Secure, Precise, and Fast Floating-Point Operations on x86 Processors
Ashay Rane, Calvin Lin, and Mohit Tiwari, The University of Texas at Austin
Floating-point computations introduce several side channels. This paper describes the first solution that closes these side channels while preserving the precision of non-secure executions. Our solution exploits microarchitectural features of the x86 architecture along with novel compilation techniques to provide low overhead.
Because of the details of x86 execution, the evaluation of floating-point side channel defenses is quite involved, but we show that our solution is secure, precise, and fast. Our solution closes more side channels than any prior solution. Despite the added security, our solution does not compromise on the precision of the floating-point operations. Finally, for a set of microkernels, our solution is an order of magnitude more efficient than the previous solution.
USENIX is committed to Open Access to the research presented at our events. Papers and proceedings are freely available to everyone once the event begins. Any video, audio, and/or slides that are posted after the event are also free and open to everyone. Support USENIX and our commitment to Open Access.
BibTeX
@inproceedings {197255,
author = {Ashay Rane and Calvin Lin and Mohit Tiwari},
title = {Secure, Precise, and Fast {Floating-Point} Operations on x86 Processors},
booktitle = {25th USENIX Security Symposium (USENIX Security 16)},
year = {2016},
isbn = {978-1-931971-32-4},
address = {Austin, TX},
pages = {71--86},
url = {https://www.usenix.org/conference/usenixsecurity16/technical-sessions/presentation/rane},
publisher = {USENIX Association},
month = aug
}
