CLKscrew - Exposing the Perils of Security-Oblivious Energy Management

This talk presents CLKSCREW, a software-based fault attack that manipulates energy-management parameters to induce faults in security-critical code and undermine trusted execution environments. It examines timing faults, RSA signature verification, code emulation, and attack implementation without physical access or specialized fault-injection equipment.

Syllabus

Introduction
Timing Faults
Challenges
MDG File
Signature Verification
Code Emulation
Faulting Implementation
Faulting Sketch
Timing Anchor
Track Fault
Scatter Plot
Adaptive Delay
Summary
Remarks
Roundup
Disclosures
Intel SGX
RSA Attack
Why is it not random