{"id":104811,"date":"2022-08-11T03:36:41","date_gmt":"2022-08-11T01:36:41","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/aepic-leak-ataka-privodyashhaya-k-utechke-klyuchej-iz-anklavov-intel-sgx"},"modified":"2022-08-11T03:36:41","modified_gmt":"2022-08-11T01:36:41","slug":"aepic-leak-ataka-privodyashhaya-k-utechke-klyuchej-iz-anklavov-intel-sgx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/pl\/blog\/news\/aepic-leak-ataka-privodyashhaya-k-utechke-klyuchej-iz-anklavov-intel-sgx","title":{"rendered":"AEPIC Leak \u2014 atak prowadz\u0105cy do wycieku kluczy z enklaw Intel SGX","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Odkryto informacje o nowym ataku na procesory Intel \u2014 AEPIC Leak (CVE-2022-21233), prowadz\u0105cym do wycieku poufnych danych z izolowanych obszar\u00f3w Intel SGX (Software Guard eXtensions). Problem dotyczy 10, 11 i 12 generacji CPU Intel (w tym nowych serii Ice Lake i Alder Lake) i jest spowodowany architektoniczn\u0105 wad\u0105, kt\u00f3ra umo\u017cliwia dost\u0119p do niezinicjalizowanych danych, kt\u00f3re pozosta\u0142y w rejestrach APIC (Advanced Programmable Interrupt Controller) po wykonaniu wcze\u015bniejszych operacji. <\/p>\n

W przeciwie\u0144stwie do atak\u00f3w typu Spectre, wyciek w AEPIC Leak nast\u0119puje bez stosowania metod odzyskiwania przez zewn\u0119trzne kana\u0142y \u2014 informacje o poufnych danych s\u0105 przekazywane bezpo\u015brednio poprzez uzyskanie zawarto\u015bci rejestr\u00f3w, odzwierciedlonych na stronie pami\u0119ci MMIO (memory-mapped I\/O). Og\u00f3lnie rzecz bior\u0105c, atak pozwala zidentyfikowa\u0107 dane przesy\u0142ane mi\u0119dzy pami\u0119ciami podr\u0119cznymi drugiego i ostatniego poziomu, w tym zawarto\u015b\u0107 rejestr\u00f3w i wyniki operacji odczytu z pami\u0119ci, kt\u00f3re wcze\u015bniej by\u0142y przetwarzane na tym samym rdzeniu CPU. <\/p>\n

Poniewa\u017c do przeprowadzenia ataku wymagany jest dost\u0119p do fizycznych stron APIC MMIO, tj. wymagane s\u0105 uprawnienia administratora, metoda ta jest ograniczona do ataku na enklawy SGX, do kt\u00f3rych administrator nie ma bezpo\u015bredniego dost\u0119pu. Badacze opracowali narz\u0119dzia, kt\u00f3re pozwalaj\u0105 w ci\u0105gu kilku sekund okre\u015bli\u0107 przechowywane w SGX klucze AES-NI i RSA, a tak\u017ce klucze atestacyjne Intel SGX oraz parametry generatora liczb pseudolosowych. Kod do przeprowadzenia ataku zosta\u0142 opublikowany na GitHub. <\/p>\n

Firma Intel og\u0142osi\u0142a przygotowanie poprawki w formie aktualizacji mikrokodu, w kt\u00f3rej wdro\u017cono wsparcie dla czyszczenia bufor\u00f3w i dodano dodatkowe \u015brodki ochrony danych enklaw. Opracowano r\u00f3wnie\u017c now\u0105 wersj\u0119 SDK dla Intel SGX z poprawkami, kt\u00f3re zapobiegaj\u0105 wyciekom danych. Programistom system\u00f3w operacyjnych i hypervisor\u00f3w zalecono korzystanie zamiast przestarza\u0142ego trybu xAPIC z trybu x2APIC, w kt\u00f3rym do uzyskiwania dost\u0119pu do rejestr\u00f3w APIC zamiast MMIO wykorzystywane s\u0105 rejestry MSR.
\n
\u0179r\u00f3d\u0142o: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel — AEPIC Leak (CVE-2022-21233), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u043d\u043a\u043b\u0430\u0432\u043e\u0432 Intel SGX (Software Guard eXtensions). \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 10, 11 \u0438 12 \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f CPU Intel (\u0432\u043a\u043b\u044e\u0447\u0430\u044f \u043d\u043e\u0432\u044b\u0435 \u0441\u0435\u0440\u0438\u0438 Ice Lake \u0438 Alder Lake) \u0438 \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u043d\u043e\u0439 \u043d\u0435\u0434\u043e\u0440\u0430\u0431\u043e\u0442\u043a\u043e\u0439, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0435\u0439 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043d\u0435\u0438\u043d\u0438\u0446\u0438\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0434\u0430\u043d\u043d\u044b\u043c, \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u043c\u0441\u044f \u0432 \u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0445 APIC […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-104811","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47AEPIC Leak \u2014 atak prowadz\u0105cy do wycieku kluczy z enklaw Intel SGX | ProHoster","description":"Opublikowano informacje o nowym ataku na procesory Intel - AEPIC Leak (CVE-2022-21233), kt\u00f3ry prowadzi do wycieku poufnych danych z izolowanych enklaw Intel SGX (Software Guard eXtensions).","canonical_url":"https:\/\/prohoster.info\/pl\/blog\/news\/aepic-leak-ataka-privodyashhaya-k-utechke-klyuchej-iz-anklavov-intel-sgx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"pl_PL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47AEPIC Leak \u2014 \u0430\u0442\u0430\u043a\u0430, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043b\u044e\u0447\u0435\u0439 \u0438\u0437 \u0430\u043d\u043a\u043b\u0430\u0432\u043e\u0432 Intel SGX | ProHoster","og:description":"\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u044b \u0441\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043e \u043d\u043e\u0432\u043e\u0439 \u0430\u0442\u0430\u043a\u0435 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel - AEPIC Leak (CVE-2022-21233), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0435\u0439 \u043a \u0443\u0442\u0435\u0447\u043a\u0435 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u043d\u043a\u043b\u0430\u0432\u043e\u0432 Intel SGX (Software Guard eXtensions).","og:url":"https:\/\/prohoster.info\/pl\/blog\/news\/aepic-leak-ataka-privodyashhaya-k-utechke-klyuchej-iz-anklavov-intel-sgx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2022-08-11T01:36:41+00:00","article:modified_time":"2022-08-11T01:36:41+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"104811","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2022-08-11 01:37:52","updated":"2022-10-01 23:35:37","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/104811","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/comments?post=104811"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/posts\/104811\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/media?parent=104811"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/categories?post=104811"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/pl\/wp-json\/wp\/v2\/tags?post=104811"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}