New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing
By discreetly dropping writes to a server's memory, researchers have discovered a novel hardware attack known as DDRop that circumvents the memory security in Intel and AMD private computing. As a result, the processor continues to read previously encrypted data as if it were current.
A small circuit board known as an interposer must be inserted between the processor and a memory module by an attacker who already has control over the server's software and has momentary access to the system.
The interposer is built for less than $200. DDRop targets the hardware used by cloud services, such as AMD SEV-SNP, Intel TDX, and Intel Scalable SGX, to protect client data while it's being used, even from the cloud provider.
Even someone with physical access to a server can only see jumbled ...