GoFetch: New side-channel attack using data memory-dependent prefetchers
1–10 of 100 posts
Re: GoFetch: New side-channel attack using data memory-dependent prefetchers
#2Reminded me of the Augury attack[1] from 2022, which also exploits the DMP prefetcher on Apple Silicon CPUs.
Re: GoFetch: New side-channel attack using data memory-dependent prefetchers
#3Why does every attack needs its own branding, marketing page, etc...? Genuine question.
Re: GoFetch: New side-channel attack using data memory-dependent prefetchers
#4Why does every attack needs its own branding, marketing page, etc...? Genuine question.
So people talk about it
Re: GoFetch: New side-channel attack using data memory-dependent prefetchers
#5Why does every attack needs its own branding, marketing page, etc...? Genuine question.
Well, names are useful for the same reason people's names are useful. The rest just kinda happens naturally, I think.
Re: GoFetch: New side-channel attack using data memory-dependent prefetchers
#6Why does every attack needs its own branding, marketing page, etc...? Genuine question.
It's science these days. They need funding, one way is to get people to recognize the importance of their work
Re: GoFetch: New side-channel attack using data memory-dependent prefetchers
#7As long as we're getting efficiency cores and such, maybe we need some "crypto cores" added to modern architectures, that make promises specifically related to constant time algorithms like this and promise not to prefetch, branch predict, etc. Sort of like the Itanium, but confined to a "crypto processor". Given how many features these things wouldn't have, they wouldn't be much silicon for the cores themselves, in principle.
This is the sort of thing that would metaphorically drive me to drink if I were implementing crypto code. It's an uphill battle at the best of times, but even if I finally get it all right, there's dozens of processor features both current and future ready to blow my code up at any time.
Re: GoFetch: New side-channel attack using data memory-dependent prefetchers
#8Why does every attack needs its own branding, marketing page, etc...? Genuine question.
Science isn't just about discovering information. Dissemination is critical. Communicating ideas is just as important as discovering them and promotion is part of effective communication. It's natural and healthy for researchers to promote their ideas.
Re: GoFetch: New side-channel attack using data memory-dependent prefetchers
#9Reminded me of the Augury attack[1] from 2022, which also exploits the DMP prefetcher on Apple Silicon CPUs. [1]: https://www.prefetchers.info
Yes, they specifically mention that in the article and FAQ.
Re: GoFetch: New side-channel attack using data memory-dependent prefetchers
#10As long as we're getting efficiency cores and such, maybe we need some "crypto cores" added to modern architectures, that make promises specifically related to constant time algorithms like this and promise not to prefetch, branch predict, etc. Sort of like the Itanium, but confined to a "crypto processor". Given how many features these things wouldn't have, they wouldn't be much silicon for the cores themselves, in…
[deleted]