90009548

open access

Version of Record

OpenSSLに対するRAMBleed攻撃

Japanese (日本語)

コンピュータセキュリティシンポジウム2020論文集

416-421

情報処理学会

2020-10-19

2022-07-21

There is an attack called Rowhammer on the DRAM of the computer. A side-channel attack called RAMBleed, which reads secret information without access authority using Rowhammer, has been proposed. It is pointed out that RAMBleed can recover secret information used in OpenSSH. In this paper, we attempt to recover the private key of OpenSSL by attacking the server with RAMBleed. In OpenSSL, the secret information is allocated on the physical memory before RAMBleed is executed. Then, the secret key cannot be guided to the target page by the conventional method. In this paper, we propose a method to move a secret key on physical memory to swap area and reassign it on physical memory. Also, we show the possibility of inducing the secret key to a target page.

side-channel attack

会議発表論文

Notice for the use of this material The copyright of this material is retained by the Information Processing Society of Japan (IPSJ). This material is published on this web site with the agreement of the author (s) and the IPSJ. Please be complied with Copyright Law of Japan and the Code of Ethics of the IPSJ if any users wish to reproduce, make derivative work, distribute or make available to the public any part or whole thereof. All Rights Reserved, Copyright (C) Information Processing Society of Japan.