A cache attack turns shared processor memory into a spy. A malicious program watches how quickly selected code or data can be reread, revealing which parts a victim’s cryptographic computation recently used. section 13.4
A typical attack proceeds in three steps:
- Share a machine with the victim, such as a cloud host running multiple virtual servers. section 13.4
- Evict selected portions of a shared cryptographic library from the cache. section 13.4
- Measure rereading time: a slow access suggests the victim did not use the portion, while a fast access suggests it repopulated the cache. section 13.4
Shared cryptographic service
A malicious virtual server monitors cache lines used by an OpenSSL-based service. Repeated timing measurements produce a computation trace resembling a power trace, which can expose secret-dependent behavior. section 13.4
