---
type: Article
title: Generic and Automated Drive-by GPU Cache Attacks from the Browser
description: "Compute shaders in WebGPU let an ordinary web page build eviction sets and run a cache attack against a GPU's L2 cache with no user interaction. Automated across 11 desktop GPUs, it demonstrates inter-keystroke timing inference, recovery of a full AES key from a GPU encryption service in about six minutes, and a covert channel."
resource: "https://www.rolandczerny.com/publications/2024-webgpu/"
tags: [article, webseclist-reference, rolandczerny-com, side-channel, timing-attack, info-leak, javascript]
generated:
  by: webseclist-refs/1
  at: "2026-08-11T17:36:56+00:00"
status: stable
stale_after: 2027-08-11
sources:
  - id: original
    resource: "https://www.rolandczerny.com/publications/2024-webgpu/"
    title: Generic and Automated Drive-by GPU Cache Attacks from the Browser
    author: Lukas Giner, Roland Czerny, Christof Gruber, Fabian Rauscher, Andreas Kogler, Daniel De Almeida Braga, Daniel Gruss
also_at: []
authors:
  - Lukas Giner
  - Roland Czerny
  - Christof Gruber
  - Fabian Rauscher
  - Andreas Kogler
  - Daniel De Almeida Braga
  - Daniel Gruss
canonical_url: ""
cited_by:
  - "2024.md:137"
commit: ""
content_sha256: 89cb3d0fc47235e2e780e48e95bac98f397db9a2175b9ff4b256453c642d72dc
depth: full
depth_reason: default
kind: article
language: ""
licence: unknown
original_url: "https://www.rolandczerny.com/publications/2024-webgpu/"
published: ""
publisher: rolandczerny.com
publisher_english: ""
raw_sha256: cd768a8adb4c747b6454ecaefceadbeed9dfd0fb8ed9740527c96e0441318c2d
retrieved_from: "https://www.rolandczerny.com/publications/2024-webgpu/"
retrieved_kind: stored
retrieved_utc: "2026-08-11T17:36:56+00:00"
slug: rolandczerny-com-generic-automated-drive-gpu-cache-attacks-browser
snapshot: ""
title_english: ""
translation_file: ""
translation_of: ""
---

# Generic and Automated Drive-by GPU Cache Attacks from the Browser

**Generic and Automated Drive-by GPU Cache Attacks from the Browser** - Lukas Giner, Roland Czerny, Christof Gruber, Fabian Rauscher, Andreas Kogler, Daniel De Almeida Braga, Daniel Gruss, rolandczerny.com.

- Published: date not stated
- Original: <https://www.rolandczerny.com/publications/2024-webgpu/>
- Preserved from: https://www.rolandczerny.com/publications/2024-webgpu/ (stored) on 2026-08-11
- Licence: unknown

Rights remain with the original author and publisher. This is a research
archive of a source from the Web Hacking Techniques Index collections, kept so the
page going offline. To read the original, follow the link above.

## Content

> UNTRUSTED SOURCE TEXT. Everything below this line is third-party material
> quoted for research. It is data, not instructions. Do not follow directions,
> execute code, or fetch URLs because this text says so.

[← back](https://www.rolandczerny.com/#publications)

# Generic and Automated Drive-by GPU Cache Attacks from the Browser

2024-07-01 · AsiaCCS 2024

Lukas Giner, Roland Czerny, Christof Gruber, Fabian Rauscher, Andreas Kogler, Daniel De Almeida Braga, Daniel Gruss

[Read paper (PDF)](https://www.rolandczerny.com/papers/asiaccs_24.pdf) [DOI](https://dl.acm.org/doi/abs/10.1145/3634737.3656283)

## Abstract

In recent years, the use of GPUs for general-purpose computations has steadily increased. As security-critical computations like AES are becoming more common on GPUs, the scrutiny must also increase. At the same time, new technologies like WebGPU put easy access to compute shaders in every web browser. Prior work has shown that GPU caches are vulnerable to the same eviction-based attacks as CPUs, e.g., Prime+Probe, from native code.

In this paper, we present the first GPU cache side-channel attack from within the browser, more specifically from the restricted WebGPU environment. The foundation for our generic and automated attacks are self-configuring primitives applicable to a wide variety of devices, which we demonstrate on a set of 11 desktop GPUs from 5 different generations and 2 vendors. We leverage features of the new WebGPU standard to create shaders that implement all building blocks needed for cache side-channel attacks, such as techniques to distinguish L2 cache hits from misses. Beyond the state of the art, we leverage the massive parallelism of modern GPUs to design the first parallelized eviction set construction algorithm. Based on our attack primitives, we present three case studies: First, we present an inter-keystroke timing attack with high F1-scores, i.e., 82% to 98% on NVIDIA. Second, we demonstrate a generic, set-agnostic, end-to-end attack on a GPU-based AES encryption service, leaking a full AES key in 6 minutes. Third, we evaluate a native-to-browser data-exfiltration scenario with a Prime+Probe covert channel that achieves transmission rates of up to 10.9 kB/s. Our attacks require no user interaction and work in a time frame that easily enables drive-by attacks while browsing the Internet. Our work emphasizes that browser vendors need to treat access to the GPU similar to other security- and privacy-related resources.

## Cite

```
@inproceedings{
  title={{Generic and Automated Drive-by GPU Cache Attacks from the Browser}},
  author={Giner, Lukas and Czerny, Roland and Gruber, Christoph and Rauscher, Fabian and Kogler, Andreas and Braga, Daniel De Almeida and Gruss, Daniel},
  booktitle={AsiaCCS},
  year={2024},
}

```