Hardware-level Apple Silicon vulnerability can leak cryptographic keys

Apple is having its own Meltdown/Spectre moment with a new side-channel vulnerability found in the architecture of Apple Silicon processors that gives malicious apps the ability to extract cryptographic keys.  Dubbed GoFetch by the team that discovered it, the issue stems from how processors equipped with data memory-dependent prefetchers (DMPs) – eg, Apple Silicon chips and 13th generation and newer Intel architectures – implement certain cryptographic operations, in some cases very common ones.  DMPs are designed to improve prefetching of irregularly accessed data by also considering the content of system memory alongside memory addresses. This isn’t without its problems, though:

Source: The Register

 


Date:

Categorie(s):

Tag(s):