Rowhammer-like attack on SSDs can provide root privileges to attacker

Re:Rowhammer-like attack on SSDs can provide root privileges... by snakeanus on Wednesday August 16, 2017 @04:12PM (#15030908)

If you use a mode like CTR you just flip the corresponding ciphertext bit. As for CBC there are padding-oracle attacks.

[ Parent | on HN ]

Re:Rowhammer-like attack on SSDs can provide root privileges... by tedunangst on Wednesday August 16, 2017 @04:16PM (#15030962)

Do SSDs use CTR mode? How does one perform a padding oracle against an SSD? I feel like we're pretty far away from the relevant context, which is users corrupting data on an SSD.

[ Parent | on HN ]

Re:Rowhammer-like attack on SSDs can provide root privileges... by heheocoenev on Wednesday August 16, 2017 @05:36PM (#15031587)

XTS mode for block storage. Can't be CBC or CTR, where would you Store the IV or counter/nonce?

[ Parent | on HN ]

Re:Rowhammer-like attack on SSDs can provide root privileges... by Scaevolus on Wednesday August 16, 2017 @05:44PM (#15031635)

You could store it in the block metadata, which SSD flash translation layers already use for wear-leveling purposes.

[ Parent | on HN ]

Re:Rowhammer-like attack on SSDs can provide root privileges... by tedunangst on Wednesday August 16, 2017 @06:17PM (#15031843)

This sounds more like random speculation than informed commentary.

[ Parent | on HN ]

Re:Rowhammer-like attack on SSDs can provide root privileges... by rlanday on Wednesday August 16, 2017 @06:16PM (#15031836)

Does the SSD let you read the raw ciphertext to perform that attack? Or does it only expose the decrypted data?

[ Parent | on HN ]

Re:Rowhammer-like attack on SSDs can provide root privileges... by dmitrygr on Wednesday August 16, 2017 @08:07PM (#15032508)

There is no documented way to read cyphertext. I am SURE some manufacturer specific commands exist. But they will likely be undocumented, model-specific, and may be locked away behind a manufacturer key

[ Parent | on HN ]