Rau cov txheej txheem ntawm ntau yam ntawm Armv8-A (Cortex-A) architectures nws tus kheej tshwj xeeb qhov tsis zoo rau kev tawm tsam sab-channel siv kev suav xam algorithms. ARM nws tus kheej tau tshaj tawm qhov no thiab muab thaj ua rau thaj thiab cov lus qhia txhawm rau txo qhov pom muaj qhov tsis zoo. Qhov phom sij tsis zoo heev, tab sis nws tsis tuaj yeem tsis quav ntsej, vim tias cov txheej txheem ua raws li ARM architecture nyob txhua qhov chaw, uas ua rau muaj kev pheej hmoo ntawm kev xau tsis tuaj yeem xav txog qhov tshwm sim.
Qhov teeb meem pom tau los ntawm Google cov kws tshaj lij hauv ARM architectures yog codenamed Straight-Line Speculation (SLS) thiab raug xaiv los ntawm CVE-2020-13844. Raws li ARM, SLS qhov tsis zoo yog ib daim ntawv ntawm Spectre vulnerability, uas (nrog rau Meltdown vulnerability) tau paub dav hauv Lub Ib Hlis 2018. Nyob rau hauv lwm yam lus, qhov no yog ib tug classic vulnerability nyob rau hauv speculative xam mechanisms nrog ib tug sab channel nres.
Kev suav xam xaj yuav tsum tau ua cov ntaub ntawv ua ntej raws li ob peb ceg, txawm tias cov no yuav raug muab pov tseg tom qab tsis tsim nyog. Kev tawm tsam sab-channel tso cai rau cov ntaub ntawv nruab nrab no raug nyiag ua ntej nws puas tsuaj tag. Yog li ntawd, peb muaj cov processors muaj zog thiab muaj kev pheej hmoo ntawm cov ntaub ntawv to.
Qhov Ncaj-Line Speculation nres ntawm ARM-based processors ua rau lub processor, thaum twg muaj kev hloov pauv hauv cov lus qhia kwj, hloov mus rau kev ua cov lus qhia pom ncaj qha hauv lub cim xeeb, tsis yog ua raws li cov lus qhia hauv cov lus qhia tshiab kwj. Pom tseeb, qhov no tsis yog qhov xwm txheej zoo tshaj plaws rau kev xaiv cov lus qhia los ua, uas tuaj yeem siv los ntawm tus neeg tawm tsam.
Rau nws cov credit, ARM tsis tau tsuas yog tso tawm cov kev taw qhia tsim tawm los pab kom tsis txhob muaj kev pheej hmoo ntawm kev xau los ntawm Ncaj-Line Speculation nres, tab sis kuj tau muab thaj ua rau thaj rau cov haujlwm loj xws li FreeBSD, OpenBSD, Trusted Firmware-A thiab OP-TEE thiab tso tawm thaj ua rau thaj rau GCC thiab LLVM compilers.
Lub tuam txhab kuj tau hais tias kev siv thaj ua rau thaj yuav tsis cuam tshuam rau kev ua haujlwm ntawm ARM platforms, raws li tau tshwm sim ntawm x86-tshaj Intel platforms nrog Spectre thiab Meltdown vulnerabilities thaiv. Txawm li cas los xij, peb yuav tuaj yeem kawm txog qhov no los ntawm qhov chaw thib peb, uas yuav muab cov duab lub hom phiaj ntawm qhov tsis zoo tshiab.
Tau qhov twg los: 3d xov.ru