AMD’s EPYC SEV encryption reportedly “SEVered” by German researchers
AMD’s EPYC SEV encryption reportedly “SEVered” by German researchers
In short, AMD’s SEV technology can ensure that virtual machines cannot be tampered with by the host OS, protecting them from data harvesting, malware and other attacks.Â
Fraunhofer AISEC, a German IT security and research firm, has claimed that they have found a way to work around AMD’s SEV technology, subverting AMD’s virtual machine encryption to access a copy of decrypted data. Like most major security holes in recent history, Fraunhofer has devised a clever name for their exploit, dubbing it “SEVered”.Â
Below is the abstract of Fraunhofer AISEC’s research paper, which states that the group have been able to “verify the effectiveness of SEVered” and that “SEVered neither requires physical access nor colluding virtual machines”. That being said, admin-level access is required to modify an EPYC system’s hypervisor, limiting the usability of this exploit. Regardless, it is worrying that such an attack is possible, as SEV is designed to prevent such attacks by isolating VM memory from host systems.Â
  AMD SEV is a hardware feature designed for the secure encryption of virtual machines. SEV aims to protect virtual machine memory not only from other malicious guests and physical attackers, but also from a possibly malicious hypervisor. This relieves cloud and virtual server customers from fully trusting their server providers and the hypervisors they are using.We present the design and implementation of SEVered, an attack from a malicious hypervisor capable of extracting the full contents of main memory in plaintext from SEV-encrypted virtual machines. SEVered neither requires physical access nor colluding virtual machines, but only relies on a remote communication service, such as a web server, running in the targeted virtual machine.
We verify the effectiveness of SEVered on a recent AMD SEV-enabled server platform running different services, such as web or SSH servers, in encrypted virtual machines. With these examples, we demonstrate that SEVered reliably and efficiently extracts all memory contents even in scenarios where the targeted virtual machine is under high load.
Â
 Â
 Â
Fraunhofer AISEC’s research paper goes into SEVered in great detail, revealing how the exploit can be used to seemingly extract the entire memory contents of virtual machines when SEV is active. The research group have also discussed potential mitigations within the paper, stating that they consider software-based countermeasures “insufficient” and that a hardware fix could come at a “high silicon cost”.Â
AMD has not made a public comment about SEVered at this time, though for now it looks like there is no guarantee that AMD can protect their EPYC processors from the exploit. Will AMD be able to address the exploit with new firmware, or will the issue remain until AMD releases new silicon?
You can join the discussion on AMD’s EPYC SEV encryption being reportedly “SEVered” by German researchers on the OC3D Forums.Â
Special thanks to BFBC2033 for helping us improve this article.Â