Web Hack List

Collected research

Generic and Automated Drive-by GPU Cache Attacks from the Browser

Compute shaders in WebGPU let an ordinary web page build eviction sets and run a cache attack against a GPU's L2 cache with no user interaction. Automated across 11 desktop GPUs, it demonstrates inter-keystroke timing inference, recovery of a full AES key from a GPU encryption service in about six minutes, and a covert channel.

Record

Researcher
Lukas Giner, Roland Czerny, Christof Gruber, Fabian Rauscher, Andreas Kogler, Daniel De Almeida Braga and Daniel Gruss
Published by
rolandczerny.com
Topic
Browser

In the archive

Related sources

Tags

This page is the archive's own catalogue record. The research is the work of Lukas Giner, Roland Czerny, Christof Gruber, Fabian Rauscher, Andreas Kogler, Daniel De Almeida Braga and Daniel Gruss, first published at the original source. Preserved copies are kept so the citation survives its host; this one was last captured on .