{"id":104811,"date":"2022-08-11T03:36:41","date_gmt":"2022-08-11T01:36:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/aepic-leak-ataka-privodyashhaya-k-utechke-klyuchej-iz-anklavov-intel-sgx"},"modified":"2022-08-11T03:36:41","modified_gmt":"2022-08-11T01:36:41","slug":"aepic-leak-ataka-privodyashhaya-k-utechke-klyuchej-iz-anklavov-intel-sgx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hu\/blog\/news\/aepic-leak-ataka-privodyashhaya-k-utechke-klyuchej-iz-anklavov-intel-sgx","title":{"rendered":"AEPIC Leak \u2014 t\u00e1mad\u00e1s, amely kulcsok kisziv\u00e1rg\u00e1s\u00e1hoz vezet az Intel SGX z\u00f3n\u00e1ib\u00f3l","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Felt\u00e1rultak az \u00faj t\u00e1mad\u00e1s r\u00e9szletei az Intel processzorok ellen \u2013 AEPIC Leak (CVE-2022-21233), amely \u00e9rz\u00e9keny adatok kisziv\u00e1rg\u00e1s\u00e1t okozza az Intel SGX (Software Guard eXtensions) izol\u00e1lt encl\u00e1v\u00e9ib\u00f3l. A probl\u00e9ma a 10., 11. \u00e9s 12. gener\u00e1ci\u00f3s Intel CPU-kat \u00e9rinti (bele\u00e9rtve az \u00faj Ice Lake \u00e9s Alder Lake sorozatokat) \u00e9s egy architektur\u00e1lis hiba miatt fordul el\u0151, amely lehet\u0151v\u00e9 teszi a nem inicializ\u00e1lt adatokhoz val\u00f3 hozz\u00e1f\u00e9r\u00e9st, amelyek az APIC (Advanced Programmable Interrupt Controller) regisztereiben maradtak a kor\u00e1bbi m\u0171veletek ut\u00e1n. <\/p>\n

A Spectre t\u00edpus\u00fa t\u00e1mad\u00e1sokkal ellent\u00e9tben az AEPIC Leak kisziv\u00e1rg\u00e1s an\u00e9lk\u00fcl t\u00f6rt\u00e9nik, hogy k\u00fcls\u0151 csatorn\u00e1kon kereszt\u00fcl helyre\u00e1ll\u00edt\u00f3 m\u00f3dszereket alkalmazn\u00e1nak \u2013 az \u00e9rz\u00e9keny adatok k\u00f6zvetlen\u00fcl a regiszterek tartalm\u00e1nak lek\u00e9r\u00e9s\u00e9vel ker\u00fclnek \u00e1t, amelyek a MMIO (memory-mapped I\/O) mem\u00f3riaoldalon t\u00fckr\u00f6z\u0151dnek. A t\u00e1mad\u00e1s \u00e1ltal\u00e1nos form\u00e1ja lehet\u0151v\u00e9 teszi az adatok azonos\u00edt\u00e1s\u00e1t, amelyek a m\u00e1sodik \u00e9s legutols\u00f3 szint\u0171 cache-ek k\u00f6z\u00f6tt ker\u00fclnek \u00e1tad\u00e1sra, bele\u00e9rtve a regiszterek tartalm\u00e1t \u00e9s a mem\u00f3ri\u00e1b\u00f3l t\u00f6rt\u00e9nt olvas\u00e1si m\u0171veletek eredm\u00e9nyeit is, amelyeket ezel\u0151tt ugyanazon CPU magj\u00e1n dolgoztak fel. <\/p>\n

Mivel a t\u00e1mad\u00e1s v\u00e9grehajt\u00e1s\u00e1hoz hozz\u00e1f\u00e9r\u00e9s sz\u00fcks\u00e9ges az APIC MMIO fizikai lapjaihoz, azaz adminisztr\u00e1tori jogosults\u00e1gok sz\u00fcks\u00e9gesek, a m\u00f3dszer korl\u00e1toz\u00f3dik az SGX z\u00f3n\u00e1kra, amelyekhez az adminisztr\u00e1toroknak nincs k\u00f6zvetlen hozz\u00e1f\u00e9r\u00e9s\u00fck. A kutat\u00f3k olyan eszk\u00f6zk\u00e9szletet fejlesztettek ki, amely lehet\u0151v\u00e9 teszi a t\u00e1rolt AES-NI \u00e9s RSA kulcsok, valamint az Intel SGX tan\u00fas\u00edt\u00f3 kulcsok \u00e9s a pszeudo v\u00e9letlensz\u00e1m-gener\u00e1tor param\u00e9tereinek n\u00e9h\u00e1ny m\u00e1sodpercen bel\u00fcli azonos\u00edt\u00e1s\u00e1t. A t\u00e1mad\u00e1shoz sz\u00fcks\u00e9ges k\u00f3dot k\u00f6zz\u00e9tett\u00e9k a GitHub-on. <\/p>\n

