3 ms·
That already exists with AMD SME and AMD SEV (https://en.wikipedia.org/wiki/Zen_(microarchitecture)#Enhanced_security_and_virtualization_support https://en.wiki
by cesarb 7y ago
That already exists with AMD SME and AMD SEV (https://en.wikipedia.org/wiki/Zen_(microarchitecture)#Enhanced_security_and_virtualization_support https://en.wikipedia.org/wiki/Zen_(microarchitecture)#Enhanc...). But to protect against bit flipping attacks like rowhammer you need authentication, not encryption, and I don't think these features authenticate the encrypted memory (since they would need extra memory to hold the authentication tag).
- deleted 7y ago[deleted]
- mjevans 7y agoThe parent post is probably thinking of the bit-scrambling involved in the encryption providing some form of protection.
- simcop2387 7y agoYea, it should prevent usable bitflips from hapoening. Instead you'd get complete corruption of a block
- vlovich123 7y agoBy authentication you mean some kind of HMAC? I guess that's fair. Still I figured that corrupting 1 bit in the encrypted output would corrupt the entire block & thus be very difficult to exploit.