4 ms·
Not unless you break RSA, which would be much more of an accomplishment than working out how microcode works.
by marcan_42 5y ago
Not unless you break RSA, which would be much more of an accomplishment than working out how microcode works.
- AnimalMuppet 5y agoFrom the article: > As a matter of fact, several vulnerabilities in Intel ME have been discovered in the past. Among others, Ermolov, Sklyarov, and Goryachy described a method to extract the secret key that is used inside the CPU to decrypt microcode updates, which also led to the possibility of executing your own microcode on the CPU or reading Intel's microcode. So you don't have to break RSA. You just have to use the private key to derive the public key, which I believe is do-able.
- spockz 5y agoEncryption and signing are two different things both using rsa keys. The public key used for encryption does not need to be part of the same key pair as the private key used for signing. Not sure whether this is the case here.
- SAI_Peregrinus 5y agoAlso they talk about a secret key, not a private key. That means it's likely using symmetric key encryption, with RSA for signing (and maybe to update the symmetric key a la RSA-KEM). This is normal, nobody does direct asymmetric message encryption.