Formal Security Analysis of the AMD SEV-SNP Software Interface

Autor:	Paradžik, Petar, Derek, Ante, Horvat, Marko
Rok vydání:	2024
Předmět:	Computer Science - Cryptography and Security
Druh dokumentu:	Working Paper
Popis:	AMD Secure Encrypted Virtualization technologies enable confidential computing by protecting virtual machines from highly privileged software such as hypervisors. In this work, we develop the first, comprehensive symbolic model of the software interface of the latest SEV iteration called SEV Secure Nested Paging (SEV-SNP). Our model covers remote attestation, key derivation, page swap and live migration. We analyze the security of the software interface of SEV-SNP and formally prove that most critical secrecy, authentication, attestation and freshness properties do indeed hold in the model. Furthermore, we find that the platform-agnostic nature of messages exchanged between SNP guests and the AMD Secure Processor firmware presents a potential weakness in the design. We show how this weakness leads to formal attacks on multiple security properties, including the partial compromise of attestation report integrity, and discuss possible impacts and mitigations. Comment: This work has been submitted to the IEEE for possible publication
Databáze:	arXiv
Externí odkaz:	http://arxiv.org/abs/2403.10296 Zobrazit plný text záznamu View this record from Arxiv