SecDMP eliminates DMP side-channel leaks with minimal overhead
The claim
SecDMP prevents all data memory-dependent prefetcher leakage while preserving performance for public data
Published as: “SecDMP: Provably Secure Data Memory-Dependent Prefetching (Extended Version)”
So what
SecDMP enables safe use of performance-boosting DMPs in constant-time code without sacrificing security or incurring noticeable overhead.
The five-minute version
SecDMP eliminates all data-memory-dependent prefetcher (DMP) leakage while adding only about 0.36% average performance overhead and less than 0.5% chip-area increase. The authors prove formally that no secret information leaves the microarchitecture beyond a baseline without DMPs, and they confirm empirically on a RISC-V research core that all tested leakage classes are blocked. Evidence comes from a prototype implementation and benchmark suite, though secret-partitioning overhead can reach up to 4.8% in some cases.
What they found 1
- SecDMP blocks all DMP-related secret leakage in the evaluated prototypes.
“SecDMP correctly mitigates all DMP secret leakage.”
What undercuts it the paper’s own results
- the cost of secret partitioning ranges from -0.9 % to +4.8 %, with an average of +1.15 % over all DMPs and benchmarks.
- SECDMP’s average overhead is 0.36 %; the overhead is highest at 25 % work (at most 3.3 % on CoreMark-Salsa20 for CDP)
Stated limits 3
- Our SECDMP implementation uses a coarse-grained static memory partition, which comes with two main challenges.
- the specific mechanisms responsible for the Apple DMP’s Pref leakage reported by GoFetch [17] are unknown, so our model does not capture this leakage class.
- Our security proofs hold even if the current models are imprecise, as SECDMP’s guarantees are established over an abstract DMP model
What’s new here 4
- First hardware defense that blocks every identified DMP leakage class using secret-tagging.
- Formal security proof that SecDMP adds no extra leakage beyond a DMP-free baseline.
- Open-source implementations of multiple commercial and academic DMP designs on a RISC-V processor.
- Minimal performance (≈0.36% avg) and area (<0.5%) overhead compared to baseline.
Threat model stated by the source
Artifacts & methods 5
- SecDMPsystem
- Proteus RISC-V CPUsystem
- Open-source DMP implementations (Apple, Intel, CDP, IMP)primitive
- DMP-Bench benchmark suiteevaluation
- Formal security model and proofstheory