Securing The Unseen: Vulnerability Research In Confidential Computing
summary
Google’s audits of AMD SEV‑SNP and Intel TDX find dozens of vulnerabilities, many fixed before launch, and publish detailed reports. Specifics include a fixed IV in AES‑CTR on persistent SAP storage that enables keystream recovery, stale IOTLB entries allowing DMA overwrites of private pages, and an NP‑seamloader IDT/GP‑fault trick that yields full ACM compromise. Analysis uses WitcherProof test vectors and a PCIe screamer device; most high‑impact bugs are remediated.
AI-written summary · about
chapters (12)
- 0:00Introduction to talk
- 3:15What is confidential computing
- 9:58AMD SEV-SNP overview
- 11:49AMD SEV-SNP audit methods
- 15:45AMD SEV-SNP key findings
- 21:31Intel TDX overview
- 27:08Intel TDX NPC monitor bug
- 34:15Intel TDX module review
- 35:40MSRs and uncore in TDX
- 42:19Intel TDX vulnerabilities summary
- 47:18Lessons from confidential computing
- 49:01Future of confidential computing
related talks
33mSecuring the Unseen: Vulnerability Research in Confidential Computing
36mEverybody is talking about Confidential Computing - the minimum Devs should know
42mProtecting the Linux Kernel from Confidential Computing Threats in Virtual Environments
44mAdvancements in Confidential Computing
51mExploiting Hardware Glitches And Side Channels In Perfect Software
25mThe Memory of a Meltdown
01h 16mClassic Vulnerabilities
37mIt's All About Trust: Why Confidential Computing Matters