Intel INTEL-SA-00289: Plundervolt

We present #plundervolt TL;DR First ever fault injection attack on Intel SGX enclaves. Abuses an undocumented software-based interface to undervolt the CPU. Extract full crypto keys and trigger memory safety violations in bug-free code. Read the paper at https://t.co/xfrFtNcQGE pic.twitter.com/ozuCF4Vzhh

— Jo Van Bulck (@jovanbulck) December 10, 2019

This is the Plundervolt website: https://t.co/hGQaPQm8Gt

Videos included.

There's also a PoC on GitHub: https://t.co/S40IFSTvg7 pic.twitter.com/818EXsAr92

— Catalin Cimpanu (@campuscodi) December 10, 2019