News for hackers. Stuff that matters.

A comment on Intel Issues Updates to Protect Systems from Security Exploits. Parent comment

Re:Intel Issues Updates to Protect Systems from Security Exp... by cesarb on Thursday January 04, 2018 @02:06PM (#16073081)
Interesting:

> Note: IBRS is not required in order to isolate branch predictions for SMM or SGX enclaves

Perhaps this microcode update exposes a feature which was originally to protect these two modes? But that would mean that Intel did think about leaks through the branch predictor, only didn't make the logical leap that this could be an issue also for normal ring0/ring3...

[ Parent | on HN ]
Re:Intel Issues Updates to Protect Systems from Security Exp... by contrarian_ on Thursday January 04, 2018 @02:22PM (#16073227)
Huh, so did Intel know about this vulnerability when they designed SGX?
[ Parent | on HN ]
Re:Intel Issues Updates to Protect Systems from Security Exp... by pritambaral on Thursday January 04, 2018 @03:00PM (#16073525)
Maybe, maybe not. I looked around a bit and found [1]"that the Intel SGX does not clear branch history when switching from enclave mode to non-enclave mode", which suggests either that the SGX designers were unaware of the dangers of not separating branch prediction between privilege levels, or that Intel intentionally weakened SGX so as to not reveal the similar flaw in their ring0/ring3 separation.

1: https://arxiv.org/abs/1611.06952 (Nov '16)

[ Parent | on HN ]