Secure, Precise, and Fast Floating-Point Operations on x86 Processors

on YouTube ↗29m

" summary

Claims a practical defense that closes floating point side channels on x86 while preserves precision of non‑secure executions by combining exploitation of microarchitectural behaviors with novel compiler transformations, implements a runtime/compile stack to mute timing and state leaks, measures closure of more side channels than prior work, and reports low overhead with an order of magnitude faster cost on a set of microkernels compared to the previous best solution.

AI-written summary · about

" chapters (6)

1. 0:00Introduction
2. 4:50Floating-point instructions
3. 10:01Side-channel attacks
4. 17:02Validation and performance
5. 23:17Security implications
6. 27:39Secure flight operations

" related talks

• 01h 01mTutorial: Side-Channel Attacks and Transient Execution Vulnerab...Allison Randal, Giorgos Christou · RISC-V Summit 2022
• 24mShielding Software From Privileged Side-Channel AttacksXiaowan Dong · USENIX Security '18
• 46mRethinking Architectures and Abstraction for a World Where Security Improvements Matter More than Performance GainsPaul Kocher · USENIX Security '18
• 17mSecuring High-performance RISC V-Processors from Time SpeculationChris Celio · 8th RISC-V Workshop Barcelona 2018
• 01h 03mBPF and Spectre: Mitigating transient execution attacksDaniel Borkmann · PriSC 2022
• 14mProtecting cryptography code from timing vulnerabilitiesTim McLean · StarCon 2018
• 30mProactive Software Defense against Side Channel AttacksKristen Accardi · Linux Security Summit North America 2018
• 35mSingle Instruction Multiple Data Leaks in Cutting-edge CPUs, AKA DownfallDaniel Moghimi · Black Hat USA 2023