defuse/flush-reload-attacks

Issues

• how the address values in flush-reload/original-from-authors/gpg.probe are determined.

  #72 opened a year ago by pengxinjun-stu
  4

• How to attack GnuPG or any other encryption algorithm with the Flush+Reload ?

  #65 opened 6 years ago by AbhijittDhavlle
  1

• How to "restricting the use of clflush to memory pages to which the process has write access and to memory pages to which the system allows clflush access"

  #71 opened 2 years ago by QuarkContainer
  4

• How to calculate bit error rate on RSA?

  #70 opened 3 years ago by Yujie-Cui
  0

• Download Debian 8 Jessie in dual boot

  #67 opened 4 years ago by Pavitra7
  0

• How to find number of cache hits and cache miss?

  #66 opened 6 years ago by AashikSharif
  2

• Error in compilation

  #64 opened 7 years ago by sangeethakarthik
  0

• Make the spy tool compilation fail with a useful error message if you try to compile it to any architecture other than x64

  #63 opened 7 years ago by defuse
  0

• Black Hat Slide Deck

  #34 opened 9 years ago by defuse
  3

• Prepare talk demo

  #49 opened 9 years ago by defuse
  1

• GUIDE: How to reproduce the experiments

  #47 opened 9 years ago by defuse
  7

• Re-add the automatically rediscovering links probes section to the guide

  #62 opened 9 years ago by defuse
  0

• Incorporate Cache Template Attacks

  #33 opened 9 years ago by defuse
  0

• Code reorganization / cleanup

  #50 opened 9 years ago by defuse
  1

• Put content on defuse.ca/bh2016

  #61 opened 9 years ago by defuse
  0

• Upload second copy to archive.org

  #52 opened 9 years ago by defuse
  2

• Cite Practical Memory Deduplication Attacks in Sandboxed Javascript

  #54 opened 9 years ago by defuse
  1

• Cite The Spy in the Sandbox paper

  #40 opened 9 years ago by defuse
  1

• Cite ARMageddon paper

  #35 opened 9 years ago by defuse
  1

• Add Cache Template Attacks to Related Work

  #32 opened 9 years ago by defuse
  8

• Skim CATalyst paper to make sure it's a good thing to point to for defense

  #53 opened 9 years ago by defuse
  1

• Skim Know Thy Neighbor: Crypto Library Detection in Cloud to see if it counts as a privacy-breaking side-channel

  #56 opened 9 years ago by defuse
  1

• Add Inferring User Routes and Locations using Zero-Permission Mobile Sensors to the list of side-channel privacy attacks

  #58 opened 9 years ago by defuse
  1

• Add No Pardon for the Interruption: New Inference Attacks on Android Through Interrupt Timing Analysis to the privacy-breaking side channel list

  #59 opened 9 years ago by defuse
  1

• Add On Subnormal Floating Point and Abnormal Timing to the cite list for the SVG filter pixel-extraction attack

  #57 opened 9 years ago by defuse
  1

• Skim Controlled-Channel Attacks: Deterministic Side Channels for Untrusted Operating Systems to see if it counts as a privacy-breaking side-channel

  #55 opened 9 years ago by defuse
  3

• See if "Controlled Channel Attacks" character recognition works with Flush+Reload

  #60 opened 9 years ago by defuse
  0

• Make sure things mentioned in introduction as future work are also in the Future Work section

  #46 opened 9 years ago by defuse
  1

• Choose the best latex document theme for Black Hat

  #45 opened 9 years ago by defuse
  2

• Rename the paper to match the Black Hat talk title?

  #51 opened 9 years ago by defuse
  1

• Do I put "University of Calgary", "Zcash", or "University of Waterloo" under my name/

  #48 opened 9 years ago by defuse
  2

• Give some characterization of which processors the attack works on

  #36 opened 9 years ago by defuse
  1

• Address the question "Does it work across VM?" in the paper

  #28 opened 9 years ago by defuse
  1

• Answer: Why links and not a more popular browser? in the paper

  #38 opened 9 years ago by defuse
  1

• Answer: Why only probe functions? in the paper

  #39 opened 9 years ago by defuse
  3

• Remind readers what S and T are inline

  #21 opened 9 years ago by defuse
  1

• Rephrase the last two paragraphs as actionable items

  #27 opened 9 years ago by defuse
  2

• Be consistent with success rate significant figures

  #22 opened 9 years ago by defuse
  1

• Rename "recovery" to "identification" to avoid mischaracterization/confusion

  #44 opened 9 years ago by defuse
  1

• Fix "Using a training set created on System 1 ... recover ... % of probe sequences"

  #24 opened 9 years ago by defuse
  1

• Remove John Aycock from the author list and add acknowledgement

  #43 opened 9 years ago by defuse
  2

• Add "(selected arbitrarily)" to "...using test inputs HAN040-E.pdf..."

  #23 opened 9 years ago by defuse
  1

• "These attacks are not directly damaging on their own" is incorrect

  #29 opened 9 years ago by defuse
  1

• Clarify cache specifications

  #41 opened 9 years ago by defuse
  4

• Mention CATalyst in the defense section?

  #42 opened 9 years ago by defuse
  2

• Remove claims to being first non-crypto cache attack

  #37 opened 9 years ago by defuse
  1

• Do we understand why it doesn't work on AMD yet?

  #26 opened 9 years ago by defuse
  6

• Look for new privacy-compromising non-crypto sidechannel attacks

  #25 opened 9 years ago by defuse
  1

• Ask USENIX if they allow concurrent submission to Black Hat

  #30 opened 9 years ago by defuse
  1

• Submit to USENIX WOOT

  #31 opened 9 years ago by defuse
  2