sort out clocksource and wall clock for VirtualBox to prevent Clock Correlation Attack
Open, NormalPublic
Actions

Assigned To

None

Authored By

	Patrick
	Nov 24 2015, 2:11 PM

Tags

Referenced Files

None

Subscribers

• WhonixQubes

Description

Clock Correlation Attack:
https://www.whonix.org/wiki/Dev/TimeSync#Clock_Correlation_Attack

Similar to tickets which are specific to other virtualizers.

Qubes: T389
KVM: T431

This ticket is for VirtualBox.

Perhaps split this ticket into sorting out clocksource and sorting out wall clock.

A user had issues with the whonixcheck pvclock test:
http://forums.whonix.org/t/recurring-time-error-within-gateway-11-under-virtualbox-5-error-unwanted-pvclock-kvm-clock-tsc-acpi-pm-detected/1671/7

Details

Impact: High

Related Objects

Mentioned Here: T389: make sure Qubes-Whonix has no access to clocksource=xen
T431: wall clock likely readable by VMs allowing Clock Correlation Attacks

Event Timeline

Patrick created this task.Nov 24 2015, 2:11 PM

Patrick raised the priority of this task from to Normal.

Patrick updated the task description. (Show Details)

Patrick added projects: VirtualBox, security, virtualizer.

Patrick set Impact to High.

Patrick added a subscriber: Patrick.

Herald added a project: Whonix. · View Herald TranscriptNov 24 2015, 2:11 PM

Herald added subscribers: • WhonixQubes, troubadour. · View Herald Transcript

Patrick renamed this task from sort out clocksource and wallclock for VirtualBox to sort out clocksource and wallclock for VirtualBox to prevent Clock Correlation Attack.Nov 24 2015, 2:18 PM

Patrick renamed this task from sort out clocksource and wallclock for VirtualBox to prevent Clock Correlation Attack to sort out clocksource and wall clock for VirtualBox to prevent Clock Correlation Attack.

Patrick updated the task description. (Show Details)

Patrick updated the task description. (Show Details)

Patrick updated the task description. (Show Details)Nov 24 2015, 6:47 PM