TEE.Fail: The Sneaky $1,000 Hack That Pokes Holes in Intel and AMD’s Best Security
Researchers unveiled TEE.Fail, a side-channel attack that exposes secrets from trusted execution environments like Intel SGX and AMD SEV-SNP. Using budget-friendly gear, they can snoop on DDR5 memory traffic. Despite the groundbreaking nature of TEE.Fail, Intel and AMD humorously deem these physical attacks “out of scope,” leaving us questioning what scope even means.
Hot Take:
Looks like the trusted execution environments (TEEs) need a vacation because TEE.Fail is here to crash their party—and it’s bringing a $1,000 interposition device as a plus one! Watch out Intel and AMD, this attack is the ultimate memory lane trip, where all your secrets are laid bare. Who knew memory traffic could be so revealing?
Key Points:
- Academic researchers have developed TEE.Fail, a side-channel attack targeting TEEs in Intel and AMD processors.
- TEE.Fail uses an affordable interposition device to inspect memory traffic in DDR5 systems.
- The attack extracts cryptographic keys and compromises Nvidia’s GPU Confidential Computing.
- TEE.Fail challenges the security of AES-XTS encryption mode used in these processors.
- AMD and Intel are not providing mitigations, citing physical attacks as out of scope.
Already a member? Log in here