Abstract:Intel software-guard extensions (SGX) allows applications to run in a trusted space (enclave), which provides a highly secure primitive for the running codes and data. Most state-of-the-art attacks on SGX either exploit software vulnerabilities in the enclave or utilize side channels. In this study, we propose the first fault injection attack to break SGX by using voltage-induced hardware faults. This attack is completely controlled by software. It does not require the availability of any software vulnerability. Our proposed attack targets multi-core processors where dynamic voltage and frequency scaling (DVFS) is equipped, which covers most of the commercial processors including those by Intel and ARM. We follow the basic principle for frequency and voltage based fault injection attacks which adjust the frequency or voltage levels deliberately to create hardware faults. We have demonstrated that the software-controlled voltage glitches are effective to fault ARM processors in the previous work. However, to the best of our knowledge, this is the first realization of such attacks on SGX. More specifically, we develop a kernel module to schedule frequency and voltage for Intel processors through their model-specific registers (MSR). We firstly utilize the module to furnish the processor a transient low voltage with controlled timing to inject a temporal fault into the target location of the program running on SGX. Then we perform differential fault analysis on the outputs before and after the injection of faults. This allows us to obtain the SGX-protected confidential data such as encryption keys, with which we can access program and data in the enclave or run any application in the enclave. For demonstration, we successfully deploy the proposed attack to extract the key of an AES executed in the SGX enclave.

VoltJockey: A New Dynamic Voltage Scaling based Fault Injection Attack on Intel SGX

VoltJockey: Breaking SGX by Software-Controlled Voltage-Induced Hardware Faults

A Survey of Intel SGX and Its Applications.

VoltJockey: ABUSING THE PROCESSOR VOLTAGE TO BREAK ARM TrustZone

VoltJockey: Breaching TrustZone by Software-Controlled Voltage Manipulation over Multi-core Frequencies

Interface-Based Side Channel Attack Against Intel SGX

A Deep Investigation on Stealthy DVFS Fault Injection Attacks at DNN Hardware Accelerators

One Glitch to Rule Them All: Fault Injection Attacks Against AMD's Secure Encrypted Virtualization

COIN Attacks

SmashEx: Smashing SGX Enclaves Using Exceptions

DeepStrike: Remotely-Guided Fault Injection Attacks on DNN Accelerator in Cloud-FPGA

DVFSspy: Using Dynamic Voltage and Frequency Scaling As a Covert Channel for Multiple Procedures

SGXLock: Towards Efficiently Establishing Mutual Distrust Between Host Application and Enclave for SGX

The Road to Trust: Building Enclaves within Confidential VMs

SymGX: Detecting Cross-boundary Pointer Vulnerabilities of SGX Applications Via Static Symbolic Execution

Efficiently Hardening SGX Enclaves against Memory Access Pattern Attacks via Dynamic Program Partitioning

Injecting Software Vulnerabilities with Voltage Glitching

The Forgotten Threat of Voltage Glitching: A Case Study on Nvidia Tegra X2 SoCs

Oops..! I Glitched It Again! How to Multi-Glitch the Glitching-Protections on ARM TrustZone-M

SGXKernel