Zen and the Art of Microcode Hacking - Why to not use CMAC as a hash

bughunters.google.com

cross-posted to:
reverse@lemmy.ml

Zen and the Art of Microcode Hacking - Why to not use CMAC as a hash

bughunters.google.com

Natanael@infosec.pub to Cryptography @ Infosec.pub@infosec.pubEnglish · 10 days ago

cross-posted to:
reverse@lemmy.ml

Blog: Zen and the Art of Microcode Hacking

bughunters.google.com

This blog post covers the full details of EntrySign, the AMD Zen microcode signature validation vulnerability recently discovered by the Google Security team.

You must log in or register to comment.

Chat

Cryptography @ Infosec.pub@infosec.pub

crypto@infosec.pub

Create a post

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !crypto@infosec.pub

Questions, answers, discussions, and literature on the theory and practice of cryptography

Rules (longer version here)

Stick to cryptography / infosec
Be a good netizen - be kind, act in good faith, maintain high quality, don’t mislead
Link directly to original sources
Don’t use us to cheat on challenges or tests!
Crypto review requests must show the algorithm
CTF / challenges and puzzles must use modern crypto
Avoid making duplicate posts
All use of AI / LLM and their prompts MUST be disclosed in your submissions and comments

##Related resources;

Reddit cryptography forums 1 & 2; /r/crypto /r/cryptography
Cryptology ePrint archive
Discussion site for ePrint papers
Libera Chat’s IRC:s #crypto - (IRC protocol URL)
Metzdowd cryptography mailing list
Randombit cryptography mailing list
StackExchange cryptography community

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

8 users / day
20 users / week
20 users / month
20 users / 6 months
1 local subscriber
426 subscribers
35 Posts
2 Comments
Modlog