SgxPectre: Stealing Intel Secrets From SGX Enclaves via Speculative Execution

Abstract

The speculative execution of side-channel vulnerabilities in microarchitecture processors has raised concerns about the security of Intel's Software Guard eXtensions (SGX). We present SgxPectre attacks, the SGX variants of Spectre attacks, which exploit speculative execution vulnerabilities to subvert the confidentiality of SGX enclaves; evaluate Intel's existing countermeasures against SgxPectre attacks; and discuss security implications.