Abstract:Speculative execution attacks exploiting speculative execution to leak secrets have aroused significant concerns in both industry and academia. They mainly exploit covert or side channels over microarchitectural states left by mis-speculated and squashed instructions (i.e., transient instructions). Most such attacks target cache states. Existing cache-based defenses against speculative execution attacks fall into two categories, Invisible and Undo. Most Invisible defenses buffer execution metadata of speculative instructions and place them into the cache only if the speculatively executed instructions become determined. Motivated by the fact that mis-speculations are rare cases, Undo defenses allow speculative instructions to modify cache states. Upon a mis-speculation, they rollback cache states to the ones prior to the execution of transient instructions. However, Invisible defenses have been recently found insecure by the speculative interference attack. This calls for a deep security inspection of Undo defenses against speculative execution attacks. In this paper, we present unXpec as the first attack against Undo-based safe speculation. It exploits the secret-dependent timing channel exhibited through the rollback operations of Undo defenses. Specifically, the rollback process requires both invalidating cache lines brought into the cache by transient instructions and restoring evicted cache lines from the cache by transiently loaded data. This opens up a channel that encodes secret via the timing difference between when rollback involves much invalidation and restoration or not. We further leverage eviction sets to enforce more restoration operations. This yields a longer rollback time and thus a larger secret-dependent timing difference. We demonstrate the timing channel over the open-source CleanupSpec, a representative Undo solution. A single transient load can trigger a secret-dependent timing difference of 22 cycles (without eviction sets) of 32 cycles (with eviction sets), which is sufficiently exploitable for constructing a covert channel for speculative execution attacks. We run unXpec on the gem5 simulator with CleanupSpec enabled. The results show that unXpec can leak secrets at a high rate of 140 Kbps with an accuracy over 90%. Simply enforcing constant-time rollback to mitigate unXpec may induce an over 70% performance overhead.

PMU-Leaker: Performance Monitor Unit-based Realization of Cache Side-Channel Attacks

PMU-Spill: Performance Monitor Unit Counters Leak Secrets in Transient Executions

PMU-Spill: A New Side Channel for Transient Execution Attacks

PMUSpill: The Counters in Performance Monitor Unit that Leak SGX-Protected Secrets

Exploration and Exploitation of Hidden PMU Events

Leaky MDU: ARM Memory Disambiguation Unit Uncovered and Vulnerabilities Exposed.

Side-Channel Information Leakage Analysis And Countermeasures In An Embedded Cpu Microarchitecture

Overtake: Achieving Meltdown-type Attacks with One Instruction

Timing the Transient Execution: A New Side-Channel Attack on Intel CPUs

Indirect Meltdown: Building Novel Side-Channel Attacks from Transient-Execution Attacks

MeshUp: Stateless Cache Side-channel Attack on CPU Mesh

Uncovering and Exploiting AMD Speculative Memory Access Predictors for Fun and Profit

Adversarial Prefetch: New Cross-Core Cache Side Channel Attacks

Prime+Retouch: When Cache is Locked and Leaked

CacheOut: Leaking Data on Intel CPUs via Cache Evictions

unXpec: Breaking Undo-based Safe Speculation

Shesha: Multi-head Microarchitectural Leakage Discovery in new-generation Intel Processors

Amplifying Main Memory-Based Timing Covert and Side Channels using Processing-in-Memory Operations

The Early Bird Catches the Leak: Unveiling Timing Side Channels in LLM Serving Systems

Timing Side-Channel Attacks and Countermeasures in CPU Microarchitectures

SoC It to EM: ElectroMagnetic Side-Channel Attacks on a Complex System-on-Chip