Intel® Software Guard Extensions (SGX) SW Development Guidance for Potential Bounds Check Bypass (CVE-2017-5753) Side Channel Exploits

Download

SGX documentation Software Guard Extensions Programming, Reference & Implementation Guides for Developers Programming, Reference & Implementation Guides for Developers

671114
2018-02-12
Public

Description

The SDK is being updated to address instances of “Bounds Check Bypass” [CVE20175753]. Stopping speculative execution in the SDK code is achieved by inserting LFENCE instructions where speculative execution might possibly lead to a secret-disclosing side channel. The following table lists the SDK changes and describes the corresponding bypass.

Usage instructions