{"id":58569,"date":"2022-06-14T13:00:08","date_gmt":"2022-06-14T17:00:08","guid":{"rendered":"http:\/\/pappp.net\/?guid=1a2eb390448b062f727667885caa8281"},"modified":"2022-06-14T13:00:08","modified_gmt":"2022-06-14T17:00:08","slug":"a-new-vulnerability-in-intel-and-amd-cpus-lets-hackers-steal-encryption-keys","status":"publish","type":"post","link":"https:\/\/pappp.net\/?p=58569","title":{"rendered":"A new vulnerability in Intel and AMD CPUs lets hackers steal encryption keys"},"content":{"rendered":"<p class=\"syndicated-attribution\">Source: <a href=\"https:\/\/arstechnica.com\/?p=1860639\">Ars Technica<\/a><\/p>\n<div style=\"background-color : #fff7d5;\n\t\t\tborder-width : 1px; padding : 5px; border-style : dashed; border-color : #e7d796;margin-bottom : 1em; color : #9a8c59;\">Article note: Remember how only a couple years ago, architectural timing attacks causing data leakage were novel, instead of \"oh, yeah, of course, another one\"?\nThis one doesn't sound terribly dangerous.<\/div><div>\n<figure><img src=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2022\/06\/cpu-800x534.jpeg\" alt=\"A new vulnerability in Intel and AMD CPUs lets hackers steal encryption keys\" referrerpolicy=\"no-referrer\" loading=\"lazy\"\/><p><a href=\"https:\/\/cdn.arstechnica.net\/wp-content\/uploads\/2022\/06\/cpu.jpeg\" rel=\"noopener noreferrer\">Enlarge<\/a> <\/p>  <\/figure><div><a name=\"page-1\"><\/a><\/div>\n<p>Microprocessors from Intel, AMD, and other companies contain a newly discovered weakness that remote attackers can exploit to obtain cryptographic keys and other secret data traveling through the hardware, researchers said on Tuesday.<\/p>\n<p>Hardware manufacturers have long known that hackers can extract secret cryptographic data from a chip by measuring the power it consumes while processing those values. Fortunately, the means for exploiting <a href=\"https:\/\/en.wikipedia.org\/wiki\/Power_analysis\" rel=\"noopener noreferrer\">power-analysis attacks<\/a> against microprocessors is limited because the threat actor has few viable ways to remotely measure power consumption while processing the secret material. Now, a team of researchers has figured out how to turn power-analysis attacks into a different class of <a href=\"https:\/\/en.wikipedia.org\/wiki\/Side-channel_attack\" rel=\"noopener noreferrer\">side-channel exploit<\/a> that's considerably less demanding.<\/p>\n<h2>Targeting DVFS<\/h2>\n<p>The team discovered that dynamic voltage and frequency scaling (DVFS)&mdash;a power and thermal management feature added to every modern CPU&mdash;allows attackers to deduce the changes in power consumption by monitoring the time it takes for a server to respond to specific carefully made queries. The discovery greatly reduces what's required. With an understanding of how the DVFS feature works, power side-channel attacks become much simpler timing attacks that can be done remotely.<\/p><\/div><p><a href=\"https:\/\/arstechnica.com\/?p=1860639#p3\" rel=\"noopener noreferrer\">Read 9 remaining paragraphs<\/a> | <a href=\"https:\/\/arstechnica.com\/?p=1860639&amp;comments=1\" rel=\"noopener noreferrer\">Comments<\/a><\/p><div>\n<a href=\"http:\/\/feeds.feedburner.com\/~ff\/arstechnica\/index?a=eQlTPqa-llI:1FMyO_1inno:V_sGLiPBpWU\" rel=\"noopener noreferrer\"><img src=\"http:\/\/feeds.feedburner.com\/~ff\/arstechnica\/index?i=eQlTPqa-llI:1FMyO_1inno:V_sGLiPBpWU\" border=\"0\" referrerpolicy=\"no-referrer\" loading=\"lazy\"\/><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/arstechnica\/index?a=eQlTPqa-llI:1FMyO_1inno:F7zBnMyn0Lo\" rel=\"noopener noreferrer\"><img src=\"http:\/\/feeds.feedburner.com\/~ff\/arstechnica\/index?i=eQlTPqa-llI:1FMyO_1inno:F7zBnMyn0Lo\" border=\"0\" referrerpolicy=\"no-referrer\" loading=\"lazy\"\/><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/arstechnica\/index?a=eQlTPqa-llI:1FMyO_1inno:qj6IDK7rITs\" rel=\"noopener noreferrer\"><img src=\"http:\/\/feeds.feedburner.com\/~ff\/arstechnica\/index?d=qj6IDK7rITs\" border=\"0\" referrerpolicy=\"no-referrer\" loading=\"lazy\"\/><\/a> <a href=\"http:\/\/feeds.feedburner.com\/~ff\/arstechnica\/index?a=eQlTPqa-llI:1FMyO_1inno:yIl2AUoC8zA\" rel=\"noopener noreferrer\"><img src=\"http:\/\/feeds.feedburner.com\/~ff\/arstechnica\/index?d=yIl2AUoC8zA\" border=\"0\" referrerpolicy=\"no-referrer\" loading=\"lazy\"\/><\/a>\n<\/div>","protected":false},"excerpt":{"rendered":"<p>Enlarge   <\/p>\n<p>Microprocessors from Intel, AMD, and other companies contain a newly di&#8230;<\/p>\n<p> <a href=\"https:\/\/pappp.net\/?p=58569\">Continue reading <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[226],"tags":[],"class_list":["post-58569","post","type-post","status-publish","format-standard","hentry","category-news-2"],"_links":{"self":[{"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/posts\/58569","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=58569"}],"version-history":[{"count":0,"href":"https:\/\/pappp.net\/index.php?rest_route=\/wp\/v2\/posts\/58569\/revisions"}],"wp:attachment":[{"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=58569"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=58569"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pappp.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=58569"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}