May 5, 2026

Goals

  • Learn about the internal workings of OpenAI triton in order to develop an attack.

What I worked on

  • Learned a few things about Triton and its intermediate representations.
  • Improved the state of the current Rowhammer setup.

Key Insights

  • There is no instruction encoding involved in all the compilation stages before SASS generation.
  • IRs generated before SASS are just plain text hence cannot be successfully corrupted via Rowhammer.
  • Since instructions in IRs cannot be corrupted it would be more useful to generate corrupted IR all together.

Questions / Confusions

  • I have figure out which portion of LLVM code is responsible for mapping LLVM IR to ptx so that I can change some instructions according to my choosing.

Ideas / Hypotheses

  • In this end if nothing works I’ll just go ahead by attacking the software caches used for JIT compilation.

Papers / Resources

  • None

Next Steps

  • Go deeper into LLVM code generation.

Introspection

  • Today I felt challenged after a very long time.