{"id":53866,"date":"2019-12-12T00:00:00","date_gmt":"2019-12-11T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/plundervolt-novyj-metod-ataki-na-protsessory-intel-zatragivayushhij-tehnologiyu-sgx"},"modified":"2020-02-18T14:01:48","modified_gmt":"2020-02-18T11:01:48","slug":"plundervolt-novyj-metod-ataki-na-protsessory-intel-zatragivayushhij-tehnologiyu-sgx","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/news\/plundervolt-novyj-metod-ataki-na-protsessory-intel-zatragivayushhij-tehnologiyu-sgx","title":{"rendered":"Plundervolt \u2014 un nuevo m\u00e9todo de ataque contra procesadores Intel, que afecta la tecnolog\u00eda SGX.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Kompania Intel l\u00ebshoi<\/a><\/noindex> p\u00ebrdit\u00ebsimin e mikrocode q\u00eb adreson vulnerabiliteti<\/a><\/noindex> (CVE-2019-14607), duke lejuar<\/a><\/noindex> p\u00ebrmes manipulimeve me mekanizmin e menaxhimit dinamik t\u00eb tensionit dhe frekuenc\u00ebs n\u00eb CPU p\u00ebr t\u00eb inicuar d\u00ebmtimin e p\u00ebrmbajtjes s\u00eb qelizave me t\u00eb dh\u00ebna, p\u00ebrfshir\u00eb n\u00eb zonat q\u00eb p\u00ebrdoren p\u00ebr llogaritjet n\u00eb enklavat e izoluara Intel SGX. Sulmi mori emrin Plundervolt dhe potencialisht i lejon nj\u00eb p\u00ebrdoruesi lokal t\u00eb fitoj\u00eb privilegje t\u00eb rritura n\u00eb sistem, t\u00eb shkaktoj\u00eb nj\u00eb ndalim n\u00eb sh\u00ebrbim dhe t\u00eb aksesoj\u00eb t\u00eb dh\u00ebna t\u00eb mbrojtura.<\/p>\n

Sulmi paraqet rrezik vet\u00ebm n\u00eb kontekstin e manipulimeve me llogaritjet n\u00eb enklavat SGX, pasi k\u00ebrkon q\u00eb t\u00eb ket\u00eb t\u00eb drejta root n\u00eb sistem p\u00ebr t\u00eb u realizuar. N\u00eb rastin m\u00eb t\u00eb thjesht\u00eb, sulmuesi mund t\u00eb arrij\u00eb t\u00eb shkaktoj\u00eb keqformime n\u00eb informacionin q\u00eb p\u00ebrpunon n\u00eb enklav\u00eb, por n\u00eb skenar\u00eb m\u00eb t\u00eb komplikuar nuk p\u00ebrjashtohet mund\u00ebsia e rikrijimit t\u00eb \u00e7el\u00ebsave t\u00eb mbyllura t\u00eb ruajtur n\u00eb enklav\u00eb, q\u00eb p\u00ebrdoren p\u00ebr enkriptim duke p\u00ebrdorur algoritmet RSA-CRT dhe AES-NI. Teknikat gjithashtu mund t\u00eb p\u00ebrdoren p\u00ebr t\u00eb gjeneruar gabime n\u00eb algoritme fillimisht korrekte p\u00ebr t\u00eb provokuar shfaqjen e dob\u00ebsive gjat\u00eb pun\u00ebs me memorien, p\u00ebr shembull, p\u00ebr t\u00eb organizuar aksesin n\u00eb nj\u00eb zon\u00eb jasht\u00eb memorie t\u00eb rezervuar.
\nPrototipi i kodit p\u00ebr t\u00eb kryer sulmin \u00ebsht\u00eb publikuar<\/a><\/noindex> n\u00eb GitHub<\/p>\n

Q\u00ebllimi i metod\u00ebs \u00ebsht\u00eb krijimi i kushteve p\u00ebr shfaqjen e keqformimeve t\u00eb papritura t\u00eb t\u00eb dh\u00ebnave gjat\u00eb llogaritjeve n\u00eb SGX, p\u00ebr t\u00eb cilat nuk mbron p\u00ebrdorimi i enkriptimit dhe autentifikimit t\u00eb memories n\u00eb enklav\u00eb. P\u00ebr t\u00eb shkaktuar keqformime, rezultoi se ishte e mundur t\u00eb p\u00ebrdoren nd\u00ebrfaqet programore standarde p\u00ebr menaxhimin e frekuenc\u00ebs dhe tensionit, zakonisht t\u00eb aplikuara p\u00ebr t\u00eb zvog\u00ebluar konsumimin e energjis\u00eb gjat\u00eb periudhave t\u00eb papun\u00ebsis\u00eb dhe p\u00ebr t\u00eb aktivizuar performanc\u00ebn maksimale gjat\u00eb pun\u00ebve intensive. Karakteristikat e frekuenc\u00ebs dhe tensionit p\u00ebrfshijn\u00eb t\u00eb gjith\u00eb \u00e7ipin, duke ndikuar gjithashtu n\u00eb realizimin e llogaritjeve n\u00eb enklav\u00ebn e isoluar. <\/p>\n

