2020-08-20 10:17:05 +00:00
|
|
|
Security
|
2020-08-26 08:10:11 +00:00
|
|
|
* In (D)TLS record decryption, when using a CBC ciphersuites without the
|
|
|
|
|
Encrypt-then-Mac extension, use constant code flow memory access patterns
|
|
|
|
|
to extract and check the MAC. This is an improvement to the existing
|
|
|
|
|
countermeasure against Lucky 13 attacks. The previous countermeasure was
|
|
|
|
|
effective against network-based attackers, but less so against local
|
|
|
|
|
attackers. The new countermeasure defends against local attackers, even
|
|
|
|
|
if they have access to fine-grained measurements. In particular, this
|
|
|
|
|
fixes a local Lucky 13 cache attack found and reported by Tuba Yavuz,
|
|
|
|
|
Farhaan Fowze, Ken (Yihan) Bai, Grant Hernandez, and Kevin Butler
|
2020-08-20 10:17:05 +00:00
|
|
|
(University of Florida) and Dave Tian (Purdue University).
|
