New hardware device can RAM into encrypted memory, expose your data

Hardware Interposer Exposes Flaw in Memory Encryption for Cloud VMs

Researchers unveiled DDRop, a low-cost interposer that drops DDR5 writes to bypass freshness checks in Intel TDX, SGX and AMD SEV-SNP. The attack requires physical access and privileged software control but enables plaintext memory reads and forged attestations in confidential VMs. Intel and AMD deem it outside their threat models. No simple fix exists.

DDR5 interposer attack exposes a gap in confidential computing

Researchers from KU Leuven, ETH Zurich, Durham University, and Google presented DDRop, a sub-$200 hardware interposer that drops DDR5 write operations and lets protected VMs continue on stale encrypted data. The attack was demonstrated against Intel...

New hardware device can RAM into encrypted memory, expose your data

Attackers would need physical access to the server to pull off the DDR5 trick