Fine grain Cross-VM Attacks on Xen and VMware (AES)

• To: [email protected], [email protected]
• Subject: Fine grain Cross-VM Attacks on Xen and VMware (AES)
• From: [email protected] (Peter Gutmann)
• Date: Thu, 24 Apr 2014 04:19:30 +1200
• In-reply-to: <[email protected]>

Griffin Boyce <[email protected]> writes:

>'AES in a number popular cryptographic libraries including OpenSSL, PolarSSL
>and Libgcrypt are vulnerable to Bernsteinâ??s correlation attack when run in
>Xen and VMware virtual machines, the most popular VMs used by cloud service
>providers.'

That's just another proof of the inverse of Law #1 of the 10 Immutable Laws of
Security, "If a bad guy can persuade you to run his program on your computer,
itâ??s not your computer any more".  The inverse is the Immutable Law of Cloud
Computing Security, "If a bad guy can persuade you to run your program on his
computer, itâ??s not your program any more".

Peter.

• References:
  • Fine grain Cross-VM Attacks on Xen and VMware (AES)
    • From: [email protected] (Griffin Boyce)

• Prev by Date: regulation on cybersecurity
• Next by Date: regulation on cybersecurity
• Previous by thread: Fine grain Cross-VM Attacks on Xen and VMware (AES)
• Next by thread: [cryptography] The next gen P2P secure email solution
• Index(es):
  • Date
  • Thread