Az Intel bejelentette, hogy k\u00e9sz\u00fcl a probl\u00e9m\u00e1k jav\u00edt\u00e1s\u00e1ra mikrok\u00f3d friss\u00edt\u00e9s form\u00e1j\u00e1ban, amely t\u00e1mogatja a pufferek tiszt\u00edt\u00e1s\u00e1t, valamint tov\u00e1bbi int\u00e9zked\u00e9seket vezet be a z\u00f3n\u00e1k adatait v\u00e9delme \u00e9rdek\u00e9ben. Ezen fel\u00fcl egy \u00faj Intel SGX SDK kiad\u00e1st is el\u0151k\u00e9sz\u00edtettek, amelyben a kisziv\u00e1rg\u00e1sok megel\u0151z\u00e9s\u00e9re vonatkoz\u00f3 v\u00e1ltoztat\u00e1sok tal\u00e1lhat\u00f3k. Az oper\u00e1ci\u00f3s rendszerek \u00e9s hiperv\u00edzorok fejleszt\u0151inek azt javasolj\u00e1k, hogy az elavult xAPIC m\u00f3d helyett az x2APIC m\u00f3dot haszn\u00e1lj\u00e1k, amelyben az APIC regiszterekhez val\u00f3 hozz\u00e1f\u00e9r\u00e9shez az MMIO helyett MSR regiszterek alkalmazand\u00f3k.
\n
Forr\u00e1s: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel — AEPIC Leak (CVE-2022-21233), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u043d\u043a\u043b\u0430\u0432\u043e\u0432 Intel SGX (Software Guard eXtensions). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 10, 11 \u0438 12 \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f CPU Intel (\u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0438\u0438 Ice Lake \u0438 Alder Lake) \u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u043e\u0439 \u043d\u0435\u0434\u043e\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u043c\u0441\u044f \u0432 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0445 APIC […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104811","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AEPIC Leak \u2014 t\u00e1mad\u00e1s, amely az Intel SGX enklaavokb\u00f3l sz\u00e1rmaz\u00f3 kulcsok sziv\u00e1rg\u00e1s\u00e1hoz vezet | ProHoster","description":"Felt\u00e1rt\u00e1k az Intel processzorokat \u00e9rint\u0151 \u00faj t\u00e1mad\u00e1st - AEPIC Leak (CVE-2022-21233), amely \u00e9rz\u00e9keny adatok kisziv\u00e1rg\u00e1s\u00e1hoz vezet az Intel SGX (Software Guard eXtensions) elszigetelt z\u00f3n\u00e1ib\u00f3l.","canonical_url":"https:\/\/prohoster.info\/hu\/blog\/news\/aepic-leak-ataka-privodyashhaya-k-utechke-klyuchej-iz-anklavov-intel-sgx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hu_HU","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47AEPIC Leak \u2014 \u0430\u0442\u0430\u043a\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043b\u044e\u0447\u0435\u0439 \u0438\u0437 \u0430\u043d\u043a\u043b\u0430\u0432\u043e\u0432 Intel SGX | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel - AEPIC Leak (CVE-2022-21233), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u043d\u043a\u043b\u0430\u0432\u043e\u0432 Intel SGX (Software Guard eXtensions).","og:url":"https:\/\/prohoster.info\/hu\/blog\/news\/aepic-leak-ataka-privodyashhaya-k-utechke-klyuchej-iz-anklavov-intel-sgx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-08-11T01:36:41+00:00","article:modified_time":"2022-08-11T01:36:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104811","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-08-11 01:37:52","updated":"2022-10-01 23:35:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/104811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/comments?post=104811"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/posts\/104811\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/media?parent=104811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/categories?post=104811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hu\/wp-json\/wp\/v2\/tags?post=104811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}