SIGY: Breaking Intel SGX Enclaves with Malicious Exceptions & Signals

Fuente: arXiv
Saved in:
Bibliographic Details
Main Authors: Sridhara, Supraja, Bertschi, Andrin, Schlüter, Benedict, Shinde, Shweta
Format: Preprint
Published: 2024
Subjects:
Online Access:
Tags: Add Tag
No Tags, Be the first to tag this record!
_version_ 1866911848416149504
author Sridhara, Supraja
Bertschi, Andrin
Schlüter, Benedict
Shinde, Shweta
author_facet Sridhara, Supraja
Bertschi, Andrin
Schlüter, Benedict
Shinde, Shweta
contents User programs recover from hardware exceptions and respond to signals by executing custom handlers that they register specifically for such events. We present SIGY attack, which abuses this programming model on Intel SGX to break the confidentiality and integrity guarantees of enclaves. SIGY uses the untrusted OS to deliver fake hardware events and injects fake signals in an enclave at any point. Such unintended execution of benign program-defined handlers in an enclave corrupts its state and violates execution integrity. 7 runtimes and library OSes (OpenEnclave, Gramine, Scone, Asylo, Teaclave, Occlum, EnclaveOS) are vulnerable to SIGY. 8 languages supported in Intel SGX have programming constructs that are vulnerable to SIGY. We use SIGY to demonstrate 4 proof of concept exploits on webservers (Nginx, Node.js) to leak secrets and data analytics workloads in different languages (C and Java) to break execution integrity.
format Preprint
id arxiv_https___arxiv_org_abs_2404_13998
institution arXiv
publishDate 2024
record_format arxiv
spellingShingle SIGY: Breaking Intel SGX Enclaves with Malicious Exceptions & Signals
Sridhara, Supraja
Bertschi, Andrin
Schlüter, Benedict
Shinde, Shweta
Cryptography and Security
User programs recover from hardware exceptions and respond to signals by executing custom handlers that they register specifically for such events. We present SIGY attack, which abuses this programming model on Intel SGX to break the confidentiality and integrity guarantees of enclaves. SIGY uses the untrusted OS to deliver fake hardware events and injects fake signals in an enclave at any point. Such unintended execution of benign program-defined handlers in an enclave corrupts its state and violates execution integrity. 7 runtimes and library OSes (OpenEnclave, Gramine, Scone, Asylo, Teaclave, Occlum, EnclaveOS) are vulnerable to SIGY. 8 languages supported in Intel SGX have programming constructs that are vulnerable to SIGY. We use SIGY to demonstrate 4 proof of concept exploits on webservers (Nginx, Node.js) to leak secrets and data analytics workloads in different languages (C and Java) to break execution integrity.
title SIGY: Breaking Intel SGX Enclaves with Malicious Exceptions & Signals
topic Cryptography and Security
url https://arxiv.org/abs/2404.13998