GoFetch: A side-channel attack on Apple Silicon

Mar 23, 2024 - Τελευταία ενημέρωση: Sep 5, 2024 - 1 λεπτά ανάγνωση - 54 λέξεις

Visual Ehrmanntraut

CEO

Προσοχή

UPDATE: It was discovered that the CPU has a chicken bit to disable DMPs. So it is fixable.

This is not fixable via software update.

GoFetch: Breaking Constant-Time Cryptographic Implementations Using Data Memory-Dependent Prefetchers gofetch.fail

A new microarchitectural side-channel attack exploiting data memory-dependent prefetchers in Apple silicons.

Ετικέτες:

• Public hazard
• Vulnerability
• Apple Silicon

Ο τομέας polyfill.io επιχείρησε μια επίθεση αλυσίδας εφοδιασμού