Cryptology ePrint Archive: Report 2016/596

Cache Attacks Enable Bulk Key Recovery on the Cloud

Mehmet S. Inci; Berk Gulmezoglu; Gorka Irazoqui; Thomas Eisenbarth; Berk Sunar

Abstract: Cloud services keep gaining popularity despite the security concerns. While non-sensitive data is easily trusted to cloud, security critical data and applications are not. The main concern with the cloud is the shared resources like the CPU, memory and even the network adapter that provide subtle side-channels to malicious parties. We argue that these side-channels indeed leak fine grained, sensitive information and enable key recovery attacks on the cloud. Even further, as a quick scan in one of the Amazon EC2 regions shows, high percentage -55\%- of users run outdated, leakage prone libraries leaving them vulnerable to mass surveillance.

The most commonly exploited leakage in the shared resource systems stem from the cache and the memory. High resolution and the stability of these channels allow the attacker to extract fine grained information. In this work, we employ the \PnP\ attack to retrieve an RSA secret key from a co-located instance. To speed up the attack, we reverse engineer the cache slice selection algorithm for the Intel Xeon E5-2670 v2 that is used in our cloud instances. Finally we employ noise reduction to deduce the RSA private key from the monitored traces. By processing the noisy data we obtain the complete 2048-bit RSA key used during the decryption.

Category / Keywords: Amazon EC2, Co-location Detection, RSA key recovery, Virtualization, Prime and Probe

Original Publication (in the same form): IACR-CHES-2016

Date: received 6 Jun 2016

Contact author: msinci at wpi edu, bgulmezoglu@wpi edu, girazoki@wpi edu, teisenbarth@wpi edu, sunar@wpi edu

Available format(s): PDF | BibTeX Citation

Version: 20160607:202530 (All versions of this report)

Short URL: ia.cr/2016/596

Discussion forum: Show discussion | Start new discussion


[ Cryptology ePrint archive ]