论文标题
冲洗板:缓存从冲洗段以外泄漏
Flushgeist: Cache Leaks from Beyond the Flush
论文作者
论文摘要
通常建议使用Cllflush和WBINVD等说明将缓存冲洗为反对基于访问的高速缓存攻击的对策。在本报告中,我们显示了一些英特尔缓存,特别是某些头式雷克处理器中的L1缓存以及某些黑路后处理器中的L2缓存,即使通过Clflush和WBINVD说明冲洗后,泄漏信息也是如此。也就是说,关于Clflush和WBINVD指令行为的关键性假设是不正确的,应修改依靠它们的对策。
Flushing the cache, using instructions like clflush and wbinvd, is commonly proposed as a countermeasure against access-based cache attacks. In this report, we show that several Intel caches, specifically the L1 caches in some pre-Skylake processors and the L2 caches in some post-Broadwell processors, leak information even after being flushed through clflush and wbinvd instructions. That is, security-critical assumptions about the behavior of clflush and wbinvd instructions are incorrect, and countermeasures that rely on them should be revised.