CIPHERH: Automated Detection of Ciphertext Side-channel Vulnerabilities in Cryptographic Implementations

Deng, Sen1; Li, Mengyuan2; Tang, Yining1; Wang, Shuai3; Yan, Shoumeng4; Zhang, Yinqian1

2023

32nd USENIX Security Symposium

PROCEEDINGS OF THE 32ND USENIX SECURITY SYMPOSIUM

AUG 09-11, 2023

null,Anaheim,CA

SUITE 215, 2560 NINTH ST, BERKELEY, CA 94710 USA

USENIX ASSOC

["The ciphertext side channel is a new type of side channels that exploits deterministic memory encryption of trusted execution environments (TEE). It enables the adversary with read accesses to the ciphertext of the encrypted memory, either logically or physically, to compromise cryptographic implementations protected by TEEs with high fidelity. Prior studies have concluded that the ciphertext side channel is a severe threat to not onlyAMD SEV-SNP, where the vulnerability was first discovered, but to all TEEs with deterministic memory encryption.","In this paper, we propose CIPHERH, a practical framework for automating the analysis of cryptographic software and detecting program points vulnerable to ciphertext side channels. CIPHERH is designed to perform a practical hybrid analysis in production cryptographic software, with a speedy dynamic taint analysis to track the usage of secrets throughout the entire program and a static symbolic execution procedure on each \"tainted\" function to reason about ciphertext side-channel vulnerabilities using symbolic constraint. Empirical evaluation has led to the discovery of over 200 vulnerable program points from the state-of-the-art RSA and ECDSA/ECDH implementations from OpenSSL, MbedTLS, andWolfSSL. Representative cases have been reported to and confirmed or patched by the developers."]

第一 ; 通讯

英语

EI ; CPCI-S

Computer Science

Computer Science, Information Systems ; Computer Science, Interdisciplinary Applications ; Computer Science, Theory & Methods

WOS:001066451507004

Web of Science

1.Southern University of Science and Technology, China
2.The Ohio State University, United States
3.Hong Kong University of Science and Technology, Hong Kong
4.The Ant Group, China

Deng, Sen,Li, Mengyuan,Tang, Yining,et al. CIPHERH: Automated Detection of Ciphertext Side-channel Vulnerabilities in Cryptographic Implementations[C]. SUITE 215, 2560 NINTH ST, BERKELEY, CA 94710 USA:USENIX ASSOC,2023.