CryptoDB
Predicting Secret Keys via Branch Prediction
| Authors: | |
|---|---|
| Download: | |
| Abstract: | This paper presents a new software side-channel attack - enabled by the branch prediction capability common to all modern high-performance CPUs. The penalty payed (extra clock cycles) for a mispredicted branch can be used for cryptanalysis of cryptographic primitives that employ a data-dependent program flow. Analogous to the recently described cache-based side-channel attacks our attacks also allow an unprivileged process to attack other processes running in parallel on the same processor, despite sophisticated partitioning methods such as memory protection, sandboxing or even virtualization. We will discuss in detail several such attacks for the example of RSA, and experimentally show their applicability to real systems, such as OpenSSL and Linux. More specifically, we will present four different types of attacks, which are all derived from the basic idea underlying our novel side-channel attack. Moreover, we also demonstrate the strength of the branch prediction side-channel attack by rendering the obvious countermeasure in this context (Montgomery Multiplication with dummy-reduction) as useless. Although the deeper consequences of the latter result make the task of writing an efficient and secure modular expeonentiation (or scalar multiplication on an elliptic curve) a challenging task, we will eventually suggest some countermeasures to mitigate branch prediction side-channel attacks. |
BibTeX
@misc{eprint-2006-21780,
title={Predicting Secret Keys via Branch Prediction},
booktitle={IACR Eprint archive},
keywords={public-key cryptography / Branch Prediction, Modular Exponentiation, Montgomery Multiplication, RSA, Side Channel Analysis, Simultaneous Multithreading, Trusted Computing},
url={http://eprint.iacr.org/2006/288},
note={Currently under the review process of CT-RSA conference aciicmez@eecs.oregonstate.edu 13385 received 23 Aug 2006, last revised 25 Aug 2006},
author={Onur Aciicmez and Jean-Pierre Seifert and Çetin Kaya Koç},
year=2006
}