News for hackers. Stuff that matters.

A comment on ARMageddon: Cache Attacks on Mobile Devices.

Re:ARMageddon: Cache Attacks on Mobile Devices by mk7 on Friday August 12, 2016 @03:58AM (#12273996)
From the linked article: "While the data stored in the cache is protected by virtual memory mechanisms, the metadata about the content of the cache, and hence the memory access patterns of processes using that cache, is not fully protected."

=> And this metadata seems be used to get to the keys/passwords from sibling processes: with memory-access time measurements for known crypto implementations...

[ Parent | on HN ]
Re:ARMageddon: Cache Attacks on Mobile Devices by zer11782oo on Friday August 12, 2016 @05:36AM (#12274287)
"protected" is really the wrong word. Doesn't need the NSA to read RAM!
[ Parent | on HN ]
Re:ARMageddon: Cache Attacks on Mobile Devices by alain94040 on Friday August 12, 2016 @12:07PM (#12276719)
You misread the explanation. Data from another process is in the cache, but your process can't access it (due to virtual memory protection). But you can still extract side-band information by measuring the cache latency.
[ Parent | on HN ]