The DOI matches its Crossref record; 11 of the 11 references it cites were found in a registry or an index.
Cache Attacks on Intel SGX
Abstract
For the first time, we practically demonstrate that Intel SGX enclaves are vulnerable against cache-timing attacks. As a case study, we present an access-driven cache-timing attack on AES when running inside an Intel SGX enclave. Using Neve and Seifert's elimination method, as well as a cache probing mechanism relying on Intel PMC, we are able to extract the AES secret key in less than 10 seconds by investigating 480 encrypted blocks on average. The AES implementation we attack is based on a Gladman AES implementation taken from an older version of OpenSSL, which is known to be vulnerable to cache-timing attacks. In contrast to previous works on cache-timing attacks, our attack is executed with root privileges running on the same host as the vulnerable enclave. Intel SGX, however, was designed to precisely protect applications against such root-level attacks. As a consequence, we show that SGX cannot withstand its designated attacker model when it comes to side-channel vulnerabilities. To the contrary, the attack surface for side-channels increases dramatically in the scenario of SGX due to the power of root-level attackers, for example, by exploiting the accuracy of PMC, which is restricted to kernel code.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
Cache Attacks and Countermeasures: The Case of AES
Osvik, D. A., Shamir, A., & Tromer, E. (2006) · Lecture Notes in Computer Science · doi:10.1007/11605805_1 · Cited by 1,352
(2016) · IACR Cryptology ePrint Archive · Cited by 1,288
Innovative instructions and software model for isolated execution
McKeen, F., Alexandrovich, I., Berenzon, A., Rozas, C. V., Shafi, H., Shanbhogue, V., & Savagaonkar, U. R. (2013) · Proceedings of the 2nd International Workshop on Hardware and Architectural Support for Security and Privacy · doi:10.1145/2487726.2488368 · Cited by 1,095
Controlled-Channel Attacks: Deterministic Side Channels for Untrusted Operating Systems
Xu, Y., Cui, W., & Peinado, M. (2015) · 2015 IEEE Symposium on Security and Privacy · doi:10.1109/sp.2015.45 · Cited by 713
VC3: Trustworthy Data Analytics in the Cloud Using SGX
Schuster, F., Costa, M., Fournet, C., Gkantsidis, C., Peinado, M., Mainar-Ruiz, G., & Russinovich, M. (2015) · 2015 IEEE Symposium on Security and Privacy · doi:10.1109/sp.2015.10 · Cited by 595
Shielding applications from an untrusted cloud with Haven
Baumann, A., Peinado, M., & Hunt, G. C. (2014) · Operating Systems Design and Implementation · doi:10.5555/2685048.2685070 · Cited by 359
Malware Guard Extension: Using SGX to Conceal Cache Attacks
Schwarz, M., Weiser, S., Gruss, D., Maurice, C., & Mangard, S. (2017) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-60876-1_1 · Cited by 339
Advances on Access-Driven Cache Attacks on AES
Neve, M., & Seifert, J.-P. (2007) · Lecture Notes in Computer Science · doi:10.1007/978-3-540-74462-7_11 · Cited by 179
AsyncShock: Exploiting Synchronisation Bugs in Intel SGX Enclaves
Weichbrodt, N., Kurmus, A., Pietzuch, P., & Kapitza, R. (2016) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-45744-4_22 · Cited by 173
Software Grand Exposure: SGX Cache Attacks Are Practical
Brasser, F., Müller, U., Dmitrienko, A., Kostiainen, K., Čapkun, S., & Sadeghi, A. (2017) · TUbilio (Technical University of Darmstadt) · Cited by 140
Cited by
Ekiden: A Platform for Confidentiality-Preserving, Trustworthy, and Performant Smart Contracts
Cheng, R., Zhang, F., Kos, J., He, W., Hynes, N., Johnson, N., Juels, A., Miller, A., & Song, D. (2019) · 2019 IEEE European Symposium on Security and Privacy (EuroS&P) · doi:10.1109/eurosp.2019.00023 · Cited by 431
Malware Guard Extension: Using SGX to Conceal Cache Attacks
Schwarz, M., Weiser, S., Gruss, D., Maurice, C., & Mangard, S. (2017) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-60876-1_1 · Cited by 339
On Security Analysis of Proof-of-Elapsed-Time (PoET)
Chen, L., Xu, L., Shah, N., Gao, Z., Lu, Y., & Shi, W. (2017) · Lecture Notes in Computer Science · doi:10.1007/978-3-319-69084-1_19 · Cited by 351
Leaky Cauldron on the Dark Land: Understanding Memory Side-Channel Hazards in SGX
Wang, W., Chen, G., Pan, X., Zhang, Y., Wang, X., Bindschaedler, V., Tang, H., & Gunter, C. A. (2017) · Proceedings of the 2017 ACM SIGSAC Conference on Computer and Communications Security · doi:10.1145/3133956.3134038 · Cited by 320
SgxPectre: Stealing Intel Secrets from SGX Enclaves Via Speculative Execution
Chen, G., Chen, S., Xiao, Y., Zhang, Y., Lin, Z., & Lai, T. H. (2019) · 2019 IEEE European Symposium on Security and Privacy (EuroS&P) · doi:10.1109/eurosp.2019.00020 · Cited by 319
Metadata
- Authors
- Götzfried, J., Eckert, M., Schinzel, S., & Müller, T.
- Venue
- Proceedings of the 10th European Workshop on Systems Security
- Publisher
- ACM
- Published
- 2017-04-23
- Pages
- 1-6
- OpenAlex
- W2606774910
- Cited by
- 351
- References
- 11
- FWCI
- 20.58
- Type
- conference paper
- Language
- en
- Open access
- closed
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review
How to cite
Cite CoChat for the checks on this page, and the paper for its own findings.
- This page
- CoChat. (2026). Citation check: Cache Attacks on Intel SGX. https://app.cochat.ai/papers/10.1145/3065913.3065915
- The paper
- Götzfried, J., Eckert, M., Schinzel, S., & Müller, T. (2017). Cache Attacks on Intel SGX. Proceedings of the 10th European Workshop on Systems Security. https://doi.org/10.1145/3065913.3065915
Data sources
Bibliographic data: Semantic Scholar, OpenAlex, Crossref.
Contains information from the Semantic Scholar Academic Graph Datasets, made available under the ODC Attribution License (ODC-BY 1.0).
Semantic Scholar’s data is described in: Kinney, R., et al. (2023). The Semantic Scholar Open Data Platform. arXiv:2301.10140.
