Re:ARM pointer authentication (2017)
by zeveb on Friday September 21, 2018 @06:53PM
(#18043286)
That's pretty cool, but it seems to me that mixing in the stack pointer just means adding more code to function epilogues & prologues, while not buying much in the way of security. But no doubt I'm missing something.
[ Parent
| on HN ]
The stack pointer is mixed in to the signing to act as a discriminator - it means you can't simply reuse a previously signed return pointer, you have to also have the stack frame in the same position.
As far as addition of code, you may have just been looking at the software implementation which isn't as secure as it isn't implementing an actual cryptographic signature (using a key that isn't visible from within the process)