The number of executed instructions and their execution time can be measured by an attacker with interrupt capabilities.

Description

The number of executed instructions and their execution time can be measured by an attacker with interrupt capabilities.

CWE

CVE

Attack Surfaces

Interrupt Capabilities (MITRE EMB3D PID-11)

Attack Vectors

Code Execution (MITRE EMB3D TID-301)

Defenses

constant-time code, make instruction counts and latencies independent of secrets

disabling interrupts, Disable the attacker's interrupt capabilities

masking the latency, The execution time of instructions can be masked by applying an interrupt padding scheme