New Posts All Forums:Forum Nav:

[ARS] Virtual machine used to steal crypto keys from other VM on same server

Subscribe Search This Thread

Start a New Thread

post #1 of 5

11/8/12 at 12:34pm

Thread Starter

DuckieHo
4387 point(s) total

Joined: Nov 2006
Location: NJ
Posts: 58,801
Trader Rating: 77
Select All Posts By This User

http://arstechnica.com/security/2012/11/crypto-keys-stolen-from-virtual-machine/

Quote:

Piercing a key defense found in cloud environments such as Amazon's EC2 service, scientists have devised a virtual machine that can extract private cryptographic keys stored on a separate virtual machine when it resides on the same piece of hardware.

Hard to implement and relatively easy to mitigate... but still impressive that it was accomplished.

CPU	Motherboard	Graphics	RAM
i7 920 [4.28GHz, HT]	Asus P6T + Broadcom NetXtreme II	VisionTek HD5850 [900/1200] + Galaxy GT240	2x4GB G.Skill Ripjaw X [1632 MHz]
Hard Drive	OS	Monitor	Keyboard
Intel X25-M 160GB + 3xRAID0 500GB 7200.12	Window 7 Pro 64	Acer H243H + Samsung 226BW	XARMOR-U9BL
Power	Case	Mouse	Mouse Pad
Antec Truepower New 750W	Li Lian PC-V2100 [10x120mm fans]	Logitech G9	X-Trac Pro
View all

hide details

CPU	Motherboard	Graphics	RAM
i7 920 [4.28GHz, HT]	Asus P6T + Broadcom NetXtreme II	VisionTek HD5850 [900/1200] + Galaxy GT240	2x4GB G.Skill Ripjaw X [1632 MHz]
Hard Drive	OS	Monitor	Keyboard
Intel X25-M 160GB + 3xRAID0 500GB 7200.12	Window 7 Pro 64	Acer H243H + Samsung 226BW	XARMOR-U9BL
Power	Case	Mouse	Mouse Pad
Antec Truepower New 750W	Li Lian PC-V2100 [10x120mm fans]	Logitech G9	X-Trac Pro
View all

hide details

post #2 of 5

11/8/12 at 12:49pm

BBEG
*cough* Stock *cough*

Joined: Jul 2011
Location: What's a party van?
Posts: 1,368
Rep: 46 (Unique: 43)
Select All Posts By This User

Word. Well done gents.

On a related note, didn't another guy figure out how to access the primary OS via a compromised VM recently? What these folks can do is pretty incredible...

CPU	Motherboard	Graphics	Graphics
2600k	Asus ROG Maximus V Gene	AMD HD Radeon 7950	AMD HD Radeon 7950
RAM	Hard Drive	Cooling	Cooling
Samsung DDR3	Samsung 830	Alphacool Nexxxos UT60 120	Alphacool Nexxos XT45 360
Cooling	Cooling	Cooling	Cooling
Apogee Drive II	Aqua Computer or Watercool GPU blocks	Noiseblocker Multiframe M-12PS	Swiftech 8-way PWM splitter
OS	Case
Windows 7 Pro	Scratch Built
View all

CPU	Motherboard	Graphics	RAM
AMD Phenom II X4 955	Gigabyte 990FXA UD3	Gigabyte Radeon 7950 Windforce 3	Samsung 8GB wonder RAM
Hard Drive	Hard Drive	Optical Drive	Cooling
Samsung 830, 256GB	Western Digital Caviar Green, 1TB	Liteon ATAPI iHAS124 B	Noctua U12P SE2 w/ AP14s Push-Pull
OS	Monitor	Keyboard	Power
Windows 7 Professional	Hannspree 23" SL231 LED	Logitech G710+	Seasonic X650 Gold
Case	Mouse	Mouse Pad	Audio
Fractal Define R4	Razer Death Adder	Razer Vespula	Creative Inspire T5400 5.1
Audio
Creative Sound Blaster X-Fi XtremeGamer Fatal1t...
View all

CPU	Motherboard	Graphics	Graphics
2600k	Asus ROG Maximus V Gene	AMD HD Radeon 7970	AMD HD Radeon 7970
RAM	RAM	Hard Drive	Cooling
Samsung 8GB	Samsung 8GB	Samsung 840 Pro	Swiftech Apogee Drive II
Cooling	Cooling	Cooling	OS
Alphacool Nexxxos XT45 360 w/ NB Multiframes Pu...	Alphacool Nexxxos UT60 120 w/ NB Multiframes Pu...	Watercool Heatkiller GPU-X3 blocks	Windows 7 Ultimate NT
Monitor	Power	Case
HP ZR30W	Seasonic 860 Platinum	Scratch Built mATX Case
View all

hide details

CPU	Motherboard	Graphics	Graphics
2600k	Asus ROG Maximus V Gene	AMD HD Radeon 7950	AMD HD Radeon 7950
RAM	Hard Drive	Cooling	Cooling
Samsung DDR3	Samsung 830	Alphacool Nexxxos UT60 120	Alphacool Nexxos XT45 360
Cooling	Cooling	Cooling	Cooling
Apogee Drive II	Aqua Computer or Watercool GPU blocks	Noiseblocker Multiframe M-12PS	Swiftech 8-way PWM splitter
OS	Case
Windows 7 Pro	Scratch Built
View all

