Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

L1D Cache Side-channal on Nanhu #2534

Open
nieeka opened this issue Dec 7, 2023 · 1 comment
Open

L1D Cache Side-channal on Nanhu #2534

nieeka opened this issue Dec 7, 2023 · 1 comment
Labels
security Some designs may introduce security issues

Comments

@nieeka
Copy link

nieeka commented Dec 7, 2023

Type of issue: bug report

Impact: L1D Cache

Compile: make emu -j32

Used boom commit: f0d8a1c

How to reproduce the attack: AM workload

Development Phase: proposal

I found a L1D Cache Side-channal on Nanhu.
The attack relies on the csr mcycle and PLRU eviction algorithm.

The attached PoC attack is a Information Disclosure type of attack where an attacker leaks a secret from the L1D cache.

It still works and almost correctly retrieves the secret value.

dcachetest.zip

@wakafa1
Copy link
Member

wakafa1 commented Dec 8, 2023

Received and under reproduce & repair, thank you for your report.

@wakafa1 wakafa1 added the security Some designs may introduce security issues label Dec 8, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security Some designs may introduce security issues
Projects
None yet
Development

No branches or pull requests

2 participants