Recovering Information on the CVA6 RISC-V CPU with a Baremetal Micro-Architectural Covert Channel

Abstract

In this work, we study the micro architectural vulnerabilities of the open-source RISC-V CPU named CVA6. We build a realistic scenario for extracting information and propose an analysis on how to reduce the impact of noise on the attack, while staying as close as possible to hardware level through baremetal simulations.