New DDRop Attack Breaks Intel TDX and AMD SEV-SNP Confidential Computing

Researchers have discovered a new hardware attack called DDRop that compromises the memory protection in Intel and AMD confidential computing systems. This attack works by silently dropping writes to a server's memory, causing the processor to read old encrypted data as if it were current. The DDRop attack requires an attacker to have existing control over the server's software and brief physical access to insert a small circuit. This allows the attacker to manipulate the system's memory, effectively breaking the confidential computing protections offered by Intel TDX and AMD SEV-SNP. The attack exploits a vulnerability in the memory protection mechanisms of these systems.