Code Encryption with Intel TME-MK for Control-Flow Enforcement
Martin Unterguggenberger, Lukas Lamster, Mathias Oberhuber, Simon Scherer, Stefan Mangard
ESORICS 2025
Info
BibTex
In this paper, we introduce a novel, fine-grained control-flow enforcement technique using Intel's TME-MK hardware encryption.
By encrypting individual functions our approach blocks unauthorized forward-edge control-flow transfers, improving upon the coarse protections of Intel CET/IBT.
The prototype toolchain enforces fine-grained CFI and supports secure library encryption, with low overhead on SPEC CPU2017 benchmarks.
@inproceedings{Unterguggenberger2025Code,
author = {Martin Unterguggenberger and Lukas Lamster and Mathias Oberhuber and Simon Scherer and Stefan Mangard},
booktitle = {{ESORICS}},
title = {{Code Encryption with Intel TME-MK for Control-Flow Enforcement}},
year = {2025}
}