Leaky Cauldron on the Dark Land: Understanding Memory Side-Channel Hazards in SGX

Area of Science:

• Computer Science
• Cybersecurity
• Systems Security

Background:

• Intel SGX (Software Guard Extensions) provides hardware-based memory encryption, but side-channel attacks pose significant risks.
• Existing defenses primarily target page-fault attacks, leaving other vulnerabilities unaddressed.

Purpose of the Study:

• To systematically analyze side-channel threats targeting Intel SGX, focusing on memory management vulnerabilities.
• To identify and evaluate potential attack vectors beyond the page-fault attack.
• To clarify common misconceptions regarding SGX memory side channels.

Main Methods:

• Identification of 8 potential attack vectors across the memory hierarchy, from TLB to DRAM.
• Analysis of page-fault attack variations and their effectiveness against current defenses.
• Demonstration of recovering cryptographic keys and fine-grained program monitoring using combined cache and DRAM channels.

Main Results:

• Discovered 8 novel attack vectors impacting SGX memory management.
• Showcased that high-frequency asynchronous exit events (AEXs) can be bypassed.
• Achieved fine-grained monitoring of enclave programs (64-byte level) by combining cache and cross-enclave DRAM channels.

Conclusions:

• Current defenses against SGX side-channel attacks are insufficient.
• The side-channel threat model for secure enclaves needs redefinition.
• Findings prompt a re-evaluation of SGX's security and usage guidelines.