Securing the Unseen: Vulnerability Research in Confidential Computing
Talkat Confidential Computing Mini Summit at Open Source Summit Europe 2023 · on Monday, 2023-09-18·
summary
A white-box review finds over 30 vulnerabilities across AMD and Intel, fixed and published; TDX 1.0 review (simulator) yields 4 TDX-module bugs and an exit-path interrupt hijack in NP seam loader; tools include PCI Screamer and wi-proofs crypto fuzzer; side channels leverage the monitor/mwait primitive to leak access patterns; firmware and specs are now open sourced and CVEs are assigned.
AI-written summary · about
chapters (15)
- 0:00Confidential computing intro
- 1:04Threat model and AMD SEV
- 6:16AMD SEV research approach
- 8:42Cryptographic review AMD findings
- 10:27Intel TDX confidential computing
- 11:30Intel TDX architecture
- 13:39MP SEAM loader vulnerabilities
- 16:32Authenticated code modules TDX
- 19:43Exit path interrupt hijack
- 21:06TDX module security analysis
- 21:47MSRs and uncore risks
- 23:31Side channels in CC
- 24:34TDX 1.0 review summary
- 25:38Common risks AMD Intel
- 27:44Future of CC security
related talks
52mSecuring The Unseen: Vulnerability Research In Confidential Computing
36mEverybody is talking about Confidential Computing - the minimum Devs should know
53mBack To The Future With Platform Security
42mProtecting the Linux Kernel from Confidential Computing Threats in Virtual Environments
51mVulnerabilities Without CVEs: Governing the Dark Matter of Internal and Unknown Software
51mKeynote |The Microarchitectures That I Saw And The Ones That I Hope To One Day See
51mExploiting Hardware Glitches And Side Channels In Perfect Software
37mIt's All About Trust: Why Confidential Computing Matters