Duke ndryshuar tensionin, \u00ebsht\u00eb e mundur t\u00eb arrihet krijimi i kushteve, n\u00eb t\u00eb cilat ngarkesa nuk \u00ebsht\u00eb e mjaftueshme p\u00ebr rigjenerimin e qeliz\u00ebs s\u00eb memories brenda CPU-s\u00eb, dhe vlera e saj ndryshon. Dallimi kryesor nga sulmi RowHammer<\/a><\/noindex> \u00ebsht\u00eb se RowHammer lejon ndryshimin e p\u00ebrmbajtjes s\u00eb bit\u00ebve individual\u00eb n\u00eb memorien DRAM, duke lexuar n\u00eb cikle t\u00eb dh\u00ebnat nga qelizat fqinje, nd\u00ebrsa Plundervolt lejon ndryshimin e bit\u00ebve brenda CPU-s\u00eb, kur t\u00eb dh\u00ebnat tashm\u00eb jan\u00eb ngarkuar nga memoria p\u00ebr t\u00eb realizuar llogaritje. Kjo ve\u00e7ori lejon anashkalimin e mekanizmave t\u00eb kontrollit t\u00eb integritetit dhe enkriptimit t\u00eb t\u00eb dh\u00ebnave n\u00eb SGX, pasi vlerat n\u00eb memorie mbeten korrekte, por mund t\u00eb keqformohen gjat\u00eb operacioneve me to, para se rezultati t\u00eb shkruhet n\u00eb memory.<\/p>\n

N\u00ebse ky vler\u00ebsim i ndryshuar p\u00ebrdoret gjat\u00eb procesit t\u00eb mnozjes n\u00eb procesin e enkriptimit, at\u00ebher\u00eb n\u00eb daljen refuzohet nj\u00eb tekst i enkriptuar t\u00eb pasakt\u00eb. Duke pasur mund\u00ebsin\u00eb p\u00ebr t\u00eb aksesuar trajtuesin n\u00eb SGX p\u00ebr t\u00eb enkriptuar t\u00eb dh\u00ebnat e tij, nj\u00eb sulmues mund t\u00eb akumuloj\u00eb statistik\u00eb mbi ndryshimin e teksteve t\u00eb enkriptuar n\u00eb dalje dhe, brenda disa minutash, t\u00eb rikonstruktoj\u00eb vler\u00ebn e \u00e7el\u00ebsit t\u00eb ruajtur n\u00eb enklav\u00eb. Teksti origjinal n\u00eb hyrje dhe teksti i enkriptuar i sakt\u00eb n\u00eb dalje jan\u00eb t\u00eb njohur, \u00e7el\u00ebsi nuk ndryshohet, dhe d\u00ebshtimi p\u00ebr t\u00eb dal\u00eb nj\u00eb tekst t\u00eb enkriptuar t\u00eb pasakt\u00eb tregon p\u00ebr shkall\u00ebve t\u00eb caktuar t\u00eb modifikimit t\u00eb nj\u00eb biti n\u00eb vler\u00ebn e kund\u00ebrt. <\/p>\n

Pas analizimit t\u00eb \u00e7ifteve t\u00eb akumuluara t\u00eb vlerave t\u00eb sakta dhe t\u00eb modifikuara t\u00eb teksteve t\u00eb enkriptuara, me ndihm\u00ebn e metodave t\u00eb analiz\u00ebs diferenciale t\u00eb gabimeve (DFA, Analiza Diferenciale e Gabimeve<\/a><\/noindex>) mund t\u00eb parashikohet<\/a><\/noindex> \u00e7el\u00ebsat e mundsh\u00ebm q\u00eb aplikohen p\u00ebr enkriptimin simetrik AES, dhe m\u00eb pas, duke analizuar nd\u00ebrprerjet e \u00e7el\u00ebsave n\u00eb grupe t\u00eb ndryshme, t\u00eb p\u00ebrcaktohet \u00e7el\u00ebsi i k\u00ebrkuar.<\/p>\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center><\/p>\n

Problemi \u00ebsht\u00eb i pranish\u00ebm n\u00eb modele t\u00eb ndryshme t\u00eb procesor\u00ebve Intel, duke p\u00ebrfshir\u00eb CPU-intel Core me 6
\n n\u00eb 10 brez, si dhe brezat e pest\u00eb dhe t\u00eb sixht\u00eb Xeon E3, brezat e par\u00eb dhe t\u00eb dyt\u00eb t\u00eb Intel Xeon Scalable, Xeon D,
\nXeon W dhe Xeon E.<\/p>\n

