IAIK/transientfail

Stars
168
Rank 225,507 (Top 5 %)
Language
C
License
zlib License
Created over 5 years ago
Updated 8 months ago

IAIK/transientfail

IAIK

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Website and PoC collection for transient execution attacks

Transient Fail

Transient Fail is a project that gathers different proof-of-concept implementations of Transient Execution Attacks. It was originally developed for our Usenix 2019 paper

A Systematic Evaluation of Transient Execution Attacks and Defenses by Canella, Van Bulck, Schwarz, Lipp, von Berg, Ortner, Piessens, Evtyushkin and Gruss

Content

This project provides two different things:

In the docs folder, we provide the source for the content of the transient.fail website.
In the pocs folder, we provide our proof-of-concept implementations as well as two libraries required for them. Libcache is a small library that provides all the required functionality for time measurement, flushing and loading values, TSX transactions and so on. Libpte is a fork of PTEditor developed by Michael Schwarz and allows manipulation of paging structures via a Linux kernel module.

Status

Transient Fail is under active development as we add new proof-of-concepts that we discover during our research. We invite everybody who wants to contribute to do so via pull requests.

Compilers and Operating Systems

So far, we only support Linux with gcc on x86 and ARMv8. Therefore, we have only tested them on such platforms, but welcome any feedback and pull requests on other platforms.

Literature

meltdown

This repository contains several applications, demonstrating the Meltdown bug.

ZombieLoad

Proof-of-concept for the ZombieLoad attack

rowhammerjs

Rowhammer.js - A Remote Software-Induced Fault Attack in JavaScript

armageddon

This repository contains tools to perform modern cache attacks on ARM.

CJAG

CJAG is an open-source implementation of our cache-based jamming agreement.

KAISER

Kernel Address Isolation to have Side-channels Efficiently Removed

sgxrop

The code to the SGX-ROP paper

drama

This repository contains examples of DRAMA reverse-engineering and side-channel attacks

flush_flush

This repository contains examples of Flush+Flush cache attacks

ChromeZero

Google Chrome extension implementing JavaScript Zero

cache_template_attacks

This repository contains several tools to perform Cache Template Attacks

merkle-tree

A C implementation of a dynamically resizeable binary SHA-256 hash tree (Merkle Tree).

sweb

SWEB Educational OS

AEPIC

ios-analysis

Automated Binary Analysis on iOS

Picnic

Optimized implementation of the Picnic signature scheme

prefetch

This repository contains several tools to perform Prefetch Side-Channel Attacks

SLUBStick

jstemplate

JavaScript Template Attack proof-of-concept implementation

hybrid-HE-framework

msrevelio

flipfloyd

Tools for "Another Flip in the Wall"

secure-block-device

The Secure Block Device Library is a software library that applies cryptographic confidentiality and integrity protection, including data freshness, to arbitrary block device like storage mechanisms.

SnailLoad

interruptjs

Practical Keystroke Timing Attacks in Sandboxed JavaScript

pairings_in_c

C library for bilinear pairings

memsec

Framework for building transparent memory encryption and authentication solutions

CollidePower

keydrown

Eliminating Keystroke Timing Attacks

gzkbpp

Implementation of the ZKB++ proof system

Chestnut

coco-alma

CocoAlma is an execution-aware tool for formal verification of masked implementations

ascon_hardware

Hardware implementations of the authenticated encryption design ASCON

flecc_in_c

FLECC_IN_C is a FLexible Elliptic Curve Cryptography library written IN C

ProcHarvester

ProcHarvester - Fully Automated Analysis of Procfs Side-Channel Leaks on Android

drawio2tikz

drawio2tikz - a tool to translate drawio xml files to readable and adaptable tikz code

Donky

fish-begol

Implementation of the Fish and Begol signature schemes

halfdouble

marvellous-attacks

Attacks on Jarvis and Friday

Jenny

SCAnDroid

Memory-Compression-Attacks

Memory Compression Attacks

data-gui

sgxjail

ios-analysis-llvmslicer

LayeredBinaryTemplating

Layered Binary Templating

CoronaHeatMap

CryptoSlice

Static Analysis of Cryptography in Android Applications

wolfSSL-DoS

Proof of concept for denial of service attack on wolfSSL's DTLS server implementation.

FLARE

coco-ibex

CryptoTL

CacheSim

CSIRowhammer

CSI:Rowhammer - Cryptographic Security and Integrity against Rowhammer

CrySIL

LVI-NULLify

contextlight

The PoC for ConTExT-light

rebecca

REBECCA is a tool for the formal verification of masked cryptographic hardware implementations that, given the netlist of a masked hardware circuit, determines if a correct separation between shares is preserved throughout the circuit.

libdropit

Proof-of-concept implementation of DropIt

daps-dl

Short DAPS from ECDSA in OpenSSL

TBIBS

Time-bound identity-based signatures (TBIBΣ) for Short-Lived Forward-Secure Delegation in TLS

romulush_collisions

Picnic-FPGA

FPGA implementation of Picnic and LowMC

spearv

rainier-signatures

bnpp_helium_signatures

minefield

trusted-location-based-services

Prototype 1, Prototype 2 and base components for Trusted Location Based Services on Android devices.

Remote-Memory-Deduplication-Attacks

Remote Page Deduplication Attacks

ios-analysis-dagger

servas

sgxjail-sdk

Implementation of SGXJail in the Linux SGX SDK

banquet-signature-variants

mimc-analysis

MPC-Accumulator

DefectsInDepth