754 matches found
sgx-step
A Practical Attack Framework for Precise Enclave Execution Control SGX-Step is an open-source framework to facilitate side-channel attack research on Intel x86 processors in general and Intel SGX platforms in particular. SGX-Step consists of an adversarial Linux kernel driver and a small user-spa...
IoT-Pentest-devices-and-purpose
IoT 渗透测试设备及其用途 - 2025 版 本文档概述了 2025 年用于 IoT 安全测试的最新工具和硬件，涵盖了不同的协议和技术。它包括前沿攻击、新发现的漏洞，以及功能增强的更新版硬件和软件工具。 目录 蓝牙 Zigbee Z-Wave WiFi 硬件 侧信道攻击 SCA 汽车安全 射频 NFC 和 RFID 2025 年最新漏洞 AI 增强安全测试 蓝牙 软件工具| 硬件工具| 用途| 2025 年更新 ---|---|---|--- BrakTooth PoC 增强版| ESP32-WROVER| 测试蓝牙漏洞（CVE-2021-28139 及其变种）| 增强的利用能力，更广...
In-Spectre-Meltdown
推测执行侧信道攻击检测工具 In-Spectre-Meltdown 本工具用于检测影响众多现代处理器和操作系统设计的推测执行侧信道攻击。CVE-2017-5754（熔断）和 CVE-2017-5715（幽灵）允许非特权进程窃取特权进程的机密信息。这些攻击提供了三种不同的方式突破 CPU 的数据保护措施，使攻击者能够读取本不应读取的数据。...
TID-The-Instant-Destroyer
TID — 即时销毁器 针对基于缓存的旁路攻击防护领域的独立安全研究。 概述 TID 是一种专用协议，旨在在使用后立即从 CPU 缓存层（$L1、L2$ 和 $L3$）中消除敏感数据残留（例如加密密钥）。它解决了数据在系统内存（RAM）中被擦除后仍存在于硬件结构中的关键安全漏洞。 主要成就 已验证的防御： 有效缓解 Flush+Reload 及类似的微架构旁路攻击。 可衡量的性能： 未受保护的访问： 78 CPU 周期（缓存命中）。 TID 保护的访问： 286 CPU 周期（缓存未命中）。 安全边际： 提供 3.7 倍延迟屏障 ，成功迷惑潜在攻击者。 硬件级精度： 利用优化的 CPU...
Fast Frame Rate Estimation in Electromagnetic Side-Channel Attacks on Public Systems
Frame refresh rate estimation is a fundamental step in identifying compromising harmonic frequencies in electromagnetic side-channel attacks. Methods based on discrete linear autocorrelation DLA are robust across different scenarios and require a computational complexity of $ON\log N$ for a signa...
A Simple Transformer Pipeline for Full-Key Side-Channel Attacks on Uncropped Datasets
Deep learning-based side-channel analysis has historically focused on single-byte targets and manually cropped traces, which risks discarding exploitable leakage. While recent work has proposed specialized architectures and resampling techniques to address this gap, the literature lacks a simple...
Anticipating Decoder Side-Channel Attacks in Fault-Tolerant Quantum Computers
As quantum computing emerges as an applied technology, there is a growing need to protect quantum computers against information security attacks. This work identifies a new class of side-channel attacks against fault-tolerant quantum computers, in which the syndrome data that is sent to the decod...
ARMOR-IMC: Adaptive Resource Mapping for Operational Robustness Via Secure In-Memory Computing
The massive data-movement overhead in traditional architectures has led to the adoption of In-Memory Computing IMC for energy-efficient Deep Neural Network DNN processing. By leveraging emerging devices like Spin-Orbit Torque Magnetic Tunnel Junctions SOT-MTJs, IMC bypasses the "memory wall" and...
WS-2013-0018
Python-rsa is vulnerable to side-channel attacks on decryption and signing...
GitHub Enterprise Server 安全漏洞
GitHub Enterprise Server is an open-source application developed by GitHub in the United States. It provides a scalable and easy-to-manage platform by allowing users to set their GitHub instances as virtual devices. Prior to version 3.21 of GitHub Enterprise Server, there was a security...
Origin Validation Error
Overview Affected versions of this package are vulnerable to Origin Validation Error during the intra-handshake attestation.. An attacker can impersonate a trusted service endpoint and gain unauthorized access to sensitive data or operations by extracting the ephemeral TLS private key through...
Red-Teaming Claude Opus and ChatGPT-Based Security Advisors for Trusted Execution Environments
Trusted Execution Environments TEEs e.g., Intel SGX and ArmTrustZone aim to protect sensitive computation from a compromised operating system, yet real deployments remain vulnerable to microarchitectural leakage, side-channel attacks, and fault injection. In parallel, security teams increasingly...
Trojan-Resilient NTT: Protecting against Control Flow and Timing Faults on Reconfigurable Platforms
Number Theoretic Transform NTT is the most essential component for polynomial multiplications used in lattice-based Post-Quantum Cryptography PQC algorithms such as Kyber, Dilithium, NTRU etc. However, side-channel attacks SCA and hardware vulnerabilities in the form of hardware Trojans may alter...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-003848)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-003848 advisory. kernel/bpf/verifier.c in the Linux kernel before 4.20.6 performs undesirable out-of-bounds speculation on pointer arithmetic in various cases, including cases of...
CVE-2022-26382
While the text displayed in Autofill tooltips cannot be directly read by JavaScript, the text was rendered using page fonts. Side-channel attacks on the text by using specially crafted fonts could have lead to this text being inferred by the webpage. This vulnerability affects Firefox 98...
CVE-2019-18222
The ECDSA signature implementation in ecdsa.c in Arm Mbed Crypto 2.1 and Mbed TLS through 2.19.1 does not reduce the blinded scalar before computing the inverse, which allows a local attacker to recover the private key via side-channel attacks...
PT-2025-48496
Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0, when deterministic ECDSA is enabled, use an RNG with insufficient entropy for blinding, which might allow an attacker to recover a private key via side-channel attacks if a victim signs the same message many times. For Mbed TLS, the fix...
Navigating the Dual-Use Nature and Security Implications of Reconfigurable Intelligent Surfaces in Next-Generation Wireless Systems
Reconfigurable intelligent surface RIS technology offers significant promise in enhancing wireless communication systems, but its dual-use potential also introduces substantial security risks. This survey explores the security implications of RIS in next-generation wireless networks. We first...