Kujtojm\u00eb se teknologjia SGX (Zgjatjet e Gard\u00ebs Softuerike<\/a><\/noindex>) u shfaq n\u00eb procesor\u00ebt Intel Core t\u00eb gjenerat\u00ebs s\u00eb gjasht\u00eb (Skylake) dhe ofron<\/a><\/noindex> serit e udh\u00ebzimeve q\u00eb lejojn\u00eb ndarjen e aplikacioneve t\u00eb nivelit p\u00ebrdorues n\u00eb zona t\u00eb mbyllura kujtese \u2014 enklava, p\u00ebrmbajtja e t\u00eb cilave nuk mund t\u00eb lexohet dhe ndryshohet as nga b\u00ebrthama dhe kodet q\u00eb ekzekutohen n\u00eb modulet ring0, SMM dhe VMM. D\u00ebrgimi i kontrollit n\u00eb kodin brenda enklav\u00ebs nuk \u00ebsht\u00eb i mundur me funksionet tradicionale t\u00eb kalimit dhe manipulimet me regjistrat dhe stekun \u2014 p\u00ebr d\u00ebrgimin e kontrollit n\u00eb enklav\u00eb p\u00ebrdoret nj\u00eb udh\u00ebzim i ri i krijuar posa\u00e7\u00ebrisht, i cili kryen kontrollin e autorizimeve. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, kodi i vendosur n\u00eb enklav\u00eb mund t\u00eb p\u00ebrdor\u00eb metoda klasike thirrjeje p\u00ebr t\u00eb aksesuar funksionet brenda enklav\u00ebs dhe nj\u00eb udh\u00ebzim t\u00eb ve\u00e7ant\u00eb p\u00ebr t\u00eb thirrur funksione t\u00eb jashtme. P\u00ebr t\u00eb mbrojtur nga sulmet harduerike, si\u00e7 \u00ebsht\u00eb lidhja me modulin DRAM, aplikohen kriptimi i kujtes\u00ebs s\u00eb enklav\u00ebs.<\/p>\n

<\/a><\/noindex><\/p>\n

Burimi: opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0433\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-14607), \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0443\u044e \u0447\u0435\u0440\u0435\u0437 \u043c\u0430\u043d\u0438\u043f\u0443\u043b\u044f\u0446\u0438\u0438 \u0441 \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u043e\u043c \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430\u043f\u0440\u044f\u0436\u0435\u043d\u0438\u0435\u043c \u0438 \u0447\u0430\u0441\u0442\u043e\u0442\u043e\u0439 \u0432 CPU \u0438\u043d\u0438\u0446\u0438\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0432\u0440\u0435\u0436\u0434\u0435\u043d\u0438\u0435 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u043c\u043e\u0433\u043e \u044f\u0447\u0435\u0435\u043a \u0441 \u0434\u0430\u043d\u043d\u044b\u043c\u0438, \u0432 \u0442\u043e\u043c \u0447\u0438\u0441\u043b\u0435 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u044f\u0445, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u044b\u0445 \u043f\u0440\u0438 \u0432\u044b\u0447\u0438\u0441\u043b\u0435\u043d\u0438\u044f\u0445 \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0430\u043d\u043a\u043b\u0430\u0432\u0430\u0445 Intel SGX. \u0410\u0442\u0430\u043a\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0430 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 Plundervolt, \u0438 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044e \u0434\u043e\u0431\u0438\u0442\u044c\u0441\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u0441\u0432\u043e\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u0435, \u0432\u044b\u0437\u0432\u0430\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-53866","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Plundervolt \u2014 nj\u00eb metod\u00eb e re sulmi ndaj procesor\u00ebve Intel q\u00eb prek teknologjin\u00eb SGX | ProHoster","description":"Kompania Intel l\u00ebshoi nj\u00eb p\u00ebrdit\u00ebsim t\u00eb mikrokuadrit q\u00eb eliminon","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/plundervolt-novyj-metod-ataki-na-protsessory-intel-zatragivayushhij-tehnologiyu-sgx","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Plundervolt \u2014 \u043d\u043e\u0432\u044b\u0439 \u043c\u0435\u0442\u043e\u0434 \u0430\u0442\u0430\u043a\u0438 \u043d\u0430 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u044b Intel, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e SGX | ProHoster","og:description":"\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Intel \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043c\u0438\u043a\u0440\u043e\u043a\u043e\u0434\u0430, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0449\u0435\u0433\u043e","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/plundervolt-novyj-metod-ataki-na-protsessory-intel-zatragivayushhij-tehnologiyu-sgx","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-11T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:48+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53866","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-24 09:05:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:16:28","updated":"2026-01-24 09:05:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53866","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=53866"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53866\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=53866"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=53866"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=53866"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}