Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 1 Nov 2016 09:10:43 +0100
From: Pavel Machek <>
To: Ingo Molnar <>
Cc: Mark Rutland <>, Kees Cook <>,
	Peter Zijlstra <>,
	Arnaldo Carvalho de Melo <>,
	kernel list <>,
	Ingo Molnar <>,
	Alexander Shishkin <>,
	"" <>
Subject: Re: rowhammer protection [was Re: Getting
 interrupt every million cache misses]


> * Pavel Machek <> wrote:
> > I'm not going to buy broken hardware just for a test.
> Can you suggest a method to find heavily rowhammer affected hardware? Only by 
> testing it, or are there some chipset IDs ranges or dmidecode info that will 
> pinpoint potentially affected machines?

Testing can be used.
. It finds faults at 1 of 2 machines here (but takes half an
hour). Then, if your hardware is one of ivy/sandy/haswell/skylake, can be used for much faster
attack (many flips a second).

Unfortunately, what I have here is:

cpu family     : 6
model	       	 : 23
model name	 : Intel(R) Core(TM)2 Duo CPU     E7400  @ 2.80GHz
stepping	 : 10
microcode	 : 0xa07

so rowhammerjs/native is not available for this system. Bit mapping
for memory hash functions would need to be reverse engineered for more
effective attack.

Best regards,
(cesky, pictures)

Download attachment "signature.asc" of type "application/pgp-signature" (182 bytes)

Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.