GoFetch: A side-channel attack on Apple Silicon

Mar 23, 2024 - Last update: Sep 5, 2024

Visual Ehrmanntraut

CEO

Caution

UPDATE: It was discovered that the CPU has a chicken bit to disable DMPs. So it is fixable.

This is not fixable via software update.

GoFetch: Breaking Constant-Time Cryptographic Implementations Using Data Memory-Dependent Prefetchers gofetch.fail

A new microarchitectural side-channel attack exploiting data memory-dependent prefetchers in Apple silicons.

Tags:

• Public hazard
• Vulnerability
• Apple Silicon

polyfill.io domain attempted a supply chain attack