May 5, 2026
Goals
- Learn about the internal workings of OpenAI triton in order to develop an attack.
What I worked on
- Learned a few things about Triton and its intermediate representations.
- Improved the state of the current Rowhammer setup.
Key Insights
- There is no instruction encoding involved in all the compilation stages before SASS generation.
- IRs generated before SASS are just plain text hence cannot be successfully corrupted via Rowhammer.
- Since instructions in IRs cannot be corrupted it would be more useful to generate corrupted IR all together.
Questions / Confusions
- I have figure out which portion of LLVM code is responsible for mapping LLVM IR to ptx so that I can change some instructions according to my choosing.
Ideas / Hypotheses
- In this end if nothing works I’ll just go ahead by attacking the software caches used for JIT compilation.
Papers / Resources
None
Next Steps
- Go deeper into LLVM code generation.
Introspection
- Today I felt challenged after a very long time.