Paper 2018/902

ProximiTEE: Hardened SGX Attestation by Proximity Verification

Aritra Dhar, Evan Puddu, Kari Kostiainen, and Srdjan Capkun

Abstract

Intel SGX enables protected enclaves on untrusted computing platforms. An important part of SGX is its remote attestation mechanism that allows a remote verifier to check that the expected enclave was correctly initialized before provisioning secrets to it. However, SGX attestation is vulnerable to relay attacks where the attacker, using malicious software on the target platform, redirects the attestation and therefore the provisioning of confidential data to a platform that he physically controls. Although relay attacks have been known for a long time, their consequences have not been carefully examined. In this paper, we analyze relay attacks and show that redirection increases the adversary's abilities to compromise the enclave in several ways, enabling for instance physical and digital side-channel attacks that would not be otherwise possible. %We also explain why commonly suggested solutions like trust on first use (TOFU) are inadequate to prevent relay attacks. We propose ProximiTEE, a novel solution to prevent relay attacks. Our solution is based on a trusted embedded device that is attached to the target platform. Our device verifies the proximity of the attested enclave, thus allowing attestation to the intended enclave regardless of malicious software, such as a compromised OS, on the target platform. The device also performs periodic proximity verification which enables secure enclave revocation by detaching the device. Although proximity verification has been proposed as a defense against relay attacks before, this paper is the first to experimentally demonstrate that it can be secure and reliable for TEEs like SGX. Additionally, we consider a stronger adversary that has obtained leaked SGX attestation keys and emulates an enclave on the target platform. To address such emulation attacks, we propose a second solution where the target platform is securely initialized by booting it from the attached embedded device.

Metadata
Available format(s)
PDF
Category
Applications
Publication info
Preprint. MINOR revision.
Contact author(s)
aritra dhar @ inf ethz ch
History
2019-07-26: last of 3 revisions
2018-09-25: received
See all versions
Short URL
https://ia.cr/2018/902
License
Creative Commons Attribution
CC BY

BibTeX

@misc{cryptoeprint:2018/902,
      author = {Aritra Dhar and Evan Puddu and Kari Kostiainen and Srdjan Capkun},
      title = {ProximiTEE: Hardened SGX Attestation by Proximity Verification},
      howpublished = {Cryptology ePrint Archive, Paper 2018/902},
      year = {2018},
      note = {\url{https://eprint.iacr.org/2018/902}},
      url = {https://eprint.iacr.org/2018/902}
}
Note: In order to protect the privacy of readers, eprint.iacr.org does not use cookies or embedded third party content.