Place Protections at the Right Place: Targeted Hardening for Cryptographic Code against Spectre v1
Yiming Zhu, Wenchao Huang, Yan Xiong

TL;DR
This paper introduces LightSLH, a novel framework that employs a fixpoint algorithm for targeted hardening of cryptographic code against Spectre v1, reducing overhead and uncovering previously unknown security issues.
Contribution
The paper presents a new analysis framework with a fixpoint algorithm for precise Spectre vulnerability detection and targeted hardening, improving security with minimal overhead.
Findings
LightSLH achieves the lowest overhead among provable protections, with 0% overhead in half of the cases.
Discovered that compilers can introduce security risks overlooked by existing methods.
Memory access patterns in scatter-gather algorithms can leak secrets despite protections.
Abstract
Spectre v1 attacks pose a substantial threat to security-critical software, particularly cryptographic implementations. Existing software mitigations, however, often introduce excessive overhead by indiscriminately hardening instructions without assessing their vulnerability. We propose an analysis framework that employs a novel fixpoint algorithm to detect Spectre vulnerabilities and apply targeted hardening. The fixpoint algorithm accounts for program behavior changes induced by stepwise hardening, enabling precise, sound and efficient vulnerability detection. This framework also provides flexibility for diverse hardening strategies and attacker models, enabling customized targeted hardening. We instantiate the framework as LightSLH, which hardens program with provable security. We evaluate LightSLH on cryptographic algorithms from OpenSSL, Libsodium, NaCL and PQClean. Across all…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdvanced Optical Sensing Technologies · Image Enhancement Techniques · Analytical Chemistry and Sensors