CPU	Motherboard	Graphics	RAM
AMD Phenom II X4 955	Gigabyte 990FXA UD3	Gigabyte Radeon 7950 Windforce 3	Samsung 8GB wonder RAM
Hard Drive	Hard Drive	Optical Drive	Cooling
Samsung 830, 256GB	Western Digital Caviar Green, 1TB	Liteon ATAPI iHAS124 B	Noctua U12P SE2 w/ AP14s Push-Pull
OS	Monitor	Keyboard	Power
Windows 7 Professional	Hannspree 23" SL231 LED	Logitech G710+	Seasonic X650 Gold
Case	Mouse	Mouse Pad	Audio
Fractal Define R4	Razer Death Adder	Razer Vespula	Creative Inspire T5400 5.1
Audio
Creative Sound Blaster X-Fi XtremeGamer Fatal1t...
View all

CPU	Motherboard	Graphics	Graphics
2600k	Asus ROG Maximus V Gene	AMD HD Radeon 7970	AMD HD Radeon 7970
RAM	RAM	Hard Drive	Cooling
Samsung 8GB	Samsung 8GB	Samsung 840 Pro	Swiftech Apogee Drive II
Cooling	Cooling	Cooling	OS
Alphacool Nexxxos XT45 360 w/ NB Multiframes Pu...	Alphacool Nexxxos UT60 120 w/ NB Multiframes Pu...	Watercool Heatkiller GPU-X3 blocks	Windows 7 Ultimate NT
Monitor	Power	Case
HP ZR30W	Seasonic 860 Platinum	Scratch Built mATX Case
View all

hide details

post #3 of 5

11/8/12 at 12:54pm

mott555
Programmer

Joined: Sep 2010
Location: The Show-Me State
Posts: 1,456
Rep: 104 (Unique: 97)
Trader Rating: 2
Select All Posts By This User

Wow. I like the comment from the source.

Quote:

I get up in the morning, look at myself in the mirror, and think "Hey there, you are a pretty bright person."

The I read about the people figuring out these kinds of attacks/issues and I think "Wow, I'm amazed I have enough intelligence to tie my own shoes."

I never thought stuff like this was possible, until I found that running Instruments (memory profiler for iPad apps) inside an OS X VM will cause all VMs on the machine to experience kernel panics.

CPU	Motherboard	Graphics	RAM
Core i5 2500k @ 4.6GHz	MSI P67A-G45 (B3)	Palit GeForce GTX 460 1 GB 840 MHz	16 GB G.SKILL Ripjaws X 1333MHz 7-7-7-21
Hard Drive	Hard Drive	Hard Drive	Optical Drive
Western Digital Caviar Black WD7501AALS 750 GB	Western Digital Green 1 TB	Samsung HD201UI 2 TB	Something cheap
OS	Monitor	Monitor	Keyboard
Windows 8 Professional 64-bit	ASUS VH222H 21.5"	Yamakasi Catleap Q270 (27" 1440p DVI-D input only)	Logitech K320
Power	Case	Mouse
Antec EarthWatts EA500	Silverstone TJ07-S	Razer Naga Hex
View all

hide details

CPU	Motherboard	Graphics	RAM
Core i5 2500k @ 4.6GHz	MSI P67A-G45 (B3)	Palit GeForce GTX 460 1 GB 840 MHz	16 GB G.SKILL Ripjaws X 1333MHz 7-7-7-21
Hard Drive	Hard Drive	Hard Drive	Optical Drive
Western Digital Caviar Black WD7501AALS 750 GB	Western Digital Green 1 TB	Samsung HD201UI 2 TB	Something cheap
OS	Monitor	Monitor	Keyboard
Windows 8 Professional 64-bit	ASUS VH222H 21.5"	Yamakasi Catleap Q270 (27" 1440p DVI-D input only)	Logitech K320
Power	Case	Mouse
Antec EarthWatts EA500	Silverstone TJ07-S	Razer Naga Hex
View all

hide details

post #4 of 5

11/8/12 at 12:59pm

Riou
sleepy cat mode

Joined: Aug 2009
Location: duffle bag
Posts: 13,686
Trader Rating: 9
Select All Posts By This User

Impressive. That is amazing they figured that one out.

