Deirdre Connolly¹ ²Next up, 'TEE.fail: Breaking Trusted Execution Environments via Memory Bus Interposition', presented by Christina Garman and Daniel Genkin
#realworldcrypto
A scheme originally intended for disk encryption, not for RAM
#realworldcrypto
"Please don't crash, please don't crash—"
#realworldcrypto
It worked!
#realworldcrypto
Protections were removed to improve performance at customer demand 😭
#realworldcrypto
Q: You believe these protections only got removed bc of performance?
A: Yes I do, we talked to the engineers, they were so upset and repeatedly saying "I told you so" etc
#realworldcrypto
Next up, 'Migrating a Silicon Root of Trust to Post-Quantum Crypto', presented by Jade Philipoom and Hien Pham
#realworldcrypto
Goal is to PQ secure boot chain
#realworldcrypto
Q: Masking?
A: Software masking techniques; random probing model, trying to find the best combo of masking gadgets systematically
#realworldcrypto
Next up, 'Chypnosis: Undervolting-based Static Side-channel Attacks', presented by Shahin Tajik
#realworldcrypto
AMD security advisories 😏
#realworldcrypto
Next up, 'Kerckhoff's Principle in Practice: Addressing Security by Obscurity in Secure Hardware', presented by Jan Jancar
#realworldcrypto
Next up, 'Encryption in the microarchitectural world', presented by Ping-Lun Wang
#realworldcrypto
We can construct weird machines that work across processor classes, despite small changes in microarchitectures
#realworldcrypto
END OF DAY 1
#realworldcrypto
DAY 2
Next up is 'Deploying Research:
On Building and Shipping an
Anonymous Whistleblowing System', presented by Daniel
Hugenroth
#realworldcrypto
Implemented and deployed in the Guardian app on iOS and Android
#realworldcrypto
Really want boring simple cryptography with few assumptions; used Rust bc strong typing enabled misuse-resistant API design, and performance came for free
#realworldcrypto
How do we bootstrap trust in the org key? It helps to be part of a long-trusted publication
#realworldcrypto
Secure elements are great tools...except they don't expose auth attempt counters, nor enforce timeouts (they are reserved for the operating system)
#realworldcrypto
Q: Diff from SecureDrop?
A: Focused on the first contact experience; using Tor is a red flag/signal; we don't support sending files, pivot elsewhere for that
#realworldcrypto
Work with actual UX researchers; in-person user testing;
#realworldcrypto
Speaking of SecureDrop, next up is 'SecureDrop Next Generation: Lessons from a Decade of Deployment', presented by Rowen Shane, Shannon Veitch
#realworldcrypto