IOLeak - CPU Side Channel Attacks  

AMD ID:  AMD-SB-7042
Potential Impact: N/A
Severity: N/A

Summary

Researchers have provided AMD with a summary of relevant remarks and findings detailed in a paper titled “IOLeak Side-Channel Attack Exploiting CPU Frequency Scaling and I/O Latency.”

AMD reviewed the summary and believes this attack is similar to previously disclosed side-channel attacks such as “Hertzbleed” and that existing mitigation recommendations for such attacks remain applicable to mitigate the techniques described in the researchers’ summary.

AMD recommends that developers apply countermeasures such as masking^1,2,3, hiding³ or key-rotation.

1. "Synthesis of Masking Countermeasures against Side Channel Attacks" by Hassan Eldib and Chao Wang
2. "Masking against Side-Channel Attacks: a Formal Security Proof" by Emmanuel Prouff and Matthieu Rivain
3. "Power Analysis Attacks: Revealing the Secrets of Smart Cards", by Elisabeth Oswald, Stefan Mangard, and Thomas Popp