CPU	Motherboard	Graphics	RAM
Core i5 2500k	Asus P8Z68-V Pro	MSI HD 6970	16 GB Samsung DDR3 1600 MHz
Hard Drive	Hard Drive	Hard Drive	Hard Drive
Crucial M4 128 GB	Samsung 830 256 GB	Hitachi Deskstar 5K3000 2 TB	Western Digital Black 1 TB
Cooling	OS	Keyboard	Power
Noctua NH-D14 SE2011	Windows 7 Professional 64-bit	CM Storm QF Rapid Cherry Blue	Antec TruePower New 750 W
Case	Mouse	Mouse Pad	Audio
Silverstone TJ09-B	Steelseries Sensei	Puretrak Talent	Asus Xonar DX
View all

hide details

CPU	Motherboard	Graphics	RAM
Core i5 2500k	Asus P8Z68-V Pro	MSI HD 6970	16 GB Samsung DDR3 1600 MHz
Hard Drive	Hard Drive	Hard Drive	Hard Drive
Crucial M4 128 GB	Samsung 830 256 GB	Hitachi Deskstar 5K3000 2 TB	Western Digital Black 1 TB
Cooling	OS	Keyboard	Power
Noctua NH-D14 SE2011	Windows 7 Professional 64-bit	CM Storm QF Rapid Cherry Blue	Antec TruePower New 750 W
Case	Mouse	Mouse Pad	Audio
Silverstone TJ09-B	Steelseries Sensei	Puretrak Talent	Asus Xonar DX
View all

hide details

post #5 of 5

11/8/12 at 9:12pm

Carniflex
1.7ghz

Joined: Jul 2010
Location: Tallinn
Posts: 2,387
Rep: 108 (Unique: 86)
Select All Posts By This User

That seem indeed impressive achivement.

CPU	Motherboard	Graphics	Graphics
AMD Phenom II X6 1055T	GA-870A-USB3	Club3D 7870 Eyefinity 6	XFX 6770 Eyefinity 5
RAM	RAM	RAM	RAM
A-Data 8GB	A-Data 8GB	A-Data 8GB	A-Data 8GB
Hard Drive	Hard Drive	Hard Drive	Hard Drive
Crucial M4 64 GB	SMG F1 640 GB	SMG F3 750 GB	WD Green 3 TB
Hard Drive	Optical Drive	Cooling	OS
Barracuda 3 TB	None	Custom Loop	Win 7 64 Pro
Monitor	Monitor	Keyboard	Power
DELL U2311H 3x	DELL U2312HM 2x	Thermaltake G-unit	Corsair TX-750
Case	Mouse	Mouse Pad	Audio
Revoltec fifty 3, heavily modded.	Logitech G700	3M	Logitech G35
View all

hide details

CPU	Motherboard	Graphics	Graphics
AMD Phenom II X6 1055T	GA-870A-USB3	Club3D 7870 Eyefinity 6	XFX 6770 Eyefinity 5
RAM	RAM	RAM	RAM
A-Data 8GB	A-Data 8GB	A-Data 8GB	A-Data 8GB
Hard Drive	Hard Drive	Hard Drive	Hard Drive
Crucial M4 64 GB	SMG F1 640 GB	SMG F3 750 GB	WD Green 3 TB
Hard Drive	Optical Drive	Cooling	OS
Barracuda 3 TB	None	Custom Loop	Win 7 64 Pro
Monitor	Monitor	Keyboard	Power
DELL U2311H 3x	DELL U2312HM 2x	Thermaltake G-unit	Corsair TX-750
Case	Mouse	Mouse Pad	Audio
Revoltec fifty 3, heavily modded.	Logitech G700	3M	Logitech G35
View all

hide details

Start a New Thread

Subscribe Search This Thread

New Posts All Forums:Forum Nav:

Return Home

Back to Forum: Software News

Forums
Industry News
Software News
[ARS] Virtual machine used to steal crypto keys from other VM on same server

I've used this headset extensively for MAG on PS3. The sounds were wonderful, the mic was crisp, and the ability to adjust peoples voice volume is absolutely invaluable. For $100 ( or less ) this...

The Pros The reason this card is one of the better non-Tahiti 7870s is because of Gigabyte's custom PCB. Gigabyte took the 7870 and replaced it's memory chips with Hynix memory so they perform a...

Crucial’s award-winning Ballistix and Ballistix Tracer are engineered to deliver the fastest, most reliable memory for gaming and performance enthusiasts. But why should the most hardcore gamers...

Gaming with the Sound Blaster Z is truly a spectacular experience. The Sound Blaster Z is an ideal all-round solution for your PC gaming and entertainment needs. It comes complete with the Sound...

Wow, I'm quite surprised that I am the first one to review this monitor. I probably won't be able to get all technical with this review, but I would like to write out what makes this a great...

Recent Reviews

[ARS] Virtual machine used to steal crypto keys from other VM on same server

Recent Discussions

Recent Reviews

New Articles

Featured Sponsors

Recent Reviews

[ARS] Virtual machine used to steal crypto keys from other VM on same server

Recent Discussions

Recent Reviews

New Articles