / 512 SSD!
- Új Dell 13 Inspiron 5310 FHD+ IPS i5-11300H 4.4Ghz 8GB 256GB Intel Iris XE Graphics Win11 Garancia
- GYÖNYÖRŰ iPhone 13 Pro 128GB Silver -1 ÉV GARANCIA - Kártyafüggetlen, MS3387, 96% Akkumulátor
Állásajánlatok
Cég: CAMERA-PRO Hungary Kft.
Város: Budapest
Cég: PCMENTOR SZERVIZ KFT.
Város: Budapest